Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
File:                     7BE06B4744FCF211D039415BB8B17941EC767358.mft (raw, json)
Hash identifier:          atxyA5Pfx53vIg95otEEWrZKdD6+ypBakz0HyYpDOQg=
Subject key identifier:   0D:31:6B:6B:65:A9:9F:D5:15:EF:61:6F:38:52:45:97:6D:0D:EA:75
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Certificate issuer:       /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial:       37032F9F12B1662D718C6065731666932E7A938D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
Manifest number:          0100
Signing time:             Wed 29 Jul 2026 08:48:54 +0000
Manifest this update:     Wed 29 Jul 2026 08:43:54 +0000
Manifest next update:     Thu 30 Jul 2026 12:32:54 +0000
Files and hashes:         1: 34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa (hash: itMokTGxwSWWJTnoUOrsbnDHxxrgvRgcTta07z0tGug=)
                          2: 3130332e3230372e34382e302f32322d3234203d3e203331393732.roa (hash: RAWAjTIR71oOj5iAC3ZDU0cvytEncyEsxBAXvUDb8Sg=)
                          3: 34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa (hash: Pg8t0dpy+alNQ7GNJZSlH3B+oaIcPpb23mHndUI5HFM=)
                          4: 3130332e35362e382e302f32322d3234203d3e20313332333639.roa (hash: 1UbFmkBnIEslSbaPwrvIbgEDhVzttSrJVZztHNfsw9s=)
                          5: 3130332e3139362e3230342e302f32322d3234203d3e203331393732.roa (hash: 1SYz2xalBlvikn5RSADcXqA29mpZMpd81/52YZpjWmg=)
                          6: 3231302e31362e3130342e302f32322d3234203d3e203331393732.roa (hash: n36YMn4WDTafoLTVEBPiggAd2KgjoY7IjA/tNLI51qk=)
                          7: 34352e3132372e3231362e302f32322d3234203d3e203331393732.roa (hash: P9UKOQsuxFs3xLZFpS5NqIKWNqCbgxr7EOJE3zoL3Cs=)
                          8: 3231302e31362e3130342e302f32322d3234203d3e20313332333639.roa (hash: rNo0c/4cUFdHH7fBQOgxxaqnu/zsGxka8B6PzfO9DZk=)
                          9: 3130332e35362e382e302f32322d3234203d3e203331393732.roa (hash: FHTPFoH2p1WQKqeLUlFAhY5qGC41zjRS2iciHjdAGmM=)
                          10: 7BE06B4744FCF211D039415BB8B17941EC767358.crl (hash: yz8rkL5UC/ju+VUjSTU6MczP0d2WXoBTsbzI+E+zGUE=)
                          11: 3130332e3230372e34382e302f32322d3234203d3e20313332333639.roa (hash: yMIYMF+CsHtOYjaSsKKLUtyj/5okkx3bcHmXehZrohk=)
                          12: 34352e3131352e3232382e302f32322d3234203d3e203331393732.roa (hash: AaO+tyC9M3MuUqgo9VYx7I1zEmKXUItDpbRLEplpDsM=)
                          13: 3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa (hash: MGSi22TL/Oeas781w/pWLL2Lhy55kBcyFcyS9bZmKrU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:03:2f:9f:12:b1:66:2d:71:8c:60:65:73:16:66:93:2e:7a:93:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
        Validity
            Not Before: Jul 29 08:43:54 2026 GMT
            Not After : Jul 30 12:32:54 2026 GMT
        Subject: CN=0D316B6B65A99FD515EF616F385245976D0DEA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:12:6c:f6:5a:19:9a:d0:88:79:44:3c:74:
                    7b:fe:35:ce:1a:fa:f6:8b:d1:13:ec:2d:11:ee:7b:
                    bc:a0:5e:92:af:24:cc:65:fa:e0:9b:7e:29:71:11:
                    5f:f2:75:1d:35:32:01:b5:97:19:46:92:de:61:fc:
                    35:e3:f0:8d:b1:4a:fd:c1:0c:3d:3b:26:08:fc:3c:
                    6e:17:d7:a5:1b:34:a7:c0:0c:53:ad:22:2e:22:ca:
                    b6:ab:1a:cd:05:a7:e9:e9:b7:b0:1f:80:d5:48:e0:
                    5d:44:be:2b:0e:c2:9d:50:24:bc:d7:24:fb:c2:8e:
                    00:bb:d3:f8:3e:af:72:e9:69:1e:20:27:3b:2a:1c:
                    5c:92:4e:4b:49:8b:bb:c6:38:b5:0f:cf:f7:ed:05:
                    fb:4d:c1:a1:79:d8:94:a7:37:83:c5:92:3a:c9:d4:
                    4d:88:34:14:54:38:5e:09:0b:6b:84:ed:43:37:b7:
                    4c:7f:d5:3d:c1:c3:79:1a:e3:2a:0a:00:84:8b:fe:
                    d6:ba:38:22:02:32:17:24:92:e8:7a:43:0d:c6:a5:
                    99:49:25:0e:c8:14:83:a3:c8:9e:15:68:10:9e:6c:
                    3e:53:9a:8f:3f:d2:69:87:08:04:6d:55:a2:88:f1:
                    ca:e1:10:93:56:eb:94:dc:ee:04:80:23:f6:ea:69:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:31:6B:6B:65:A9:9F:D5:15:EF:61:6F:38:52:45:97:6D:0D:EA:75
            X509v3 Authority Key Identifier:
                keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:36:83:a9:93:db:1d:d4:15:68:8c:a8:4c:b4:e3:cc:a7:ec:
         8d:cd:16:a5:1b:09:43:77:50:83:14:60:97:34:f4:28:1a:58:
         72:e7:48:d3:79:ff:60:e7:f4:f2:db:73:f6:d7:45:79:86:98:
         f1:8f:8a:43:48:ee:22:07:7c:e6:d3:6f:e0:6e:42:e8:33:fc:
         d4:68:15:d3:e8:70:29:a8:1a:af:e3:f7:50:b9:f8:c7:dd:10:
         32:c6:e5:fe:76:78:b8:5d:75:58:96:08:f2:5b:c9:1e:93:62:
         04:aa:37:64:14:9a:33:00:00:a1:e0:08:ff:57:59:b4:68:0a:
         33:7f:11:9b:da:93:3b:60:13:38:46:ca:86:3f:d0:f8:f9:41:
         9d:27:b5:c9:91:ed:44:be:d8:94:b8:19:18:b1:57:10:96:92:
         fd:5c:d5:f1:46:41:45:01:9e:f7:14:35:18:cb:1a:76:80:d8:
         58:bd:3c:9b:ac:f3:65:d9:ae:86:5b:f1:33:e0:1e:29:0f:6b:
         e6:71:6b:b6:20:0f:1f:5d:c7:66:62:e9:f2:0e:6c:75:a3:1d:
         32:b0:ec:10:cd:39:e3:c6:d4:ed:d3:7e:64:d6:ff:39:64:d1:
         b8:6f:8b:8f:6e:4e:f7:a7:44:b9:11:d9:b4:5a:77:b6:eb:f3:
         e2:43:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:20:53 2026 by rpki-client