Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File:                     1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier:          upcCqlgKd+CQ4ZgUQ1aWxAjddCi1+LViV6frzpPNMSE=
Subject key identifier:   02:0F:E3:28:4C:E1:FB:68:BE:1F:92:C1:47:6A:83:6C:17:10:F9:29
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       3D277AC55AC24404F76175E0282EE7F5C742FD71
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number:          0123
Signing time:             Tue 28 Jul 2026 21:22:47 +0000
Manifest this update:     Tue 28 Jul 2026 21:17:47 +0000
Manifest next update:     Wed 29 Jul 2026 21:50:47 +0000
Files and hashes:         1: 3134302e3231302e32382e302f32342d3234203d3e203536303436.roa (hash: d607khQiQnigTg1F+OoOsZJIXuAoyLuGPxR5EwBZmOo=)
                          2: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: WzSAYUdZGqNi4Fu/JJzGcihqUYWe5S/7slDbFoW+v9Y=)
                          3: 3134302e3231302e31372e302f32342d3234203d3e203536303436.roa (hash: iA6xW2mo9UOww43TiFwUvVclWeN47TBsNl4uB8qad2M=)
                          4: 3134302e3231302e32322e302f32342d3234203d3e203536303436.roa (hash: KOUMTopFTFtdMp0MzGoR1D0CR819nWmuRX1CMIfQnNE=)
                          5: 3134302e3231302e32352e302f32342d3234203d3e203536303436.roa (hash: 4bSwFuNsKxLX2Mab+Wi1aimjfSTBRHXojh2stB7Opvc=)
                          6: 3134302e3231302e32332e302f32342d3234203d3e203536303436.roa (hash: kvgoH2jMNObinEuJoA1NwJakRuHGSo6bASBGl8xlgl0=)
                          7: 3134302e3231302e32312e302f32342d3234203d3e203536303436.roa (hash: l0hPko2ZXCOeA/311IA+OFAcQs7DgsvtABbBhm7khis=)
                          8: 3134302e3231302e31392e302f32342d3234203d3e203536303436.roa (hash: UXFk4wWTjHH3u21DSpm4bYhClt4TzwYbA8fG9WK956M=)
                          9: 3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa (hash: ucM6Jxz5/EwvTfspvH6tvbds6be5PlWP5svisIpotV0=)
                          10: 3134302e3231302e32302e302f32342d3234203d3e203536303436.roa (hash: fu5OX6AN2arGw+lToKsCYM0Zyg2PehN3eBycuZTpTzA=)
                          11: 3134302e3231302e32372e302f32342d3234203d3e203536303436.roa (hash: jUYEgZH0MXYqOeVlldpQVG4JGhPFcz1ChMn8LbjcIhs=)
                          12: 3134302e3231302e31362e302f32342d3234203d3e203536303436.roa (hash: NAVE/Qr6QHMC4XtFqhb5OBdtmjnpHmKja8imwFdn/KQ=)
                          13: 3134302e3231302e31382e302f32342d3234203d3e203536303436.roa (hash: 4XH4NW1fbHdXD4a8DFQmHzoxsWs6cHdsn9AL3hluo2Y=)
                          14: 3134302e3231302e32362e302f32342d3234203d3e203536303436.roa (hash: n3VyU42Lfcy4g/56VeaDrZAbySZjpyCmGrkFpjFCa2M=)
                          15: 3134302e3231302e33302e302f32342d3234203d3e203536303436.roa (hash: JCib6eEHsmJfGLVHPcFSzMlPbRqgc/vpDrsCHl6GrZE=)
