Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          SZ7jYBDY+uaL5ro1UMNahFWOUigFVYkxPbkOdqBwCEI=
Subject key identifier:   05:4E:EE:42:16:08:C2:05:3A:14:3B:80:3A:28:45:D7:D1:20:FF:D8
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       6ADD92D04CD02B233C27070BB32F16A473B970DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          0105
Signing time:             Tue 28 Jul 2026 23:17:55 +0000
Manifest this update:     Tue 28 Jul 2026 23:12:55 +0000
Manifest next update:     Thu 30 Jul 2026 02:59:55 +0000
Files and hashes:         1: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=)
                          2: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          3: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          4: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
                          5: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=)
                          6: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          7: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          8: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          9: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
                          10: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=)
                          11: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: YRYWNj08n0x6MdVMKIosWDI5QvvwKXdSsM2GNZufViQ=)
                          12: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          13: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          14: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          15: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
                          16: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:92:d0:4c:d0:2b:23:3c:27:07:0b:b3:2f:16:a4:73:b9:70:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: Jul 28 23:12:55 2026 GMT
            Not After : Jul 30 02:59:55 2026 GMT
        Subject: CN=054EEE421608C2053A143B803A2845D7D120FFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:26:cd:59:74:8c:db:38:ca:1d:ba:eb:1a:
                    6a:92:5d:9d:a2:43:98:c3:a3:96:22:81:70:73:5a:
                    1b:cd:82:af:9e:d0:96:b6:d1:ef:86:e9:64:61:5a:
                    53:9d:6f:db:3c:30:1a:b0:80:ce:81:39:65:2f:36:
                    0f:f3:40:74:dc:7e:8b:c0:e8:18:09:1a:a4:97:f9:
                    01:89:c4:87:69:c6:91:57:6a:23:12:ce:1f:51:f2:
                    cd:8a:2f:8a:d3:6d:03:fd:fc:13:e8:2f:2a:f6:2e:
                    ab:f9:31:36:5f:dc:49:b9:40:da:fb:45:d6:a3:ce:
                    5f:10:b8:21:4d:b4:bf:82:e1:42:8b:86:39:09:10:
                    9f:74:8f:2f:47:c9:3f:99:c2:10:d1:a5:9c:09:e2:
                    33:f4:c7:ef:42:b5:ba:05:cd:90:9d:13:35:b4:9f:
                    9d:92:78:1b:05:9b:47:86:4a:cf:a5:53:8a:b6:f5:
                    7c:e2:62:5a:78:90:09:21:8e:00:d2:60:79:10:de:
                    7b:c5:d6:b1:23:0f:30:75:f6:2c:83:e4:45:fe:7c:
                    a1:8b:83:8c:c4:85:27:65:3a:aa:32:3e:4f:56:70:
                    d7:a0:78:9b:07:62:74:98:fb:bf:d3:37:22:41:61:
                    4e:07:4b:a3:91:8f:14:a6:8e:9a:f4:a3:c7:b9:3b:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4E:EE:42:16:08:C2:05:3A:14:3B:80:3A:28:45:D7:D1:20:FF:D8
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:da:4d:e8:c2:e1:0d:ea:04:ea:f5:dc:e6:b9:b3:86:18:
         16:da:1b:e0:18:6e:b1:52:3b:02:95:2e:dd:f4:74:80:e9:12:
         ca:1e:81:4a:8e:c5:ca:3d:60:41:e1:4c:fa:3d:e7:88:da:ee:
         a8:7d:0e:64:eb:a4:4f:ef:47:61:43:c0:15:0a:50:e3:48:e6:
         9e:ee:fa:70:27:4c:08:db:49:1f:ee:6e:81:8e:bb:da:5f:83:
         ab:8e:41:04:38:0a:83:e7:ef:3b:1a:d8:2b:db:e9:54:e8:03:
         1f:98:c4:87:76:a0:6f:2d:b9:6d:d0:f0:29:e0:d6:8e:3a:59:
         3b:8e:ec:da:1a:05:e7:99:2b:92:a5:26:94:90:71:2c:1f:e9:
         dc:f4:53:c2:9c:9b:78:b9:5c:aa:fb:36:a7:3d:8d:fc:b4:0f:
         79:ae:e0:44:91:11:fc:33:4d:d9:1a:93:5d:c9:dd:67:de:2f:
         95:4d:d3:c7:ba:ce:81:e7:e8:af:af:b7:64:03:e9:26:35:33:
         7d:9e:c8:f9:a9:00:66:4e:d5:45:2e:54:0d:69:87:d0:46:e1:
         23:c2:9d:22:4d:b4:93:8b:65:cd:6d:64:16:7d:d6:c2:99:66:
         2f:2c:de:6f:f9:3d:a0:6c:d0:b1:64:93:cf:ee:d6:7a:63:0e:
         1b:ee:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:20 2026 by rpki-client