Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
File:                     D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json)
Hash identifier:          7nJYjODs7pMp4RWZ5ZQGfAjDwVd1ve2QSXTHdBEqFyw=
Subject key identifier:   C1:FF:66:7D:74:9D:E3:6D:3F:A6:64:6F:44:B1:A0:88:D9:AA:05:D8
Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80
Certificate issuer:       /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
Certificate serial:       738170D6D408299CFEE9690BDE3B68E2B2F5F0E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
Manifest number:          B6
Signing time:             Tue 28 Jul 2026 12:11:46 +0000
Manifest this update:     Tue 28 Jul 2026 12:06:46 +0000
Manifest next update:     Wed 29 Jul 2026 14:49:46 +0000
Files and hashes:         1: 35392e3130382e36342e302f31382d3138203d3e2034383437.roa (hash: UZg0Pagp0Gw27BW9AwJK8jAPOGF7fxdA7nHKJO5oxaM=)
                          2: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (hash: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA=)
                          3: 35392e3130382e39312e302f32342d3234203d3e203138323435.roa (hash: t3Rtro7rqy01zijDzj7kZjiqLfqCkrk5i7GAf6LIfoI=)
                          4: 3231392e3233322e35362e302f32312d3231203d3e2034383437.roa (hash: lw/R3INf1/Of5Zr58lokdX06wXsULy/mmXgkyhpRaBw=)
                          5: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (hash: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE=)
                          6: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: WWSlCk/A1yoV8/3YyppBcGV1bdu1ZqF7tEq7VY2DJNU=)
                          7: 3231392e3233322e33322e302f31392d3139203d3e2034383437.roa (hash: XnvWHCHXJJHlF0VPu6jLiAqdmQ9yX8bDWf+QnfAsvcU=)
                          8: 3231392e3233322e33362e302f32322d3232203d3e2034383437.roa (hash: bmOU5gtClm+CxO3KqtpunOqLSiUQw3h4LJIR2hU/7uc=)
                          9: 3231392e3233322e34342e302f32322d3232203d3e2034383437.roa (hash: 5nVAN8TukMmhCfRksOm2Om3KwxeVxz5mu4z2JJ0Wqo4=)
                          10: 323430303a353430303a3a2f33322d3332203d3e2030.roa (hash: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU=)
                          11: 35392e3130382e3232342e302f32302d3230203d3e2034383437.roa (hash: RXfkLYOn1avjUMDreVTOH1SQP55YSQigEG0a9ocHRoI=)
                          12: 3231392e3233322e33322e302f32312d3231203d3e2034383437.roa (hash: 19OWcoaieBtLmTSPQYB3Qb8dIYvVSsw5E2tnoiH7Kx0=)
                          13: 35392e3130382e33322e302f31392d3139203d3e2034383437.roa (hash: dxgLrIfF64T7S4w49qMJsSs0eRb10ZprN7ZucyGPm+M=)
                          14: 34352e3235332e36382e302f32322d3232203d3e2030.roa (hash: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM=)
                          15: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (hash: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk=)
                          16: 3231392e3233322e33322e302f32302d3230203d3e2034383437.roa (hash: ahFzTowcg8RurCXrOIyB3W96Jwlje6M6e87CUFLxMk0=)
                          17: 35392e3130382e302e302f31362d3136203d3e2034383437.roa (hash: +MVFENXiTS5qu1cGyUwlG21oFkjrekCQs7zCw/wtnVk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:70:d6:d4:08:29:9c:fe:e9:69:0b:de:3b:68:e2:b2:f5:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
        Validity
            Not Before: Jul 28 12:06:46 2026 GMT
            Not After : Jul 29 14:49:46 2026 GMT
        Subject: CN=C1FF667D749DE36D3FA6646F44B1A088D9AA05D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:a0:a8:c0:f1:8e:28:44:6a:10:cb:fd:a1:
                    c5:ea:4a:98:24:e1:72:de:c9:b3:f7:7c:a7:89:c1:
                    c5:89:f6:3d:e2:b0:cd:6c:5a:7e:c5:fa:b9:f5:bf:
                    ab:1b:74:ca:54:56:35:03:48:b6:dd:42:95:2a:06:
                    72:56:99:67:5a:c8:53:ac:85:49:bb:67:02:99:da:
                    af:1c:3b:fc:88:5b:68:c9:7a:58:0b:13:2a:77:78:
                    be:69:9d:72:f2:76:00:89:83:79:e1:14:e4:7c:e7:
                    77:b7:9c:0f:1d:4e:f5:6d:ff:61:bf:c6:91:64:f0:
                    ad:ea:54:15:fa:2e:ad:3c:08:a6:ba:24:68:54:6e:
                    c9:1f:e0:53:5b:3b:1f:4a:d4:70:ae:bf:74:59:f4:
                    45:91:ea:cf:be:df:b7:1b:13:c7:3c:39:ea:b1:13:
                    db:fb:48:79:18:b9:00:30:02:e5:ba:8b:6f:4c:63:
                    d4:6c:c2:8f:fc:92:2c:f8:94:9b:58:97:7a:1d:4c:
                    76:96:98:fc:b3:b4:1f:c4:bc:3a:57:af:ab:20:68:
                    96:c2:95:e9:c5:f5:1f:86:ba:bf:7f:46:32:c4:ba:
                    0a:1c:79:1d:83:4d:bc:89:9c:4d:cc:64:36:c0:37:
                    50:78:21:0e:30:3e:cb:07:00:66:b2:3f:12:24:ad:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:66:7D:74:9D:E3:6D:3F:A6:64:6F:44:B1:A0:88:D9:AA:05:D8
            X509v3 Authority Key Identifier:
                keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:f4:56:bc:c2:d1:9a:32:93:06:00:a2:9d:a7:13:5a:eb:
         eb:9e:83:25:dd:f5:15:c4:4d:c7:a8:eb:64:6e:65:5b:02:56:
         a7:30:81:26:40:25:c3:9a:c6:1c:6e:fc:5b:f1:e3:e3:80:13:
         f6:c8:34:a3:33:7a:52:88:3a:c5:03:90:51:f8:8c:57:b3:b3:
         81:a6:94:f1:cd:e0:bf:19:3b:d4:77:f4:ce:03:5d:37:1c:d9:
         7f:e4:8d:c8:44:fb:21:36:34:f6:d7:f9:e4:65:e9:a5:a2:eb:
         ff:0b:64:43:ea:b1:d1:7d:e5:b8:a4:f5:14:42:8b:e3:9b:42:
         23:24:55:36:4b:fa:e0:d2:c0:61:eb:c2:95:1d:7e:07:95:09:
         ce:f7:df:54:7e:b6:ec:44:49:16:f9:7e:4f:16:c6:f7:2b:91:
         f2:46:9a:e5:37:fd:b6:ba:51:2e:94:4c:93:d8:9b:0b:e5:07:
         08:2b:10:bb:f3:b4:aa:34:9f:35:18:74:cf:36:1a:fc:ce:a7:
         b5:a6:a4:d4:7a:eb:42:cb:11:82:0d:4b:7f:c1:e4:89:46:1c:
         2c:67:6c:84:20:c6:02:0c:a8:1e:74:1f:9b:6d:af:24:83:7b:
         ca:69:e9:09:53:76:c6:01:ba:1a:bc:2b:64:aa:4c:ee:b9:ec:
         cc:d9:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:03 2026 by rpki-client