Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          VwSak1UkBwuNA0/Tj61pWEaTnU7F4RDbP3tv9qoqesw=
Subject key identifier:   15:88:D0:8B:4A:6D:4B:D1:3F:DB:16:54:21:99:16:44:F4:67:B1:C2
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       0BF7A4D203D99B7DBD31A0F4A90D7C1E6362F0F3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          FF
Signing time:             Wed 29 Jul 2026 10:24:07 +0000
Manifest this update:     Wed 29 Jul 2026 10:19:07 +0000
Manifest next update:     Thu 30 Jul 2026 10:33:07 +0000
Files and hashes:         1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          2: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: Lx8cSCyaetr0f39/CYMYwVw2hJMIR7N+mgCXG67WlFw=)
                          3: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          4: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          5: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
                          6: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          7: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          8: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          9: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          10: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          11: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          12: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f7:a4:d2:03:d9:9b:7d:bd:31:a0:f4:a9:0d:7c:1e:63:62:f0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jul 29 10:19:07 2026 GMT
            Not After : Jul 30 10:33:07 2026 GMT
        Subject: CN=1588D08B4A6D4BD13FDB165421991644F467B1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:ce:f8:c8:02:b9:ac:25:20:25:4d:5f:72:
                    5e:88:9e:54:a0:34:84:c7:76:7d:81:de:60:c2:34:
                    56:d1:86:d1:64:eb:73:59:a0:90:94:22:15:c6:67:
                    2b:31:76:6f:5c:b3:48:f9:29:a9:5f:fa:1c:3d:c6:
                    b3:5a:a9:a0:78:75:49:71:ff:78:e4:ec:67:6d:bf:
                    c9:c1:0c:fb:b4:36:d8:d9:ce:dd:13:a2:80:a0:cf:
                    2c:be:ab:7f:8b:66:31:c4:e7:7a:17:41:bb:36:3c:
                    37:bf:c0:c9:70:30:a2:ba:20:92:f0:0d:d4:fc:dd:
                    ad:3f:87:e9:12:80:56:23:57:0d:f7:bc:8b:a3:ed:
                    4e:9a:f0:0c:75:a6:7b:f8:f6:8b:2b:05:48:a9:3d:
                    65:98:05:74:2a:5c:ab:25:4b:70:70:c4:3d:2b:03:
                    fc:c7:6f:5e:b5:93:a9:b6:0f:74:c1:6b:c6:f8:10:
                    b0:09:8c:0e:3d:30:41:94:22:63:31:55:31:e2:58:
                    8e:ad:b6:60:f0:b7:d7:0a:d4:5f:6a:c5:bb:c9:20:
                    1d:9d:b7:d8:95:43:f8:04:d3:7b:65:66:a8:3f:28:
                    cf:c5:f1:ef:04:eb:b5:bb:e8:c5:a3:9a:1f:af:ab:
                    0d:03:5f:c8:b7:8f:e7:2a:23:5c:ab:60:17:c6:18:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:88:D0:8B:4A:6D:4B:D1:3F:DB:16:54:21:99:16:44:F4:67:B1:C2
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:8a:bd:b0:42:71:98:c4:f4:1f:3e:30:2c:12:2a:45:ac:4a:
         5c:3d:c0:8e:4e:1e:19:89:f6:f9:67:94:2b:37:a3:20:49:e8:
         c4:ba:18:0e:8e:6a:b0:bc:f4:c3:b5:da:50:d6:e0:34:db:94:
         b7:e3:47:8b:1b:7f:55:a7:94:f8:a9:21:e5:69:5d:09:6b:40:
         11:a3:39:69:6b:85:89:ff:25:6f:b4:e6:fa:c8:e0:ee:d8:c2:
         55:f3:a4:c3:7f:18:08:55:ee:be:45:21:98:7c:bd:e4:fd:c3:
         e5:98:a0:db:15:16:60:f5:2c:8b:bb:58:0c:47:00:dd:09:a1:
         01:35:cc:2e:fa:d7:11:40:27:5e:92:cd:84:42:5c:64:ab:f3:
         72:d0:25:53:03:e8:92:f3:77:43:c6:b3:3c:eb:b4:e4:42:d8:
         09:f4:0f:1b:bc:4d:d1:8e:13:03:c1:df:1f:b9:da:c7:14:5f:
         19:1b:d1:d6:5b:e0:e5:04:b7:a6:1a:ed:24:90:6a:56:59:86:
         d4:23:37:f8:70:4c:c7:7c:8f:06:46:f5:80:cf:44:59:d7:26:
         28:c7:a0:5b:ce:76:3a:bd:a3:ef:bc:c5:a1:24:86:4a:a7:19:
         ec:8a:d6:14:a7:66:35:2f:dc:85:cc:cd:de:55:77:0a:8b:5e:
         1b:4d:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:46 2026 by rpki-client