Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
File:                     509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json)
Hash identifier:          MDhsgERjuqefZaY1OQjLCafcf755PImp8PZMqyZxjeQ=
Subject key identifier:   B2:77:B3:92:52:FB:E7:9D:22:DB:58:2D:A0:C7:82:5B:DD:47:14:BD
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       1131F7A191C8AF555255098454F6F6141728315E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
Manifest number:          0105
Signing time:             Wed 29 Jul 2026 10:09:04 +0000
Manifest this update:     Wed 29 Jul 2026 10:04:04 +0000
Manifest next update:     Thu 30 Jul 2026 13:06:04 +0000
Files and hashes:         1: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=)
                          2: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=)
                          3: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: BSBKKLzLBxwL1Sq9fCM8CYmWWTBkxlkeKA56RgESYtQ=)
                          4: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=)
                          5: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=)
                          6: 323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (hash: YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=)
                          7: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=)
                          8: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=)
                          9: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=)
                          10: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=)
                          11: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=)
                          12: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (hash: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M=)
                          13: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:31:f7:a1:91:c8:af:55:52:55:09:84:54:f6:f6:14:17:28:31:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Jul 29 10:04:04 2026 GMT
            Not After : Jul 30 13:06:04 2026 GMT
        Subject: CN=B277B39252FBE79D22DB582DA0C7825BDD4714BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:30:e5:fb:b9:46:79:f2:73:f7:63:1c:0c:
                    68:5b:64:34:ea:93:22:ca:35:e3:fd:c4:bb:ec:c9:
                    e1:8f:0f:96:5d:7b:e4:fd:0b:2c:4f:12:1e:d5:b1:
                    9b:41:9b:9e:ed:7a:d4:2d:4f:28:cd:0d:77:3e:76:
                    d3:cb:46:ee:66:b1:4c:70:34:8b:f6:b7:b3:cb:47:
                    82:5d:b3:16:5a:87:ac:d0:52:be:74:67:25:0a:e1:
                    72:ca:d4:13:20:90:f2:81:1a:51:8b:e1:97:77:0a:
                    f3:c0:60:a7:b4:69:af:53:77:66:96:19:61:3c:d1:
                    9d:83:cc:3d:66:05:46:e0:ee:2e:3d:a1:27:1c:03:
                    e6:04:0d:cb:dd:d4:78:6b:2a:24:4c:17:53:45:01:
                    a2:32:61:b5:3a:a6:b0:d4:3e:0d:5a:72:03:fb:d7:
                    de:97:aa:03:fe:29:85:c6:cc:88:6b:e2:a9:e7:fd:
                    a4:7a:db:82:11:7d:14:22:53:95:cb:4e:3c:a3:97:
                    a0:2d:65:c9:6c:28:8f:3a:c2:9a:5c:d1:6f:33:97:
                    4f:2e:d9:63:f6:b6:3c:b8:71:86:34:5d:ee:92:f5:
                    5c:64:81:c3:e1:f0:a7:c3:e3:e8:1a:98:21:01:fe:
                    b8:00:43:78:f9:93:ef:2c:c0:ea:b0:39:10:33:17:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:B3:92:52:FB:E7:9D:22:DB:58:2D:A0:C7:82:5B:DD:47:14:BD
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:28:21:33:77:26:27:4d:c4:c9:c3:a5:a7:16:98:b4:a3:
         2a:b7:01:29:28:e8:bb:81:8d:66:55:52:aa:90:86:4b:c9:1b:
         e7:68:19:bb:73:d4:b0:d9:ca:90:87:72:71:c6:ac:ee:93:ef:
         14:3c:e9:0b:ec:db:10:dd:9e:a4:5a:fe:30:4b:2f:37:ae:9d:
         f5:54:a2:ce:d1:f0:15:98:86:cd:05:4e:f8:54:76:97:dc:36:
         13:f7:85:7d:b9:c3:18:d4:a8:fc:49:98:77:ee:c7:94:c8:52:
         18:d7:db:21:af:66:af:fb:0b:54:bb:3a:1b:31:43:b8:f7:49:
         c3:80:c2:15:8d:ae:0a:40:f2:86:1d:18:51:5a:3d:b5:e9:0f:
         d5:41:0d:3b:e8:66:8d:c1:8a:0a:48:81:3a:e3:0a:51:f9:34:
         46:60:cb:45:1b:ca:3d:cd:7c:64:be:7b:b1:a3:17:a0:d8:5b:
         0d:d8:8c:7e:86:19:2e:2f:bb:cd:2d:c0:47:cd:a0:a6:b0:f5:
         8a:a1:ed:8a:3c:c2:ad:66:f7:bd:b2:b1:e8:95:4f:07:73:5e:
         f8:f3:ca:0a:34:c1:ca:80:e2:ac:06:30:39:3a:94:46:04:e0:
         88:23:58:61:4b:49:c7:5d:63:a4:83:e7:96:8a:d1:01:26:d9:
         5a:ec:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:38:02 2026 by rpki-client