Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
File:                     8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json)
Hash identifier:          yZvuLsU8Foe58CeUNbyaiXwo47IdjSBCVO/Pc7XCoMY=
Subject key identifier:   01:F7:B4:D8:9C:91:9A:89:39:4D:32:80:E4:BA:57:C7:1D:F3:71:39
Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
Certificate issuer:       /CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Certificate serial:       2328483813398C668A66F85646EF4A14079814F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
Manifest number:          011D
Signing time:             Wed 29 Jul 2026 07:28:47 +0000
Manifest this update:     Wed 29 Jul 2026 07:23:47 +0000
Manifest next update:     Thu 30 Jul 2026 09:51:47 +0000
Files and hashes:         1: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=)
                          2: 3230322e3138392e33322e302f32312d3332203d3e20313337363930.roa (hash: 4YJIN/+wpiSkA5cXAliaiQiW1VJvJWFgwo2I/PlrvV0=)
                          3: 3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa (hash: JE4FuVtAV0HAMefV5DKOg6L5EZg6/4QeyQFV2c1/r/c=)
                          4: 3230322e3138392e31362e302f32312d3332203d3e20313337363930.roa (hash: Sd84VaUsQyvctKQYEk1GgEnHBSw/rsXH23QoYqTIkY4=)
                          5: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: SDXa8cQf2FD0K5ovTdGyG0+5TDMbT4OqYalezsBWzyg=)
                          6: 3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa (hash: FduQawaUAB3AqyG2JKF3ZKIVzLgkEz7AQwgt1jdaeu8=)
                          7: 3230322e3138392e382e302f32322d3332203d3e20313339313830.roa (hash: uPn93KisFVykFXt1hthG/OEQYihrspgXtU5fsnG5+8k=)
                          8: 3230322e3138392e342e302f32322d3332203d3e20313339313830.roa (hash: /Jl5ZojVCo75MstAfXslC1ke2jL9dJud1Z0y6KbvAeo=)
                          9: 34332e3234392e3139322e302f32322d3332203d3e20313339313830.roa (hash: qXG1OGi8es5A9ODnA9Wrh+6N5kcIEUbeRsSCX6gtlhk=)
                          10: 3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa (hash: ZkktRdSWs1+woxoswQ7oHIbLhfx5y9scEt40zlDYlgM=)
                          11: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=)
                          12: 3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa (hash: rX9v8Z0dk5MQw5UdhlD+kvoazUso3Jn/CJ8E8MPuHdE=)
                          13: 34352e3132352e34342e302f32322d3332203d3e20313339313830.roa (hash: Rdc1fS1nMg3eDvAUZy4aoiCM0ja6bwoDhkdphv67+rA=)
                          14: 3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa (hash: jFFOu2GymZSamSuOlfYZVuAiDMzu4oBxvqc01/5LkEg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:48:38:13:39:8c:66:8a:66:f8:56:46:ef:4a:14:07:98:14:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198
        Validity
            Not Before: Jul 29 07:23:47 2026 GMT
            Not After : Jul 30 09:51:47 2026 GMT
        Subject: CN=01F7B4D89C919A89394D3280E4BA57C71DF37139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:81:9d:11:8e:c2:5c:d0:b8:7e:7f:9e:f1:
                    9f:0c:f1:5f:c3:90:ff:38:49:75:db:11:16:fd:d1:
                    a0:6a:18:b8:62:41:66:76:55:c5:bb:97:3b:20:65:
                    99:23:77:3e:59:04:29:ff:f4:c6:e2:9d:02:47:2a:
                    36:f0:73:04:c5:22:98:1e:d3:56:eb:cc:fb:fb:ef:
                    d6:2e:59:7a:05:7f:10:62:ac:03:f8:11:2e:d6:8b:
                    a7:d7:7d:90:55:d8:51:6d:08:2b:5e:33:8c:63:87:
                    d6:fe:9d:35:48:d7:f9:01:df:7f:06:02:b4:9c:d8:
                    d2:b4:c3:0e:b4:44:d4:c7:74:01:41:0b:cd:1b:d9:
                    3d:d0:0d:2a:9e:07:c3:c2:97:ed:a1:a9:c4:7c:0c:
                    b5:22:f7:9f:fe:14:b7:eb:b6:d7:72:fe:69:cd:aa:
                    3b:ef:cc:95:43:7d:77:a7:bd:c5:83:e3:d0:03:aa:
                    2b:a1:d1:e2:5a:22:e9:86:82:52:57:f7:fd:8a:22:
                    29:34:28:63:00:73:b3:aa:fd:59:eb:38:a8:af:52:
                    58:27:2f:62:8e:9e:ea:cd:d9:13:79:a9:b3:c6:d8:
                    94:5e:94:59:ec:dd:b5:35:31:fc:2a:31:11:e3:96:
                    6b:98:f0:9b:55:7a:68:6b:5e:77:57:e8:f6:c5:70:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:B4:D8:9C:91:9A:89:39:4D:32:80:E4:BA:57:C7:1D:F3:71:39
            X509v3 Authority Key Identifier:
                keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ca:02:d3:dc:b7:94:ee:1d:c8:28:a8:5b:af:c8:c4:7c:9d:
         3d:09:cf:56:69:45:29:00:69:4b:86:15:31:1e:2b:d2:84:13:
         c2:49:19:89:99:03:19:d9:cc:4a:dc:e2:71:03:69:42:28:98:
         06:5d:4c:71:18:ca:25:88:2c:0e:5e:60:03:05:13:28:b6:d7:
         95:00:93:54:0c:ec:62:34:a2:91:56:1c:c4:1e:f2:69:10:c2:
         da:0e:1f:d4:90:a9:07:69:79:aa:5f:fa:c2:20:63:91:68:26:
         66:ed:b1:fa:df:68:68:47:ae:45:5f:af:55:39:7e:a5:f3:68:
         45:46:14:ba:1e:77:1d:f4:1f:e0:8c:8b:ec:42:95:12:cb:70:
         a8:70:e8:0d:a2:46:14:fb:aa:e4:61:39:64:86:0c:c3:e6:d7:
         93:6f:3e:73:4a:55:2e:b4:53:98:ed:ef:b6:79:24:ab:9e:4e:
         8f:00:34:bd:92:14:fa:73:f7:93:b1:58:53:be:7f:b5:e3:56:
         c7:e5:c8:17:a2:c5:c2:d0:7f:c5:22:d8:c3:df:8f:eb:15:00:
         0e:11:cd:c8:15:67:b8:e0:03:8a:7f:11:02:eb:81:16:7f:8d:
         12:3f:66:76:47:c0:11:01:21:af:82:12:34:33:23:6e:a6:70:
         27:ce:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:14 2026 by rpki-client