Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File:                     7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier:          V7UNT/OZWg1ctrI3S7YwiGJaEQtBA0AE4drnFbjZhmQ=
Subject key identifier:   23:8C:FA:A4:5B:FC:70:09:F5:8F:E5:6A:3A:C8:18:01:8D:40:3F:E5
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer:       /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial:       09D00B50B4CF2E7574C32F398076009CAED12FAC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number:          0138
Signing time:             Thu 08 Oct 2026 23:22:49 +0000
Manifest this update:     Thu 08 Oct 2026 23:17:49 +0000
Manifest next update:     Mon 12 Oct 2026 09:57:49 +0000
Files and hashes:         1: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=)
                          2: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: dk5Mt42fYyf+BmuJHIkZJUeuJp/fHE0tckm4yRc4css=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 03:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d0:0b:50:b4:cf:2e:75:74:c3:2f:39:80:76:00:9c:ae:d1:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Validity
            Not Before: Oct  8 23:17:49 2026 GMT
            Not After : Oct 12 09:57:49 2026 GMT
        Subject: CN=238CFAA45BFC7009F58FE56A3AC818018D403FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:56:3d:93:28:ba:7b:53:39:9a:fa:2e:7f:
                    d6:6a:dd:66:3f:0b:77:1e:48:b0:03:a9:6d:6f:b2:
                    0b:28:17:f0:35:d7:c4:d3:2f:0b:89:49:b1:19:3c:
                    05:e4:c9:26:87:c7:12:ba:c7:fa:cb:23:02:f1:cf:
                    85:ba:c2:b6:cc:2d:e9:3e:07:7c:7a:09:74:0b:24:
                    84:35:36:0d:fe:04:15:e0:ee:80:e0:5f:5d:e4:64:
                    47:28:9f:5f:da:29:11:74:26:4e:84:ac:81:bb:84:
                    b9:7a:ef:32:22:41:96:bc:59:84:7d:15:b3:0b:cb:
                    29:02:4a:c6:51:1e:e3:1e:ea:18:eb:6e:09:a3:cc:
                    09:b3:e8:4f:d8:e5:01:b1:c2:06:68:fd:79:8c:02:
                    b8:22:04:b4:61:14:ca:41:d4:d9:70:ec:cc:0b:2f:
                    72:65:3a:93:fe:c0:82:a2:27:51:66:b2:6d:30:93:
                    89:55:41:c2:9c:6e:97:08:6e:08:8d:ba:30:a5:24:
                    4e:d9:57:88:58:93:ff:64:0a:bf:ae:07:a4:2c:da:
                    e8:84:26:6f:11:86:99:40:66:47:98:c9:6d:56:2c:
                    d8:30:7f:a2:fd:22:46:28:1c:1b:f5:aa:c7:60:0f:
                    ef:9b:91:18:e6:18:6a:98:05:ba:f3:a4:3d:19:cf:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:FA:A4:5B:FC:70:09:F5:8F:E5:6A:3A:C8:18:01:8D:40:3F:E5
            X509v3 Authority Key Identifier:
                keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:17:aa:aa:16:f3:19:29:ac:58:84:11:e6:ec:e9:01:2d:
         2e:3a:e5:0c:5d:a1:32:17:31:39:15:e4:73:3e:7c:32:b4:8f:
         6c:dc:94:7b:04:1e:02:8e:6a:7d:52:be:45:f1:a1:c3:83:dd:
         ec:f8:12:3a:3a:8f:76:43:bd:3c:8a:ad:b0:90:dc:de:3e:ed:
         77:d7:c6:60:27:5a:df:ee:5f:af:65:5a:d6:b7:7f:f3:8c:81:
         2e:9d:fa:8f:54:8e:e2:8b:75:d0:16:84:98:8d:b8:24:c3:d1:
         e6:92:2d:f0:49:ec:06:91:ad:31:3d:2e:db:9c:70:16:42:56:
         ac:33:10:c9:4c:22:1b:e4:11:24:18:0b:3d:1c:2d:5f:6b:c5:
         d9:af:27:9f:03:ee:ee:bc:a9:b4:8d:1e:13:4f:6c:07:47:b9:
         d3:68:59:73:95:26:45:35:b1:83:e1:65:23:78:d5:69:4c:29:
         b6:01:1c:b5:49:e7:86:4c:a3:37:15:7e:28:ae:48:47:d1:f5:
         7c:43:e8:96:99:80:64:43:b1:09:24:e9:17:42:d9:ba:d1:b2:
         3a:08:8a:d1:66:f0:6a:62:d7:2e:90:dd:8b:bd:15:41:7e:85:
         64:7f:83:9f:1a:40:6e:ac:45:ec:71:74:3c:ff:19:1a:6e:e1:
         a2:98:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:26:19 2026 by rpki-client