Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
File:                     7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json)
Hash identifier:          OQFzn+ZBW7/eQT1UYqjdBPLNP97MH0F5gjt3jEWnsbg=
Subject key identifier:   CE:BE:F0:94:07:DA:95:B8:84:49:74:94:FA:39:D5:86:41:8F:89:0A
Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
Certificate issuer:       /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Certificate serial:       390D2BCF19719A51BA1386BB26CE0F6E10785DE0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
Manifest number:          F1
Signing time:             Fri 02 Oct 2026 17:35:41 +0000
Manifest this update:     Fri 02 Oct 2026 17:30:41 +0000
Manifest next update:     Mon 05 Oct 2026 18:14:41 +0000
Files and hashes:         1: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: E7JBFcaQ6y12nCcn/dxhG0ZcqwT6BYkvMnGylldagAQ=)
                          2: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=)
                          3: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 06:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0d:2b:cf:19:71:9a:51:ba:13:86:bb:26:ce:0f:6e:10:78:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
        Validity
            Not Before: Oct  2 17:30:41 2026 GMT
            Not After : Oct  5 18:14:41 2026 GMT
        Subject: CN=CEBEF09407DA95B884497494FA39D586418F890A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:9d:d1:b5:08:bd:7c:db:04:cb:ff:db:44:
                    cb:23:05:6c:45:68:38:49:7a:9e:ee:b3:4f:b6:1e:
                    ea:f8:9f:5f:b7:5a:6c:f6:98:08:9c:6d:43:26:bb:
                    5f:32:98:41:2b:10:99:33:ff:73:dc:de:c5:a1:01:
                    f7:78:4f:c8:36:63:55:54:0f:6f:05:4b:a8:8e:21:
                    4b:50:24:ae:4d:e2:2c:71:fd:b7:cb:77:b1:05:57:
                    7c:f3:9e:ff:17:5f:be:7f:3a:ba:9b:d2:de:0d:ad:
                    08:79:57:e5:37:49:2d:8f:3a:a0:a9:6d:aa:25:d6:
                    99:b8:34:73:db:f3:1e:a1:23:5e:25:2b:20:01:a3:
                    1e:7c:b9:ba:f4:4d:ab:34:eb:63:21:13:91:54:60:
                    8a:9e:9f:9a:4f:f7:b5:1a:2c:93:13:b2:d2:dc:d6:
                    0a:d3:b0:51:81:01:c0:64:f7:15:9f:ee:25:f6:49:
                    87:5d:61:d4:d6:d2:e2:65:8e:ba:48:2d:ad:d9:da:
                    0f:57:e7:a5:f6:ca:15:e5:d4:bd:27:bb:40:66:13:
                    8d:3a:24:54:6a:d9:47:20:b2:25:0a:6a:97:a5:56:
                    9a:a5:66:5e:85:43:75:b4:2c:0e:8b:fb:54:6c:be:
                    33:77:94:0b:9d:7c:12:6b:3e:80:fb:19:e9:3e:a2:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BE:F0:94:07:DA:95:B8:84:49:74:94:FA:39:D5:86:41:8F:89:0A
            X509v3 Authority Key Identifier:
                keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:d5:85:b2:21:aa:bd:3c:ad:ef:b6:f1:20:45:45:cb:52:
         40:a1:21:4a:5e:76:e6:b4:7f:38:ad:c1:23:25:2a:22:6d:fc:
         2b:1b:3f:92:2b:63:ce:f0:2a:9b:ab:1c:d4:66:f9:92:62:43:
         c8:1d:98:23:f5:0e:29:68:fd:9b:df:cd:65:7f:82:53:08:21:
         2f:85:72:88:02:d9:e2:d1:6e:85:3c:d1:46:a5:dd:88:75:16:
         12:52:aa:f5:ef:59:ba:2e:9b:1c:bb:16:29:5e:65:de:6c:cd:
         36:a2:74:b4:90:50:9d:9f:05:a5:f4:89:8d:17:41:b2:43:8e:
         4b:37:fa:49:56:3a:fa:b7:5b:81:cf:d0:0e:b0:7c:09:89:c5:
         1b:6e:5d:45:1e:11:2d:8e:3b:1e:cf:84:e9:aa:02:80:80:71:
         ce:3c:c1:ad:12:47:e0:ae:f9:91:1b:43:76:ee:bf:e5:8e:cb:
         2a:2f:8e:91:74:42:ff:fb:ab:6f:14:13:45:82:9c:48:c1:6c:
         c0:78:00:d7:5a:12:c5:2b:0f:da:4d:d5:e7:fd:3b:93:f9:35:
         0a:3f:f2:9b:13:3b:52:26:02:90:a2:6d:80:0c:ce:ed:2f:a9:
         1c:dd:9d:2f:3b:ad:3f:df:1e:bb:dd:e0:06:1f:14:05:ab:c6:
         b8:a5:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 04:31:52 2026 by rpki-client