Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File:                     7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier:          PDml5Rfy4ZIr1oNoRVQQxWKO22NJbDRq6INLmuOX71g=
Subject key identifier:   B6:75:A5:0F:A4:1E:1D:33:99:88:6C:1B:56:59:5F:49:7A:03:8B:F7
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer:       /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial:       62C5C80D9A876FBA39151708915AA8219D989D03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number:          C1
Signing time:             Sat 13 Jun 2026 22:52:24 +0000
Manifest this update:     Sat 13 Jun 2026 22:47:24 +0000
Manifest next update:     Sun 14 Jun 2026 23:20:24 +0000
Files and hashes:         1: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=)
                          2: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: Pinuh3UGLujd7w9gQMmuAThQuMObRTs+mAAX9gG5jdo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c5:c8:0d:9a:87:6f:ba:39:15:17:08:91:5a:a8:21:9d:98:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Validity
            Not Before: Jun 13 22:47:24 2026 GMT
            Not After : Jun 14 23:20:24 2026 GMT
        Subject: CN=B675A50FA41E1D3399886C1B56595F497A038BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:ca:30:89:99:26:0d:05:32:bb:21:b7:c3:
                    ac:fe:d3:7b:dd:11:78:86:5c:b8:d2:6d:6b:83:3e:
                    43:17:77:b3:25:12:7f:a7:e6:38:18:37:be:c4:86:
                    2f:7e:ec:a6:57:66:b5:d4:76:04:74:67:4f:73:4b:
                    3e:ee:9d:8a:3b:a1:c8:6c:2c:c1:4f:60:06:9d:b6:
                    e9:d6:aa:0e:0a:61:17:fe:52:bc:ed:40:0d:33:f7:
                    49:a2:29:53:05:93:ea:c2:8e:1a:c2:6f:09:b7:06:
                    20:da:a5:d0:ad:be:a4:90:48:fc:57:0b:6e:5d:f0:
                    8f:25:8b:e3:00:56:81:bf:2a:b5:dd:83:dd:0f:d6:
                    a7:3e:6f:86:d1:08:81:86:0b:6a:d4:ef:31:aa:e0:
                    1b:18:7e:07:02:6e:b6:9e:57:58:10:8f:15:ae:c2:
                    bc:9d:f2:d6:ad:98:c6:39:15:b1:14:04:66:d7:d5:
                    59:e4:ce:91:a7:f2:f4:36:4f:57:47:d5:cf:3a:b4:
                    01:73:37:1c:19:5f:14:b2:c2:01:5e:8f:c5:c4:fe:
                    cb:e8:42:1a:7f:91:45:d4:78:10:97:8d:3c:a4:b5:
                    2e:e4:23:60:9e:29:9b:a6:11:7a:ec:24:21:06:23:
                    72:f1:3a:76:c7:61:33:94:71:1e:c3:65:03:55:04:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:75:A5:0F:A4:1E:1D:33:99:88:6C:1B:56:59:5F:49:7A:03:8B:F7
            X509v3 Authority Key Identifier:
                keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:f6:a2:ef:7c:b4:57:58:05:96:d8:17:21:d8:fd:84:29:
         b8:6b:b7:f7:7d:ad:bd:2a:aa:9a:d4:da:f0:22:bb:21:23:bc:
         51:4c:d1:88:10:17:a8:6b:fa:f2:33:ca:3a:bd:f4:f0:c9:ac:
         9b:7c:a7:57:5e:bd:bb:95:35:c3:a1:80:5f:0c:b5:70:9f:84:
         0b:61:e9:27:c1:ec:83:44:10:cd:9d:ce:9d:39:f5:7d:cd:d2:
         17:67:89:a2:be:d6:67:6d:46:c9:a0:cb:c5:48:9f:33:ca:c9:
         39:c3:6b:eb:f7:d5:28:50:42:16:c2:a3:1e:bc:d3:fe:8d:a6:
         83:5e:a4:c0:40:10:ca:ea:4a:9d:e9:7e:39:5d:fd:ae:88:92:
         7b:18:2e:6d:66:03:52:5e:f0:dd:84:16:e8:eb:66:bd:8e:f3:
         9c:d4:d1:95:20:fa:40:21:75:49:9f:9d:85:60:52:da:5f:58:
         59:90:97:0c:b6:39:9c:0b:a1:90:9f:0d:0c:4e:06:52:2e:ca:
         54:21:a9:1c:00:2f:61:e2:5f:0e:2c:2f:8c:b5:6f:b7:ca:2a:
         79:1c:b8:c7:f8:d1:8a:44:51:44:01:19:2b:78:f9:35:9b:eb:
         20:33:ff:be:72:07:18:9a:ce:cb:3d:2b:52:c8:b6:92:51:83:
         06:e7:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:29 2026 by rpki-client