Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
File:                     B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json)
Hash identifier:          A5/f2NGrvSW5gUqeG8P6wT4Ja0v08R7+WbCnRHIVdVA=
Subject key identifier:   88:C7:7A:06:48:96:53:6A:E5:53:C4:E1:73:3E:4F:64:20:EF:41:35
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Certificate issuer:       /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial:       33C20A0A576DD88CC3C45764ECBEE79BF1B57886
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
Manifest number:          24
Signing time:             Wed 13 May 2026 13:06:04 +0000
Manifest this update:     Wed 13 May 2026 13:01:04 +0000
Manifest next update:     Thu 14 May 2026 14:50:04 +0000
Files and hashes:         1: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=)
                          2: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=)
                          3: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=)
                          4: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=)
                          5: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=)
                          6: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=)
                          7: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: TFqgG28k9jILECnynq9hLZ20pTGJ++7nhka3nNhttJQ=)
                          8: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=)
                          9: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=)
                          10: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=)
                          11: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c2:0a:0a:57:6d:d8:8c:c3:c4:57:64:ec:be:e7:9b:f1:b5:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
        Validity
            Not Before: May 13 13:01:04 2026 GMT
            Not After : May 14 14:50:04 2026 GMT
        Subject: CN=88C77A064896536AE553C4E1733E4F6420EF4135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:35:3a:42:3a:ad:56:9a:b3:4e:e9:68:b5:
                    8f:a2:d6:f3:29:b7:bc:42:c9:8b:2b:96:21:17:16:
                    95:93:6b:3b:75:ab:60:60:00:29:6e:e5:f5:a2:34:
                    11:5f:9e:0c:1a:bf:48:f6:31:c1:b3:f8:16:4a:85:
                    2c:de:39:e6:0f:9a:14:ba:41:a2:94:fd:12:8d:0e:
                    e2:ee:28:05:9f:4c:d6:4e:65:5d:a3:f4:9c:92:b9:
                    a8:1e:73:15:e1:c9:55:15:12:80:c1:bb:b0:b2:2e:
                    17:0d:ea:b4:65:97:e5:87:dc:f6:dc:6b:97:e7:4e:
                    35:7b:b1:51:1a:a4:fc:51:98:e5:7a:12:1a:6e:da:
                    65:71:a5:75:16:5d:47:4d:df:d9:d6:8d:60:75:f1:
                    9a:7a:08:65:c3:bc:b1:0e:b3:ec:89:48:e9:e1:40:
                    92:b1:e0:39:7d:46:65:73:c8:ee:f2:b7:56:7a:cb:
                    92:27:f7:24:0d:cf:5a:df:b7:be:6e:79:6a:a9:d8:
                    be:42:cd:fe:20:90:ce:63:a1:be:a8:da:33:20:ff:
                    94:91:47:2c:08:58:7b:69:26:3a:0b:af:c3:bb:27:
                    62:cf:f5:e5:69:e2:cb:ad:34:fc:bc:41:ed:38:4a:
                    7b:6c:c5:25:76:01:14:85:99:ee:35:13:12:bc:ad:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:7A:06:48:96:53:6A:E5:53:C4:E1:73:3E:4F:64:20:EF:41:35
            X509v3 Authority Key Identifier:
                keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:38:97:07:34:9c:ad:66:63:8c:b7:89:0c:f3:a6:eb:87:
         eb:89:33:25:31:96:2c:f6:23:33:f9:6f:55:99:5c:1e:ef:32:
         8b:c5:79:5a:46:3e:cf:4f:b5:e6:c1:8d:2b:8c:c0:0d:7b:d6:
         c6:29:b4:61:20:d6:3b:5a:a5:81:9d:e4:d1:60:8d:97:ba:9b:
         de:3f:be:53:e4:a8:e5:f1:1b:3b:9b:b6:6b:87:36:36:e6:01:
         5d:15:88:ce:15:32:cb:b5:4c:4e:27:ca:0c:4e:b0:f1:44:03:
         54:e8:ec:81:2c:c0:f2:b8:8d:cb:39:e7:5c:e7:b5:92:ec:1f:
         29:f6:c2:54:9b:82:29:c4:74:bb:70:26:4c:94:38:f2:bb:9d:
         e5:ad:f9:f4:b6:c9:70:c5:93:15:cc:b2:a9:13:34:24:a2:42:
         bf:38:dd:6f:85:83:4a:92:4c:6e:97:7f:e4:56:40:3b:3d:73:
         fc:5b:b4:5f:52:e4:ad:2d:2a:de:78:aa:89:5f:50:af:52:1a:
         b2:78:05:02:35:f1:4c:75:ce:1d:fa:cb:12:bc:81:f0:ab:06:
         28:90:43:6e:7b:3d:d4:f3:31:45:6c:7a:1b:e0:87:cd:c6:16:
         49:f8:9d:21:85:09:4e:52:6e:2b:27:7d:9f:9a:f8:ce:88:30:
         4d:6a:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:31 2026 by rpki-client