                          16: 3134302e3231302e32392e302f32342d3234203d3e203536303436.roa (hash: zbdC+xnhB3/Ixpwx2Mv6RIWN0NGFCnvAFUX89ZgJF5w=)
                          17: 3134302e3231302e32342e302f32342d3234203d3e203536303436.roa (hash: 6J4cWkIKyL6J/8jYbqzVFC7+9rZoe2tTz1LY59VYxLU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:7a:c5:5a:c2:44:04:f7:61:75:e0:28:2e:e7:f5:c7:42:fd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Jul 28 21:17:47 2026 GMT
            Not After : Jul 29 21:50:47 2026 GMT
        Subject: CN=020FE3284CE1FB68BE1F92C1476A836C1710F929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:65:d5:c0:01:85:ba:5b:4e:02:fa:db:ed:
                    d9:73:d3:61:f2:b2:91:96:e2:cc:d1:c9:46:69:7a:
                    ae:e2:36:5b:fa:e6:55:29:15:1e:12:08:e5:d6:25:
                    1a:c8:0f:b1:48:b1:86:d7:1a:be:1f:c3:b0:44:00:
                    be:77:95:b9:4f:b2:0e:d1:11:0b:db:24:08:5c:56:
                    06:0f:b1:cc:0f:60:4d:6e:ca:cb:65:de:f5:e3:cd:
                    f2:ef:77:4f:8e:28:fc:62:d3:b2:1f:41:07:ae:40:
                    fd:f7:52:b7:61:18:d7:20:6c:83:e1:4f:c2:4d:05:
                    54:2c:88:0e:0d:5f:07:6e:b2:d7:7f:a5:82:2a:7b:
                    b4:f9:e8:c0:c6:15:ad:29:7a:3c:89:99:b6:3c:52:
                    d4:08:57:b5:e1:9b:78:f2:d7:35:dc:27:1f:f3:a5:
                    ea:21:ce:23:e2:64:0d:1e:c7:7f:3f:b9:a1:1d:c4:
                    80:05:3d:e4:78:fd:dc:cd:4a:69:23:58:64:76:d5:
                    3a:c4:8e:81:71:db:35:ec:d8:d0:1a:2e:40:53:b5:
                    55:6a:e5:5b:ca:28:11:d6:34:40:d6:0e:b7:24:73:
                    81:b8:35:26:ec:2e:00:f3:c3:ed:f1:e7:5a:9a:75:
                    71:12:c7:20:70:fb:ab:38:8e:27:43:7f:17:ad:09:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:E3:28:4C:E1:FB:68:BE:1F:92:C1:47:6A:83:6C:17:10:F9:29
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:6a:66:62:f1:02:af:f7:54:4c:7d:5d:fb:f9:00:be:2b:
         cb:f4:72:9c:cf:17:7a:80:a6:3f:78:74:53:06:f4:f5:3c:e5:
         08:27:8f:b9:a3:fa:04:b9:77:96:69:d0:af:eb:14:75:67:72:
         00:0e:67:93:e2:27:21:ff:75:7f:cc:b2:be:c7:5d:1e:74:66:
         c5:ad:f4:cb:c7:b3:de:fa:ed:f2:ab:5a:c3:09:64:d1:9f:cc:
         91:02:e5:74:45:be:54:92:9f:20:2e:30:49:ae:ad:18:cc:1b:
         9b:6b:ee:61:b4:fb:83:a4:92:c9:6a:20:30:9a:bc:e2:be:7a:
         dd:84:40:cc:d6:8f:c5:a6:41:01:9a:a9:d0:9a:19:67:15:bc:
         8f:c6:9e:47:7a:da:bb:27:57:e5:5d:32:4a:85:b6:8d:0f:c1:
         10:e1:09:76:6a:1a:f4:ee:0f:f4:bc:aa:a9:44:89:7b:16:82:
         8a:b1:30:4c:68:d2:c7:07:11:a0:59:52:89:1a:85:2b:b0:ad:
         df:21:a8:b2:e6:8e:57:3b:00:b6:c1:1b:e9:48:84:0e:37:9a:
         2b:cf:6b:c5:e3:a0:58:97:e6:1b:56:34:61:6d:34:f5:03:ee:
         02:b8:ff:bf:40:5b:67:aa:56:89:bb:68:21:97:54:57:cf:a3:
         01:8e:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:42:29 2026 by rpki-client