Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
File:                     D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json)
Hash identifier:          fnpHm5ih5uXWyNCwQGMrSnDgCVU2yeWXBIyfYQuRPX8=
Subject key identifier:   F8:B2:CB:21:B8:5C:82:DC:67:6E:B0:10:9E:F0:AA:71:75:F4:1A:32
Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
Certificate issuer:       /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Certificate serial:       4A4269906C8FD129C5C2AFB5E49059D287BFA0D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
Manifest number:          45
Signing time:             Thu 23 Jul 2026 23:16:27 +0000
Manifest this update:     Thu 23 Jul 2026 23:11:27 +0000
Manifest next update:     Fri 24 Jul 2026 23:48:27 +0000
Files and hashes:         1: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: iG+dfDDKFTNrnWkCy2i1HG8x6l+iWRT8qHqCENP8amc=)
                          2: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=)
                          3: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:42:69:90:6c:8f:d1:29:c5:c2:af:b5:e4:90:59:d2:87:bf:a0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
        Validity
            Not Before: Jul 23 23:11:27 2026 GMT
            Not After : Jul 24 23:48:27 2026 GMT
        Subject: CN=F8B2CB21B85C82DC676EB0109EF0AA7175F41A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:f2:bb:f1:8e:bc:3e:44:ec:9a:50:eb:0a:
                    7b:31:cd:13:a0:9c:69:50:d9:42:cd:67:a4:8d:4c:
                    ba:dc:bd:4b:45:60:10:6d:20:5e:7f:ca:16:66:e2:
                    b6:94:1f:d4:00:c1:b7:b2:a0:b5:4c:5b:6b:7f:fc:
                    ad:cb:08:ed:1c:b9:87:14:53:34:e6:1f:a4:c8:0b:
                    3a:75:f7:9c:39:6f:3a:af:d4:e8:f6:eb:3e:83:71:
                    a6:17:d2:f1:0e:68:94:0d:23:c0:e0:35:a1:54:2e:
                    be:a6:97:4b:ef:73:03:29:7b:a9:b5:79:6a:9a:f8:
                    0d:64:e7:a3:8c:fa:a4:a3:22:9c:f4:0d:5f:98:f6:
                    7b:17:eb:bc:ba:95:b1:71:07:62:85:5d:49:b8:6e:
                    79:c9:dc:20:a5:5f:97:54:9f:3c:ba:e9:d0:9f:b0:
                    dc:e1:83:ea:50:bd:11:ae:a9:ab:37:40:71:21:2a:
                    59:49:c2:5a:0c:e8:fe:89:0c:5d:b5:5c:03:68:7e:
                    ea:7f:49:98:ca:37:cb:fc:a2:a3:87:ca:41:95:e6:
                    a5:8c:43:94:86:12:4c:e5:69:0b:32:f6:f6:4c:2a:
                    ea:6b:b5:4f:f8:e2:c7:d2:4c:f1:df:22:6c:b7:10:
                    36:0c:ab:47:cf:6a:70:35:57:72:8f:32:18:ad:f0:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:CB:21:B8:5C:82:DC:67:6E:B0:10:9E:F0:AA:71:75:F4:1A:32
            X509v3 Authority Key Identifier:
                keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:db:8f:42:a0:2e:4b:65:7f:c5:0e:72:fa:56:87:8a:52:
         10:7e:08:e2:92:eb:63:f3:a9:21:56:b3:d2:a9:88:14:27:6c:
         76:ca:77:69:41:79:29:99:1b:f8:91:38:9f:ef:60:ff:c8:00:
         73:ec:66:1a:57:4d:44:e8:29:7f:a9:12:db:80:62:dc:74:13:
         ae:30:3c:88:fa:1a:56:2d:96:e4:2a:6a:1c:5c:33:5f:00:15:
         30:01:2a:dc:57:a7:88:cc:01:94:ff:56:3e:e2:ca:47:7c:68:
         d5:64:41:82:f5:86:9b:c9:26:b7:de:76:ed:79:9a:6b:c7:8c:
         60:57:0d:12:43:bc:da:6e:c3:31:49:c8:e5:b6:79:28:0d:7d:
         17:3c:40:02:1e:09:1f:2b:fe:e8:39:f5:16:6f:56:6a:06:c6:
         46:0a:08:ae:3e:9f:2b:d8:e3:70:32:31:9e:bf:3f:b8:0d:52:
         db:61:84:25:f1:3b:fc:2a:2c:66:ca:38:a3:74:00:69:3d:39:
         fe:55:73:06:b4:09:34:3e:64:1d:a6:71:05:cc:99:03:29:6c:
         2d:8a:3a:e3:bf:a4:97:05:07:9d:25:b7:29:d8:e8:04:1d:a1:
         a6:fe:86:53:62:62:4c:ec:e7:b1:ad:2a:3c:ab:24:1f:8c:e0:
         f9:22:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:47 2026 by rpki-client