Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File:                     845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier:          pl90SfFZMjoG5SyazME5u/QX7oulEbzYH1950KwPhsg=
Subject key identifier:   7F:A4:1F:50:99:E0:82:D2:09:79:3B:D9:D6:A3:86:CB:BB:24:EB:DC
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       4CC72081C721F1A211287D51344F10F4684DCED5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number:          0146
Signing time:             Wed 29 Jul 2026 07:08:45 +0000
Manifest this update:     Wed 29 Jul 2026 07:03:45 +0000
Manifest next update:     Thu 30 Jul 2026 08:25:45 +0000
Files and hashes:         1: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
                          2: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
                          3: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
                          4: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
                          5: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
                          6: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
                          7: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
                          8: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
                          9: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
                          10: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
                          11: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
                          12: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
                          13: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
                          14: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
                          15: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
                          16: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
                          17: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: zDGFzPvA69hnH1WZx2DKssiiAUVb5DY9fIAUt/oNyA8=)
                          18: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
                          19: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
                          20: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
                          21: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
                          22: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
                          23: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
                          24: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:20:81:c7:21:f1:a2:11:28:7d:51:34:4f:10:f4:68:4d:ce:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jul 29 07:03:45 2026 GMT
            Not After : Jul 30 08:25:45 2026 GMT
        Subject: CN=7FA41F5099E082D209793BD9D6A386CBBB24EBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:70:69:4b:44:03:33:5c:50:52:ac:45:cc:
                    e3:b2:52:d7:4e:0b:3d:41:d6:83:7e:9b:ac:a1:8e:
                    04:1a:3f:8f:07:b9:81:21:14:82:5a:10:a3:4c:48:
                    f2:e4:0f:3e:12:4e:29:30:1a:8c:96:96:80:21:0c:
                    b1:09:b7:e4:e3:82:49:d0:67:c1:4d:fc:9b:c8:49:
                    f2:ac:fb:f4:2b:59:a1:4d:3f:dc:02:eb:ab:11:a6:
                    73:66:b0:8c:ed:14:60:09:c5:9d:47:da:eb:48:cb:
                    f7:06:4f:37:47:a1:eb:19:f5:07:d2:18:ef:ca:db:
                    13:84:4b:2d:b0:d0:5b:d8:90:9a:b5:c9:5b:0e:02:
                    71:be:41:98:fe:96:91:2a:6e:03:70:2c:d5:77:b6:
                    e4:c5:bc:e5:b7:65:4a:e3:e0:7f:f5:ae:0e:bb:05:
                    7e:21:6d:9f:f4:62:6c:d1:27:93:d5:04:53:9e:54:
                    47:cb:9d:a4:e0:11:55:1c:65:74:d3:05:30:6c:1c:
                    18:41:7d:d5:c3:01:f8:9d:a8:0c:6e:07:98:4e:6f:
                    7f:e0:d8:1d:05:14:f9:58:e3:89:8a:43:c3:df:8d:
                    b1:dd:17:f2:e8:0e:a4:4a:1e:24:b0:06:c7:0e:e8:
                    85:62:08:3b:b0:d9:6a:fb:ef:dc:cf:c4:12:54:ec:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:1F:50:99:E0:82:D2:09:79:3B:D9:D6:A3:86:CB:BB:24:EB:DC
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:bf:d3:0d:2b:f0:d3:61:05:dd:33:42:da:e2:d1:ea:a9:
         98:df:11:fc:0f:40:58:ec:20:67:06:22:9f:18:51:6d:f2:90:
         00:49:36:f0:8e:8c:f3:db:ed:ff:72:f6:3a:01:14:c1:dc:66:
         a8:39:c3:ec:db:54:bd:a3:73:27:62:94:73:38:02:29:a0:a3:
         86:eb:dd:6e:a2:c6:5a:78:4b:f7:07:ae:43:60:1c:e1:8b:25:
         64:38:d3:43:73:e8:67:93:6f:06:e8:2f:bd:2a:00:c2:28:6c:
         a6:1a:7e:32:e7:5d:15:51:80:99:0b:54:e0:79:60:70:16:3d:
         8c:0a:4c:41:93:30:09:12:b9:5e:a6:75:db:5f:68:2a:18:ce:
         a5:45:90:3c:c3:53:b9:ce:b0:80:48:54:a7:73:0a:6d:78:ee:
         d9:1c:27:fd:5c:6d:72:c3:7c:25:d0:a9:14:27:8c:a8:e6:6f:
         0c:53:64:2a:b9:61:56:a4:81:a1:7c:0b:d8:1e:17:22:b0:93:
         62:65:7c:97:f8:62:01:85:bb:e9:fe:f6:9b:be:11:cc:3e:2d:
         91:c9:b4:1f:d2:3a:86:92:f4:63:e4:19:a5:4c:aa:c8:04:11:
         fc:17:d3:94:c3:a6:bb:52:f6:ae:a3:6f:ac:43:5e:10:bd:6b:
         ab:3c:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:02 2026 by rpki-client