Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          K7vEUl1o7zINfnP5Wd2cwtUXavteVHy7SANFE1Wa+RI=
Subject key identifier:   11:37:0F:CF:12:CC:DD:7E:BD:C2:C2:05:DB:09:1B:4C:EA:D8:26:87
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       421B2C162A6FA303FECD09AA2AB23FA5BAF76BED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          0100
Signing time:             Tue 28 Jul 2026 07:56:19 +0000
Manifest this update:     Tue 28 Jul 2026 07:51:19 +0000
Manifest next update:     Wed 29 Jul 2026 11:04:19 +0000
Files and hashes:         1: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
                          2: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
                          3: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
                          4: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
                          5: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
                          6: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: PCppSN07fIxFZUDUkXPxPb2c9Mukh21YfGS2vfZU98Q=)
                          7: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
                          8: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
                          9: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
                          10: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 11:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1b:2c:16:2a:6f:a3:03:fe:cd:09:aa:2a:b2:3f:a5:ba:f7:6b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Jul 28 07:51:19 2026 GMT
            Not After : Jul 29 11:04:19 2026 GMT
        Subject: CN=11370FCF12CCDD7EBDC2C205DB091B4CEAD82687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:ad:d8:77:ac:0d:b6:36:41:23:ac:60:0c:
                    ac:9e:0b:00:37:df:cc:1d:15:f5:6d:31:eb:91:bf:
                    fd:02:81:e8:4a:68:31:72:9c:84:c3:d6:f1:1d:2d:
                    88:9b:b4:7e:13:74:c0:bf:c6:dd:b9:a8:9e:69:6a:
                    f5:73:21:4c:74:1d:80:cf:5f:53:8b:4c:f0:c1:4f:
                    67:23:bf:af:b4:42:89:ce:7e:cc:dd:f8:9a:cb:d0:
                    0d:75:ed:04:d4:e9:da:ab:30:9e:b3:e4:31:19:97:
                    1f:74:94:55:59:c0:36:c8:75:9f:b4:00:92:ef:9a:
                    6c:eb:2f:ff:0f:47:c2:72:8c:62:ee:cf:94:80:94:
                    86:7a:f3:55:19:d8:9b:ce:79:87:f8:24:87:9a:58:
                    da:e2:81:33:4b:5d:68:51:1b:61:5e:4c:71:d3:4d:
                    cf:e1:17:b0:9c:33:9c:a2:7f:5a:31:58:09:c7:2a:
                    5b:f1:13:5c:1a:67:ef:94:a8:47:36:0c:da:e8:ca:
                    64:35:12:9e:49:ef:d7:e7:c6:55:38:ac:98:cb:65:
                    87:4b:14:03:a0:42:f5:be:82:ee:a6:54:cb:35:a3:
                    37:cb:a3:a9:58:eb:26:d9:52:db:c0:80:69:90:9c:
                    e6:69:c5:10:55:27:d1:a8:9c:88:c3:10:85:58:d6:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:37:0F:CF:12:CC:DD:7E:BD:C2:C2:05:DB:09:1B:4C:EA:D8:26:87
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:50:36:4f:dc:4c:ae:eb:5c:4f:6c:b8:4a:2f:c7:b4:23:
         52:e5:f5:b3:52:02:38:9b:84:27:8d:cf:29:5f:0e:e8:c7:fa:
         7c:2e:c1:19:b0:59:10:d4:80:c3:d7:77:47:21:07:cc:b8:e5:
         40:f9:ce:3d:51:b6:2c:dd:dc:08:02:f0:f1:ad:54:a3:94:62:
         d2:8e:7f:31:08:de:06:8e:93:e2:b5:09:c3:14:17:0c:f5:9a:
         7e:8e:55:91:f1:7b:0c:9c:31:a4:5a:4e:f8:f9:45:1d:0d:fa:
         1c:c9:8a:2a:d5:93:a5:bb:b7:05:05:bd:c1:41:7c:1a:d2:05:
         49:a5:64:e6:4c:39:20:86:9f:f3:27:1e:8e:b1:33:29:2e:cb:
         a2:df:7b:fa:56:e1:cb:84:ac:69:9c:b2:16:40:11:31:cc:d1:
         a1:0e:93:4a:f3:18:36:63:9c:a1:ac:49:9a:67:68:aa:8e:0a:
         12:55:43:da:95:b7:e6:9b:f9:36:f8:28:61:48:b1:d4:93:5a:
         a3:d3:ec:3a:b0:6b:d7:32:1e:7d:f0:42:bb:45:44:82:80:18:
         99:34:c7:f6:72:e7:25:dd:a8:d6:d1:c2:6d:84:55:c8:1c:5f:
         7b:0b:6f:16:fb:30:39:db:f2:9c:a2:78:cf:74:9f:10:36:9f:
         bd:1e:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:44 2026 by rpki-client