Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
File:                     BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json)
Hash identifier:          GTTGXym8LS6ly/YmC/ON5p0XOBSYe5w5zyR/ixtYOA8=
Subject key identifier:   AA:AF:68:F4:BC:C2:D7:7E:B8:6B:09:63:30:11:1E:85:9D:E4:55:13
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       117A2B5758B2EC25774C9B13BE821DFE87B9F889
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
Manifest number:          7C
Signing time:             Sat 13 Jun 2026 01:36:00 +0000
Manifest this update:     Sat 13 Jun 2026 01:31:00 +0000
Manifest next update:     Sun 14 Jun 2026 05:32:00 +0000
Files and hashes:         1: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=)
                          2: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=)
                          3: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=)
                          4: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=)
                          5: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=)
                          6: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=)
                          7: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=)
                          8: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=)
                          9: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=)
                          10: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=)
                          11: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=)
                          12: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=)
                          13: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=)
                          14: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=)
                          15: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=)
                          16: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=)
                          17: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=)
                          18: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=)
                          19: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=)
                          20: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=)
                          21: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=)
                          22: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: BOs5vgYC0ShVe6RBa45KKVvrM40bD/bj8Et0c5TvW20=)
                          23: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=)
                          24: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=)
                          25: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=)
                          26: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=)
                          27: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 05:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:2b:57:58:b2:ec:25:77:4c:9b:13:be:82:1d:fe:87:b9:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Jun 13 01:31:00 2026 GMT
            Not After : Jun 14 05:32:00 2026 GMT
        Subject: CN=AAAF68F4BCC2D77EB86B096330111E859DE45513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:78:46:9a:5e:6c:58:db:cc:6c:e6:e0:6a:
                    8a:b6:48:4d:8a:ce:a9:22:f7:e1:05:f8:a5:78:27:
                    f8:52:07:62:5e:17:d8:5e:37:40:da:ad:c1:64:d5:
                    34:f7:50:60:14:52:69:d6:48:1e:0f:86:4b:f4:94:
                    1c:a1:94:0d:aa:4e:98:9f:fb:a2:a3:14:3a:0f:23:
                    97:67:fa:21:96:a1:c8:14:d3:ec:48:71:a8:be:30:
                    d6:95:27:19:25:28:45:ca:1c:f9:5c:35:1a:06:e4:
                    e8:90:98:06:65:4a:3f:60:e2:c4:ef:b2:ca:ac:5b:
                    6f:80:6f:dc:64:56:f5:59:e5:86:ce:15:18:23:1a:
                    16:90:8b:69:03:74:38:bd:64:6b:e2:63:b8:e4:f1:
                    37:54:a1:22:7a:5b:52:2e:17:dd:ed:d4:d0:c7:7a:
                    e2:01:65:57:0e:42:d7:4f:1e:55:40:92:5e:d5:47:
                    2a:50:15:1a:2e:bc:a0:a9:bb:dc:c5:ca:d7:4f:88:
                    cb:69:90:1c:2a:8a:1c:7d:1b:31:f8:b0:3c:10:a6:
                    69:41:06:92:1b:49:14:e5:f3:6e:fc:61:8b:eb:65:
                    41:07:9a:8f:3e:2a:08:52:68:35:05:8a:1f:fb:5e:
                    04:c0:1b:c8:58:ce:13:c5:2a:51:22:82:88:27:34:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:68:F4:BC:C2:D7:7E:B8:6B:09:63:30:11:1E:85:9D:E4:55:13
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:11:a6:12:cb:24:66:88:f9:56:a5:e8:d2:b8:12:ab:e6:02:
         c6:0a:2e:f9:57:02:b2:74:db:92:17:75:d3:5d:67:b8:93:6e:
         c9:28:00:73:0e:d6:43:f6:97:dd:68:c5:6b:a2:5d:0b:04:15:
         bb:a3:99:55:dc:0c:e6:c0:35:d6:4b:13:28:97:61:9d:9e:e8:
         5a:53:77:ef:0f:a7:d0:24:c2:65:3f:02:75:e7:6a:da:97:5e:
         de:4a:0f:d2:f2:8b:a3:fa:7c:3b:8f:1e:5f:f6:0a:cd:f8:7c:
         22:db:c3:ea:4b:9f:52:2c:80:ce:df:71:ce:97:92:bb:72:15:
         b5:02:b7:c1:41:9a:9e:83:7e:67:af:04:e7:f4:f0:31:fa:1b:
         bd:4c:c0:c9:cb:7e:b1:aa:28:62:47:68:55:04:9b:a0:4d:b4:
         c4:0b:ee:14:31:fe:d3:85:91:e5:45:f0:68:70:00:b4:58:0d:
         8e:7b:46:fe:a5:96:12:b0:36:67:dd:ff:b7:e5:06:79:a8:de:
         e0:73:89:7b:0c:02:86:57:c5:37:01:97:7b:00:ce:2c:ff:9c:
         6d:11:7c:db:d3:12:5f:b6:15:13:cc:4e:ae:32:27:c9:b9:60:
         7a:bd:ea:ed:6d:2a:81:86:03:15:91:b2:93:5f:3c:12:25:f0:
         23:07:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:09 2026 by rpki-client