Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File:                     7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier:          qCkBIDir59k7ffKDEnZBtA5tE5dTbGBfIzqdx/a8KBk=
Subject key identifier:   09:BF:6F:D6:13:F1:DF:D1:08:92:BE:0B:C5:EA:2B:6B:CD:11:CA:80
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       25C5C2E9EAAEB310BB53BDAD46EAE5C0DF2E5F3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number:          C3
Signing time:             Sat 13 Jun 2026 16:46:57 +0000
Manifest this update:     Sat 13 Jun 2026 16:41:57 +0000
Manifest next update:     Sun 14 Jun 2026 18:31:57 +0000
Files and hashes:         1: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
                          2: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
                          3: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
                          4: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
                          5: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
                          6: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
                          7: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
                          8: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: WcHgsGrhX1CBYFGiFUGPBPcRvZokVFF2cpRU/tBJ94k=)
                          9: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c5:c2:e9:ea:ae:b3:10:bb:53:bd:ad:46:ea:e5:c0:df:2e:5f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Jun 13 16:41:57 2026 GMT
            Not After : Jun 14 18:31:57 2026 GMT
        Subject: CN=09BF6FD613F1DFD10892BE0BC5EA2B6BCD11CA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:04:ad:c9:e9:c5:bd:0e:11:c0:0d:50:8b:
                    ef:e2:6c:d8:11:85:63:ca:24:9f:4c:74:0d:a9:93:
                    f5:19:13:8e:d2:5e:d2:91:88:68:b0:22:37:b9:a7:
                    91:3a:1c:d3:68:59:0d:bb:25:d3:1a:99:75:33:35:
                    84:78:bb:0a:10:00:08:9a:d4:df:df:d3:5e:4c:7d:
                    37:d4:de:83:40:ec:ab:de:0d:c3:6a:7c:1d:f9:a4:
                    55:21:1d:6b:02:1a:74:8f:70:f6:7a:eb:d0:af:45:
                    e1:dc:b9:ef:b1:6d:b0:c3:8d:25:70:99:5d:9d:c8:
                    c0:aa:54:60:15:33:d3:ed:4e:d7:e0:8e:1b:a3:7b:
                    73:02:34:87:87:5a:04:b3:5d:48:42:4d:c4:7c:83:
                    76:19:43:df:7c:68:2e:ad:c8:ff:45:5a:c7:67:42:
                    2c:c3:ea:ec:a7:1b:9f:a3:9d:8d:3b:12:d1:25:87:
                    95:47:d4:f8:22:3e:87:c3:e0:9e:b4:0a:16:a5:0d:
                    87:c2:3d:97:34:0c:1e:3a:60:50:87:bd:2c:92:f0:
                    3e:1f:e4:fb:6f:dd:a1:80:be:9a:04:b7:f0:83:44:
                    05:a8:42:02:2a:8b:e6:b8:7f:53:e6:db:d2:59:54:
                    eb:fa:d5:1a:0f:ce:84:d7:82:f4:9c:75:49:9c:03:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BF:6F:D6:13:F1:DF:D1:08:92:BE:0B:C5:EA:2B:6B:CD:11:CA:80
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:74:fe:3f:72:42:45:c0:0a:5e:00:50:04:c5:58:84:5f:fc:
         c4:8d:6f:39:8b:1f:24:39:86:2a:17:3f:df:f7:37:97:08:2a:
         97:55:bb:d3:99:b6:d2:0d:e0:fc:ab:ab:02:e5:19:f6:05:6d:
         d1:2f:49:66:58:e3:22:53:e0:29:0f:52:a1:c8:69:8f:09:03:
         16:5b:90:0e:4e:7e:5f:48:ac:26:7d:c0:95:53:1b:92:ca:0f:
         65:f0:9a:8b:4f:22:b1:95:8a:d5:e9:4a:7c:ba:4e:dc:a8:32:
         1b:17:24:60:61:e2:b3:41:36:52:ac:1f:b0:4b:b1:6d:9c:5b:
         52:6a:78:05:8b:2e:8c:83:08:dd:21:22:69:df:10:23:79:79:
         4c:c5:97:9f:90:dc:c1:d9:d1:b5:88:42:bb:1c:61:2c:38:c0:
         f5:fc:3f:06:35:44:cc:c0:7c:00:fc:45:60:cb:e7:09:c2:ff:
         16:e9:a9:e2:ef:a6:cc:8c:b3:97:e8:83:bd:ee:10:af:82:ab:
         db:60:06:2a:a3:4f:5a:36:57:7b:6c:4f:b3:08:67:52:82:89:
         41:f8:0b:20:35:b3:b6:2a:50:3a:8f:fa:2f:fa:7a:71:a9:36:
         1e:35:63:68:08:a4:69:1a:30:96:0c:f0:bc:b5:0e:83:82:77:
         ee:1d:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:10 2026 by rpki-client