Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File:                     7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier:          G69oTWyzXcVU43MsIENHbhC9SpI119JUFIj9zOCA0P0=
Subject key identifier:   21:9C:1B:BA:8A:C0:F0:7F:CC:F7:74:45:FC:D9:45:50:2D:CC:F1:34
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer:       /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial:       04E76F5EA8C551E0974FC518AA894010EA0E89C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number:          0101
Signing time:             Wed 29 Jul 2026 10:34:09 +0000
Manifest this update:     Wed 29 Jul 2026 10:29:09 +0000
Manifest next update:     Thu 30 Jul 2026 11:57:09 +0000
Files and hashes:         1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: dqw45ARdD2kpmRA2AXWoSg6+j/i+mlrIgkKOZuQ+ONY=)
                          2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:6f:5e:a8:c5:51:e0:97:4f:c5:18:aa:89:40:10:ea:0e:89:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
        Validity
            Not Before: Jul 29 10:29:09 2026 GMT
            Not After : Jul 30 11:57:09 2026 GMT
        Subject: CN=219C1BBA8AC0F07FCCF77445FCD945502DCCF134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:0f:16:99:28:61:b0:e1:bb:20:83:8e:3b:
                    78:2b:f7:ba:15:c8:9a:cd:f3:5b:60:15:93:0c:44:
                    e8:29:b9:9c:a0:dd:74:5a:36:77:6b:5c:c6:1d:67:
                    a4:33:c6:32:1e:cf:58:1b:e4:12:22:36:1c:8d:15:
                    c6:ce:74:51:bf:88:98:67:92:55:2c:06:86:fa:be:
                    10:0e:13:21:69:f1:3c:86:ca:24:79:78:90:66:69:
                    14:57:0e:29:cd:c8:4a:e8:1a:24:8b:87:e1:17:13:
                    a7:dc:d0:54:67:3a:f9:cb:8a:26:ab:f9:4f:40:a8:
                    85:df:ee:a9:ac:2a:2b:0b:97:26:38:37:a1:21:62:
                    06:83:fa:94:04:12:97:82:89:c6:f4:09:db:77:a1:
                    b2:d2:f4:bc:2a:04:5d:75:5c:fe:f4:c0:7a:69:ec:
                    06:a4:9c:96:84:47:64:60:d7:83:00:ed:48:3b:72:
                    3c:e7:f4:31:82:dc:fb:7f:3e:49:ef:1a:78:71:4d:
                    bb:8d:ab:ff:92:45:8c:b6:f8:aa:cb:87:fd:79:e2:
                    93:54:f6:56:8a:fa:55:87:03:f8:ac:e3:56:56:07:
                    49:65:f8:a2:05:2b:68:fc:76:b9:50:53:25:a8:b9:
                    03:2f:6f:9d:ce:03:40:48:6c:50:ee:37:0c:fc:b2:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:1B:BA:8A:C0:F0:7F:CC:F7:74:45:FC:D9:45:50:2D:CC:F1:34
            X509v3 Authority Key Identifier:
                keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:17:06:13:c2:7a:53:db:26:5b:7d:70:e9:91:a4:ed:97:c3:
         ea:28:94:dc:92:36:e4:e4:10:df:d9:d4:83:4a:ee:c7:ec:d6:
         1f:83:19:ec:05:18:84:f1:1e:b7:7f:ef:c1:b7:16:c0:f8:04:
         9f:be:f0:d1:b6:18:47:16:9c:9a:c4:0b:ff:d6:76:9e:8b:43:
         80:93:fd:6f:62:16:03:c0:21:09:db:81:03:21:69:f5:92:d0:
         bc:4c:20:44:a0:57:f9:56:72:d5:e0:62:eb:2c:77:53:e0:fc:
         ee:c1:21:e7:d4:0f:83:63:43:19:97:38:fe:d7:9b:2a:a9:f0:
         56:fe:ae:54:ce:bc:27:fb:25:c0:ef:10:65:0b:51:ac:ea:50:
         9c:aa:64:50:89:2e:56:c4:93:fb:da:92:c4:81:99:11:03:5f:
         38:b8:03:9e:76:10:ca:ec:52:de:94:57:99:f3:ae:aa:11:a0:
         29:47:77:1c:0d:96:d1:37:20:f5:3d:46:ea:80:25:29:60:dc:
         73:d5:11:9e:f5:e4:ea:47:bb:cc:b7:8d:5e:d3:f3:f4:34:0c:
         f8:f3:c2:08:34:11:f7:b3:b1:10:c3:20:18:5b:be:48:3e:fb:
         25:ae:4e:36:2c:c4:b2:e8:bd:f0:45:b4:21:67:ab:56:43:b0:
         3b:71:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:22 2026 by rpki-client