Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
File:                     C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json)
Hash identifier:          DxQ+VVzQPfsKlHimcg1WnWu8RuOOjrqB8D/AUe2pu0Y=
Subject key identifier:   79:83:54:1A:EB:BB:35:67:5A:CA:1C:FD:B7:32:9D:2E:2A:25:A6:68
Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A
Certificate issuer:       /CN=C05947A00A72638CD4BE67C4BF53224357777E0A
Certificate serial:       39BAE6A2929DAC4EDCAD0769DC0FB1F0D7747B6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
Manifest number:          08
Signing time:             Wed 13 May 2026 00:40:49 +0000
Manifest this update:     Wed 13 May 2026 00:35:49 +0000
Manifest next update:     Thu 14 May 2026 01:14:49 +0000
Files and hashes:         1: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: 6jr+0maJEL7PgByRq93uUJaZEX+NtWc0la9d+N6Iy38=)
                          2: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ba:e6:a2:92:9d:ac:4e:dc:ad:07:69:dc:0f:b1:f0:d7:74:7b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A
        Validity
            Not Before: May 13 00:35:49 2026 GMT
            Not After : May 14 01:14:49 2026 GMT
        Subject: CN=7983541AEBBB35675ACA1CFDB7329D2E2A25A668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:70:8f:85:02:94:61:68:ad:23:d0:b7:ad:
                    59:d9:af:cf:56:7f:df:e0:73:fb:ec:d1:56:2a:af:
                    2a:54:37:af:8e:3b:d7:be:3f:6b:eb:e1:21:e2:de:
                    b4:14:db:b6:8b:60:8b:d1:3d:74:81:71:b5:51:08:
                    ec:1d:0a:9a:ae:c4:99:aa:b8:bf:b6:a4:f0:a0:54:
                    64:94:5a:51:7b:2e:e9:97:97:51:53:ae:c1:e8:80:
                    51:f7:4d:18:da:88:21:a8:74:13:09:04:b7:3c:a9:
                    84:15:8d:52:61:4d:30:b3:6e:f1:4d:19:93:26:68:
                    6c:3b:b8:04:e4:42:79:f0:7d:10:00:c7:39:e6:af:
                    58:4c:4c:00:ef:23:34:50:1e:98:e6:c0:96:cc:80:
                    de:9a:6d:6b:ca:27:23:a6:30:a2:5a:00:26:1c:99:
                    dd:20:f8:fc:74:6a:cd:e6:43:dd:e4:17:eb:f2:59:
                    75:ea:ba:a6:ec:4c:08:cd:f6:de:d3:5f:5d:e6:5b:
                    20:f6:5c:d9:66:ee:a5:29:c8:24:f5:5e:37:bf:01:
                    2f:27:10:44:97:bd:15:bc:1c:9f:bf:11:2c:11:00:
                    b1:ab:bb:a6:02:a9:47:6f:59:f1:ba:6e:18:e1:56:
                    a0:6a:cb:fa:a3:8b:ad:00:0d:f2:ea:f1:6e:bf:43:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:54:1A:EB:BB:35:67:5A:CA:1C:FD:B7:32:9D:2E:2A:25:A6:68
            X509v3 Authority Key Identifier:
                keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:03:93:c6:eb:17:c6:96:04:d4:aa:3d:c1:d5:fe:8d:5a:
         e9:8a:22:54:49:ee:ed:39:41:ef:c6:ea:83:cf:e0:12:91:09:
         9d:81:68:13:40:94:3b:54:d9:5b:ed:84:5f:32:2f:ca:ea:ca:
         f4:50:c9:5e:cf:f2:11:3e:8a:2b:28:e8:fa:60:89:93:3e:b9:
         de:cd:c5:97:61:60:77:6f:87:75:49:9b:ee:45:58:86:08:14:
         d2:3b:cf:d8:01:ad:b2:ca:2d:5f:8f:9e:64:86:04:2e:03:e7:
         1f:c0:0f:b4:88:43:e5:f4:a7:44:38:00:5a:87:cd:bd:a2:41:
         e0:cc:5e:6a:91:ef:0c:5b:c6:0d:a0:35:f6:eb:5b:ee:60:3f:
         ea:1a:08:21:4b:17:3e:c4:1d:0b:c9:79:1f:65:0e:0b:8c:cd:
         11:c9:40:70:00:bc:24:d2:ec:01:21:47:5e:bb:06:5b:b1:d6:
         44:2f:60:cb:20:9e:99:c1:f9:69:ce:40:e0:5b:c0:69:30:cb:
         79:4b:b6:15:4d:8b:39:a5:49:76:40:64:00:6e:c0:f2:76:b8:
         68:86:26:8e:57:cf:fd:4d:8b:c7:01:da:bf:17:17:c0:e8:6b:
         83:e5:5f:61:d3:17:e4:3d:a2:0a:da:36:4b:33:9a:dd:7c:97:
         2b:2b:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:13 2026 by rpki-client