Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
File:                     E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json)
Hash identifier:          0K1CGc0PKivrOj75V4s6JRHtkzXPRsEsgHcv13XZb5k=
Subject key identifier:   CF:78:EB:CA:FC:EA:B5:3B:65:42:F0:91:C8:D8:BD:0C:A5:7B:14:31
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Certificate issuer:       /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial:       28F0DB4A7F5E40A02D332B074A328539D225873F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
Manifest number:          FF
Signing time:             Tue 28 Jul 2026 20:27:42 +0000
Manifest this update:     Tue 28 Jul 2026 20:22:42 +0000
Manifest next update:     Wed 29 Jul 2026 23:21:42 +0000
Files and hashes:         1: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=)
                          2: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=)
                          3: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=)
                          4: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=)
                          5: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: taRQ9qXo2L/ijwEBX6Vg5aO7P2KM/42JKSaBAFtBDaQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f0:db:4a:7f:5e:40:a0:2d:33:2b:07:4a:32:85:39:d2:25:87:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
        Validity
            Not Before: Jul 28 20:22:42 2026 GMT
            Not After : Jul 29 23:21:42 2026 GMT
        Subject: CN=CF78EBCAFCEAB53B6542F091C8D8BD0CA57B1431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:32:8e:6c:f8:69:ee:f2:5f:8d:a7:b4:c1:
                    88:92:ca:1a:f1:d1:2d:a4:98:c4:e6:7c:fc:e0:be:
                    80:3b:e1:df:87:de:8d:62:fa:f2:59:77:8c:c5:61:
                    4c:5a:51:71:1f:b1:c5:93:00:ab:91:f6:31:46:5a:
                    3f:c6:a1:0e:c0:89:96:ec:78:3a:5b:fa:dd:ec:b3:
                    76:73:33:da:cc:f8:4a:f7:bc:9d:8e:e5:63:09:af:
                    1f:d7:29:21:fe:4f:5a:e5:8e:98:46:e9:b0:1f:2a:
                    24:5e:45:a0:89:44:db:ea:9f:c9:9f:bd:4d:18:22:
                    8e:52:07:10:b3:33:25:c3:29:c3:ef:c2:67:5e:25:
                    75:73:36:a7:08:0b:3e:6e:72:0a:e4:eb:84:44:2c:
                    07:35:be:f8:86:61:69:e5:81:07:8c:86:e9:f0:83:
                    2d:dc:32:4f:16:24:e9:52:40:f1:19:d6:bc:ff:27:
                    65:09:e3:c9:98:f9:7a:ce:03:5f:aa:a7:53:53:ff:
                    3a:13:53:8c:5b:c5:3c:d6:26:c4:75:81:46:df:57:
                    e2:b2:60:4c:41:5d:83:53:ce:85:b7:6b:07:ea:6f:
                    e3:b2:21:1f:a4:ed:75:52:87:00:78:cc:d7:d5:69:
                    02:9b:d1:48:9a:9f:74:e5:12:27:95:88:f5:c6:94:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:EB:CA:FC:EA:B5:3B:65:42:F0:91:C8:D8:BD:0C:A5:7B:14:31
            X509v3 Authority Key Identifier:
                keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:70:63:19:fe:1c:bc:e0:de:81:6d:4e:41:b6:51:8d:04:b3:
         c7:e2:05:f3:45:a5:91:62:ba:fa:90:32:c0:f6:88:46:b9:e9:
         20:d6:08:1b:c2:8d:a8:84:2a:86:fa:90:cc:71:1f:16:d0:a1:
         2a:78:b8:49:4d:3e:00:5d:1a:4e:a7:41:3f:e0:3e:09:b0:6c:
         a8:47:10:6d:c4:56:f0:fc:cf:d8:a8:70:b0:af:b8:a4:b2:aa:
         dd:f7:6a:48:13:d9:90:db:69:29:0e:e2:9b:00:ca:f2:dd:32:
         b3:4c:f5:55:57:84:62:f4:15:7f:18:2b:47:df:59:09:48:d9:
         79:d8:e6:10:58:54:62:48:c9:e4:f2:59:a0:65:d0:77:6c:88:
         bf:c4:ba:32:1a:20:1a:46:2d:4c:6c:7d:c1:50:94:7d:bd:50:
         b9:78:a5:33:e3:21:b7:a8:8d:1e:12:d2:d8:b8:29:78:fc:61:
         d4:a1:6f:e4:6a:49:34:b7:1a:11:e2:e2:a2:53:03:b7:26:b4:
         c0:77:09:e1:c7:e5:8d:a7:d7:c2:65:b6:58:06:3d:99:e4:c2:
         0a:4f:7b:20:72:b9:f3:d4:57:4c:05:35:f1:2e:26:89:96:60:
         06:a4:2f:bf:6f:ca:31:80:b3:e8:98:6e:ae:d2:2b:5d:29:4a:
         37:c6:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:43 2026 by rpki-client