Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
File:                     94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json)
Hash identifier:          s+BsxvGDrwTonmaV4+2VEdNEtn3qI8iBJxBJcdLuFFo=
Subject key identifier:   94:63:FB:56:98:E9:F6:A1:7E:15:35:DA:4B:58:43:A3:80:8B:68:17
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Certificate issuer:       /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial:       60B3D5D8831CDE94D4808F4DB3765C3AFCCAD020
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
Manifest number:          08
Signing time:             Tue 12 May 2026 21:00:46 +0000
Manifest this update:     Tue 12 May 2026 20:55:46 +0000
Manifest next update:     Wed 13 May 2026 21:48:46 +0000
Files and hashes:         1: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: Ghvm5MxqGc2K25qz29VuaIb8N+ZSqJDx69SRauaKBxc=)
                          2: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b3:d5:d8:83:1c:de:94:d4:80:8f:4d:b3:76:5c:3a:fc:ca:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
        Validity
            Not Before: May 12 20:55:46 2026 GMT
            Not After : May 13 21:48:46 2026 GMT
        Subject: CN=9463FB5698E9F6A17E1535DA4B5843A3808B6817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:88:dc:4b:c5:15:95:c4:1f:b1:18:a4:67:
                    8d:0d:53:d8:82:c8:d4:6f:bf:1b:e7:21:c4:6b:98:
                    b6:fd:25:ca:74:7b:2b:29:fc:07:99:d3:c7:04:61:
                    52:18:16:e3:6e:98:b9:ed:75:41:75:88:b6:97:d5:
                    ae:29:5b:59:2e:15:c6:d3:a4:55:95:f2:37:ac:b6:
                    3f:29:fc:bb:0e:2b:05:19:bd:28:ff:79:4c:ed:73:
                    09:49:99:e8:a9:b0:0e:79:fe:aa:46:a3:93:3e:40:
                    b5:74:19:a3:e6:ca:0f:84:ab:0e:39:48:29:64:c3:
                    79:fa:3f:b6:d2:5f:e0:1e:70:2e:3c:bc:5a:1a:35:
                    e3:9f:b9:6a:23:fe:94:c6:3b:bc:3c:50:5f:89:96:
                    5e:da:c8:e1:49:39:8f:c4:fb:a1:29:57:42:bb:84:
                    0f:6a:fb:66:22:b5:f0:90:a8:cf:85:08:c9:b3:dd:
                    e3:1f:1e:19:b8:3a:a2:c1:d2:9b:d7:bd:ba:ab:7c:
                    ff:7e:93:70:8b:5c:e5:2b:b0:f3:60:ab:f1:51:d9:
                    93:eb:17:c0:2c:05:27:d8:3d:04:d9:18:b2:44:68:
                    f6:12:72:bf:25:83:37:0d:04:89:e7:3a:73:22:b0:
                    76:63:fb:9e:70:64:10:5f:f4:21:c0:f0:71:8a:e7:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:FB:56:98:E9:F6:A1:7E:15:35:DA:4B:58:43:A3:80:8B:68:17
            X509v3 Authority Key Identifier:
                keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:9b:95:d2:fe:ba:03:7e:16:4c:8c:e6:df:f4:68:ec:ec:
         64:58:2e:6a:94:c8:0a:c1:04:4f:47:af:f4:5a:38:65:ee:b5:
         1d:d9:0a:c7:03:53:23:92:49:95:c9:b0:88:9b:79:74:c8:b0:
         80:2d:28:d5:8e:f6:33:65:06:63:72:ea:c9:a4:ae:3c:fc:cf:
         00:e9:c2:ed:4a:7d:fd:86:53:93:0b:45:df:96:98:70:87:2c:
         dd:5d:e0:57:7e:1e:5a:8d:d3:eb:0a:2e:4e:b6:61:44:59:91:
         59:b4:28:a7:de:19:33:68:4a:1b:8e:90:ee:dd:36:ed:aa:4f:
         61:7f:1b:3e:56:99:b9:7d:75:85:29:00:06:e7:cb:b0:ce:fe:
         2e:53:46:3b:46:e2:57:6c:e4:c7:13:cd:fd:1e:41:95:17:19:
         06:64:ae:12:96:7f:96:9c:38:5a:8b:f1:0c:bb:01:6e:b9:24:
         c7:e3:83:e9:8c:e4:29:65:00:d3:50:e9:62:50:33:41:be:98:
         65:b5:bb:74:d1:25:7f:4a:7e:e5:79:f0:36:cc:c9:a0:f5:93:
         39:ad:29:77:5a:cc:a4:7b:1f:77:71:73:0b:02:84:61:27:91:
         9f:14:39:aa:eb:8d:4b:0e:3c:5f:4e:5f:d3:65:02:72:ef:f0:
         5a:75:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:41 2026 by rpki-client