Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          s0lGJSfJdhbOWF5JUGRmFWM2KIzkT88Vz/3CP9GA8cM=
Subject key identifier:   7E:6A:36:64:BB:89:1F:2D:9A:23:CE:82:2B:90:88:05:7D:C4:7D:58
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       6666D6A80F8E483B94E2D5C5F7BB292DB35866AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 12:24:43 +0000
Manifest this update:     Fri 17 Apr 2026 12:19:43 +0000
Manifest next update:     Sat 18 Apr 2026 12:51:43 +0000
Files and hashes:         1: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          2: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          3: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: UM1Lh04FJ7noRBGA/rA1G0AezmMKM2eZOlobJXUMaJM=)
                          4: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          5: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          6: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          7: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          8: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          9: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
                          10: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
                          11: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          12: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:d6:a8:0f:8e:48:3b:94:e2:d5:c5:f7:bb:29:2d:b3:58:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Apr 17 12:19:43 2026 GMT
            Not After : Apr 18 12:51:43 2026 GMT
        Subject: CN=7E6A3664BB891F2D9A23CE822B9088057DC47D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:72:af:db:71:53:48:d1:8d:f8:94:60:40:2b:
                    e3:dd:25:59:e7:9e:3b:77:d3:e5:1c:fd:03:21:f6:
                    f6:8c:08:b4:d9:18:0a:30:7b:08:9b:41:80:78:bd:
                    a1:11:9e:79:7c:80:60:a7:a5:00:d8:52:6a:a7:02:
                    e5:85:de:ec:d2:c4:fb:04:d9:8c:e9:af:4a:63:0c:
                    81:ba:55:df:8f:d8:e3:56:19:36:eb:e7:30:27:5c:
                    cc:6f:0d:b0:84:1d:9b:43:31:2b:fb:cd:f1:7c:62:
                    7e:d7:63:d8:d1:ee:a4:95:a2:b3:98:c6:b1:81:bb:
                    40:92:56:29:1d:4a:c5:17:bc:70:df:73:0f:62:26:
                    d9:06:77:12:52:25:9e:66:a1:ba:46:ad:74:40:80:
                    f2:c6:8e:ef:08:bf:4f:77:7c:01:05:46:f4:fe:08:
                    7a:35:56:90:09:5d:92:14:92:08:6e:77:2e:28:fd:
                    ec:4a:79:00:89:87:ac:42:52:f3:fc:ae:92:10:2d:
                    bd:78:35:59:db:7f:85:be:8b:5a:f7:6c:77:fc:d2:
                    18:80:45:48:a5:38:02:23:eb:1b:1c:98:83:e0:ab:
                    3a:5a:2a:ba:31:9f:28:e3:72:f8:59:83:40:3e:41:
                    9a:07:28:45:47:f7:cd:a3:68:65:14:67:45:37:a9:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:36:64:BB:89:1F:2D:9A:23:CE:82:2B:90:88:05:7D:C4:7D:58
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:d5:cb:dd:c1:b7:b4:e6:57:39:dd:43:ae:9f:75:8e:3e:
         c2:01:7a:07:cb:08:21:3e:d5:92:33:b5:e1:c5:31:28:14:03:
         85:50:69:10:32:b4:3a:b9:63:8c:fc:af:96:05:c4:81:81:92:
         b2:7e:aa:81:20:7a:28:21:d5:21:2f:fa:c3:67:ec:bd:0c:2e:
         2b:24:64:a1:57:65:1d:30:65:51:d3:88:3c:44:84:76:c5:de:
         41:12:4c:9c:9a:e7:e5:85:95:c7:44:56:59:c2:3c:a2:b7:09:
         b5:b4:82:6c:f6:c4:82:bc:1a:2a:e1:9b:cf:3b:1d:9b:ad:84:
         98:46:2c:58:68:7c:72:2f:f6:dc:be:91:3c:70:62:46:16:9c:
         d1:4e:e2:2d:5a:2f:c6:1b:a7:23:64:7a:ea:b7:95:22:7c:a1:
         47:32:de:f3:e7:69:99:c9:c9:d6:19:8d:92:c6:a3:33:15:bd:
         3a:76:98:08:55:07:42:aa:ab:b6:9c:88:7c:77:5f:8a:3a:0e:
         39:53:08:2f:12:89:63:17:9a:3f:e7:b0:c2:2d:f6:66:4c:04:
         58:20:a0:ad:90:d0:cc:11:ef:74:02:49:1a:93:78:35:d2:a9:
         2c:71:2c:af:1e:5d:9a:11:9e:f8:44:4f:18:45:b4:03:b7:c7:
         01:27:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:26 2026 by rpki-client