Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File:                     34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier:          rMNVGrNK7iBJO3PfNQS4P0N4e1R4R3Qm9eUHOJI/ekY=
Subject key identifier:   04:54:37:B7:A5:CD:80:E9:81:03:42:A7:FC:E3:73:FC:E7:AB:C5:1B
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer:       /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial:       71FAB8C0CA4C9593AFFBB1258F58682BD7755A3A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number:          56
Signing time:             Thu 23 Jul 2026 23:19:49 +0000
Manifest this update:     Thu 23 Jul 2026 23:14:49 +0000
Manifest next update:     Sat 25 Jul 2026 01:21:49 +0000
Files and hashes:         1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: Mv3nXdZgPvAu4Tpms5aVLS7cxOeWe7wgAVZ1n2zyGhM=)
                          2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:b8:c0:ca:4c:95:93:af:fb:b1:25:8f:58:68:2b:d7:75:5a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
        Validity
            Not Before: Jul 23 23:14:49 2026 GMT
            Not After : Jul 25 01:21:49 2026 GMT
        Subject: CN=045437B7A5CD80E9810342A7FCE373FCE7ABC51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:dc:a8:3f:fe:ff:8a:48:c0:cd:43:fc:b7:
                    a3:07:21:da:b1:4e:c9:4a:f4:1b:4d:00:66:18:3d:
                    05:df:7b:f6:83:59:ce:0b:47:2c:3e:4e:f4:16:cf:
                    74:79:e6:a4:d3:28:51:66:c4:3b:a5:75:1c:8f:55:
                    a8:85:7d:de:aa:55:08:af:87:1c:8d:89:08:55:07:
                    7e:eb:e2:79:f8:20:f2:7b:0c:7d:a5:ca:16:ba:a8:
                    6d:87:70:11:cd:3d:91:b8:ee:71:02:af:03:20:08:
                    80:96:73:36:06:d9:a3:3b:1a:8d:40:be:e2:38:d0:
                    35:74:d1:9b:89:f2:cf:4b:0b:d9:a6:14:69:96:39:
                    4e:f1:0a:93:67:43:41:3f:ec:a8:25:2d:c3:d4:d3:
                    86:a5:0f:92:87:35:17:d6:c9:40:41:e8:b8:7b:4f:
                    77:9d:05:b5:3b:5a:8e:03:ca:06:87:ae:a7:bc:c7:
                    7a:c6:07:a6:9e:ba:2f:ae:0c:85:2d:6e:62:fd:2e:
                    19:1d:e6:26:60:85:6c:e5:c4:bb:4a:d1:d4:5a:65:
                    e4:87:b8:28:20:06:e9:18:2d:ae:2e:ab:14:d0:5a:
                    3a:17:e0:41:70:e4:d4:50:de:83:90:08:7f:00:87:
                    68:a2:14:a6:04:08:b6:b5:8c:fc:e1:0f:9b:83:02:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:37:B7:A5:CD:80:E9:81:03:42:A7:FC:E3:73:FC:E7:AB:C5:1B
            X509v3 Authority Key Identifier:
                keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:ad:8c:9e:84:7c:c7:28:73:1a:3e:9d:ac:13:24:f5:40:
         7d:ee:b2:39:17:dd:2c:f2:b4:36:d2:f1:a3:74:bb:c2:a0:69:
         59:89:29:eb:37:45:2f:be:c9:05:48:4f:4e:24:b0:71:65:3b:
         c2:0f:aa:bd:61:73:aa:91:5b:5b:1d:bd:eb:44:57:a5:87:fc:
         77:b1:90:c2:b4:7b:c5:a8:82:2b:1b:f0:82:97:a3:79:62:23:
         79:c1:87:ab:34:04:22:75:86:2b:8a:3f:38:2e:cc:ad:cc:80:
         b6:21:51:18:1e:e8:41:cf:f2:71:54:6c:a8:ff:63:ba:0c:e2:
         f5:c6:bd:67:c7:89:18:e9:9c:e2:a5:60:bc:7f:21:49:5e:ee:
         10:63:25:fc:9a:19:58:c3:4e:58:d1:76:89:3c:89:37:02:67:
         84:e6:a1:a2:4a:e8:3c:3e:5f:d5:b4:d2:14:c0:ee:b3:1e:61:
         b6:bb:2f:15:43:ca:ec:f0:10:bd:95:17:70:f7:ac:6d:72:75:
         c3:dc:3a:85:18:89:74:c3:0f:55:95:4b:6b:3c:74:fc:65:32:
         2b:3f:e1:1d:5f:7d:44:17:4f:f2:16:cc:59:7f:7a:ed:26:45:
         12:ab:09:94:82:4b:1b:82:b0:e2:47:f7:d7:4b:48:a8:fe:95:
         69:7f:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:22 2026 by rpki-client