Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
File:                     90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft (raw, json)
Hash identifier:          kSSWIxMdv0A0BHXeGyPPZPtNgAiHKiTVDlrt5D4Hn48=
Subject key identifier:   0A:D1:D7:BB:36:EB:FB:62:F3:46:ED:87:DF:B7:76:4E:2F:91:E0:C3
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Certificate issuer:       /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial:       142825CF406A5E5C2CC193D0684386397DB364EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
Manifest number:          2B
Signing time:             Wed 13 May 2026 09:11:29 +0000
Manifest this update:     Wed 13 May 2026 09:06:29 +0000
Manifest next update:     Thu 14 May 2026 11:05:29 +0000
Files and hashes:         1: 323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa (hash: HoPmirMEOyLSslW6ouFEpRs6yyPTIWLGvLps3vROopY=)
                          2: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl (hash: xyVz2gYO5OgtWAbKP+Jc/cQk7YefFRwOARNnKyuivJg=)
                          3: 3130332e322e3231322e302f32322d3232203d3e2030.roa (hash: DBKugX2MYIF9SYWsR5seKnfCHI7xr0bJ1FNQKr/vUTM=)
                          4: 323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa (hash: zxF4XU+UOfSOXjCPiWH/E42CXAhpEyNIu3eRTX0S5UQ=)
                          5: 3130332e3135342e34302e302f32342d3234203d3e2030.roa (hash: KdrHvwQk8nxve0BpMjmEeeLjjuXH0AbCtFI4Dmn9T70=)
                          6: 3231392e3233352e3136302e302f32302d3230203d3e2030.roa (hash: 1nPeGfLABslTZ2oPU8PRot9eHASMEKk+JuqWJ0C/upY=)
                          7: 3130332e3135342e34312e302f32342d3234203d3e20313339313336.roa (hash: 3adNaNFaGezO68izVkNolCCcbSv8TuCpn3o+grXodQM=)
                          8: 323430363a353334303a3a2f33322d3332203d3e20313339313336.roa (hash: CpJc6IZGrJww5ORAqOAIJSEWedSN07vUHgD7v72aGEE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:25:cf:40:6a:5e:5c:2c:c1:93:d0:68:43:86:39:7d:b3:64:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
        Validity
            Not Before: May 13 09:06:29 2026 GMT
            Not After : May 14 11:05:29 2026 GMT
        Subject: CN=0AD1D7BB36EBFB62F346ED87DFB7764E2F91E0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:5a:34:52:d2:96:46:48:35:36:bb:e6:9c:
                    6f:31:c1:bb:83:21:1d:ba:f4:a7:7c:25:3f:3b:4f:
                    75:eb:31:3b:f8:b4:8c:c0:5f:b9:bd:1b:a8:68:68:
                    84:43:06:c6:2b:99:a9:f3:e1:df:49:2c:58:6c:5f:
                    a4:ac:c4:fd:6c:96:73:61:37:ce:ae:eb:43:c5:83:
                    bd:23:d4:1f:3c:5b:bc:8e:50:1f:54:20:42:0f:56:
                    72:dc:e5:4e:4a:d2:c1:33:22:45:c8:3d:1f:f6:6f:
                    51:8f:23:cc:68:ab:65:76:eb:f5:33:ca:2b:7c:f0:
                    12:6c:ed:c6:e4:c2:fb:fb:9a:9f:52:93:2f:6d:44:
                    6b:1f:c9:06:a9:5a:b4:50:cf:75:ed:10:6d:e7:6a:
                    11:a1:56:c7:70:15:24:16:fc:69:fb:b1:47:b6:e7:
                    b9:62:c4:ff:15:f3:9d:b9:14:7c:70:57:d6:5f:64:
                    47:24:f4:ce:63:f7:2e:66:53:e6:e4:ec:c4:9b:9a:
                    94:d1:2b:d6:99:90:7d:3a:e2:81:09:4f:e2:f9:93:
                    d9:97:4e:94:d0:71:82:f6:52:16:c4:e2:6e:46:bd:
                    6f:a2:03:2a:33:db:3a:ed:ef:98:c0:76:e9:12:f7:
                    a6:c9:fe:9f:ef:50:65:ab:d3:b9:96:a9:46:31:6f:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:D7:BB:36:EB:FB:62:F3:46:ED:87:DF:B7:76:4E:2F:91:E0:C3
            X509v3 Authority Key Identifier:
                keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:73:12:90:4d:07:99:39:20:ee:49:1c:66:36:38:00:05:
         f3:96:cc:b5:ff:ac:04:02:86:5c:2e:fe:60:09:a3:ff:70:8f:
         f1:9a:82:cb:58:33:12:de:e5:16:ad:4e:50:15:8c:bd:cc:93:
         46:db:07:e1:c6:f8:33:0e:c1:6c:42:f2:d7:11:8c:a8:11:b1:
         a2:ce:0a:84:da:ec:d8:1a:17:95:97:89:de:25:4d:e0:09:d2:
         81:5c:dc:54:3f:1d:46:20:d7:f0:5c:eb:84:61:3b:64:86:38:
         49:3a:e5:04:26:15:e3:8b:09:45:b8:35:b7:cd:66:27:27:9e:
         62:d0:1d:cb:e4:5e:d3:e3:45:65:94:34:b7:27:e1:5d:4e:db:
         90:0c:81:f8:ca:79:2b:13:1a:eb:59:89:e4:0e:20:2d:06:80:
         88:eb:ce:a8:58:de:d1:07:e2:d4:7f:6e:b9:dc:45:64:e4:c9:
         33:ac:91:b7:7d:dd:3f:5e:c2:9e:1d:aa:81:ea:fc:bd:fb:c0:
         89:56:3e:7e:07:bc:75:8a:d1:8c:74:62:bf:9f:db:a1:1e:0b:
         2b:33:73:b9:6a:87:4f:0b:ee:e5:d3:20:a9:f5:fa:64:c5:9d:
         8f:15:61:0b:8a:9b:a9:9b:1b:81:c3:7d:71:23:8b:cf:b8:ed:
         29:02:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:54:59 2026 by rpki-client