Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File:                     7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier:          Hq9/5pWhGr0l7StOZVF/ZhFiqTNUsyfrmm5us7o/DM0=
Subject key identifier:   85:E4:A3:23:60:04:15:36:0F:29:34:8F:47:E6:8E:CE:25:C9:A1:8F
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer:       /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial:       42DF646C1F16CFA2B23EBDA642AA9682A5FA954B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number:          51
Signing time:             Sat 13 Jun 2026 14:36:52 +0000
Manifest this update:     Sat 13 Jun 2026 14:31:52 +0000
Manifest next update:     Sun 14 Jun 2026 16:08:52 +0000
Files and hashes:         1: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
                          2: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: Z4CWhd8k0Ck6duXHu3pryAz7I2khB5OJDEnEH9CET2w=)
                          3: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
                          4: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
                          5: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:df:64:6c:1f:16:cf:a2:b2:3e:bd:a6:42:aa:96:82:a5:fa:95:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
        Validity
            Not Before: Jun 13 14:31:52 2026 GMT
            Not After : Jun 14 16:08:52 2026 GMT
        Subject: CN=85E4A323600415360F29348F47E68ECE25C9A18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:0d:1c:26:63:37:5f:99:84:0f:0c:57:01:
                    e7:d3:b1:5b:81:e5:47:7c:2d:a5:58:24:b8:92:77:
                    f0:da:33:9b:5d:07:ea:9e:1d:00:af:b2:03:ee:a9:
                    41:f0:09:d1:52:d7:e2:87:51:5d:9e:a1:f2:90:1a:
                    8d:ac:1a:b3:86:b1:b7:fb:f5:d4:44:97:a9:14:c7:
                    76:77:2e:6a:f9:51:34:3d:16:78:30:e0:05:9f:fe:
                    98:24:07:c5:17:7b:f5:e4:56:3a:6e:c8:b5:cc:26:
                    0b:45:63:d6:03:2b:3a:3c:64:5b:9f:a3:ba:a3:67:
                    5d:d8:36:1b:ea:38:6b:3f:09:fe:77:ab:d9:c4:a5:
                    b6:bc:b5:50:30:d2:79:3f:7d:a6:77:5e:c9:9a:46:
                    e5:69:de:8e:28:8a:ef:c1:19:41:79:b4:88:cc:01:
                    24:c1:c2:f6:3c:e7:8b:ee:e4:4b:2b:1a:9e:fc:16:
                    08:e8:ef:47:3f:46:25:63:f2:ee:b5:fe:20:32:b8:
                    d4:69:18:3a:bf:94:ea:83:fc:7a:47:d2:e1:26:1b:
                    a0:73:e0:b7:6c:be:86:e5:6d:e1:4c:79:86:ce:27:
                    62:42:b0:ea:ee:82:4f:d4:cc:3e:dc:0a:0e:3e:e5:
                    f9:a3:b0:02:0e:39:cd:80:3e:e8:9c:bc:c0:f7:2c:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E4:A3:23:60:04:15:36:0F:29:34:8F:47:E6:8E:CE:25:C9:A1:8F
            X509v3 Authority Key Identifier:
                keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:7b:ab:14:43:cc:e7:9f:d5:3c:07:09:f0:3e:6f:a8:10:
         60:0f:93:1e:6c:9e:04:8a:a8:1f:93:38:66:83:f2:0a:d7:cf:
         62:54:d1:ff:dd:e3:69:1b:00:b9:04:0e:aa:59:84:5b:41:30:
         60:1c:6a:cf:03:8e:5f:92:a7:42:72:97:ff:56:d8:f0:21:02:
         7e:41:10:c8:64:23:f6:23:be:5f:ff:7d:31:04:ea:aa:16:ba:
         6c:6e:b7:59:11:4f:e7:f4:f5:01:dd:97:dd:71:d9:97:fc:24:
         e5:3c:a4:be:c0:05:0f:da:e5:18:64:37:86:66:c1:9f:94:10:
         eb:c8:1e:65:a1:d5:a9:3f:3e:01:94:69:dd:5a:9c:01:f3:ec:
         e4:e4:f7:17:16:91:2d:85:cc:98:20:f8:19:c3:16:33:af:78:
         79:04:7d:a8:45:41:b8:83:82:82:7d:74:64:bc:1b:a2:55:68:
         40:7f:9e:39:8e:63:61:24:e9:ad:c0:19:0e:ea:f1:d6:83:2e:
         35:bf:35:07:16:9e:d2:93:21:1b:7b:5f:18:2d:90:d3:1b:55:
         2b:b8:e7:a5:5e:50:37:41:b1:44:37:83:ca:6d:ee:26:de:00:
         5a:be:d0:26:a2:79:8f:eb:35:ee:f7:61:f5:3e:38:c8:bf:4a:
         59:7c:62:55
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQt9kbB8Wz6KyPr2mQqqWgqX6lUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1
MUQzMTM1RDAeFw0yNjA2MTMxNDMxNTJaFw0yNjA2MTQxNjA4NTJaMDMxMTAvBgNV
BAMTKDg1RTRBMzIzNjAwNDE1MzYwRjI5MzQ4RjQ3RTY4RUNFMjVDOUExOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cg0cJmM3X5mEDwxXAefTsVuB
5Ud8LaVYJLiSd/DaM5tdB+qeHQCvsgPuqUHwCdFS1+KHUV2eofKQGo2sGrOGsbf7
9dREl6kUx3Z3Lmr5UTQ9Fngw4AWf/pgkB8UXe/XkVjpuyLXMJgtFY9YDKzo8ZFuf
o7qjZ13YNhvqOGs/Cf53q9nEpba8tVAw0nk/faZ3XsmaRuVp3o4oiu/BGUF5tIjM
ASTBwvY854vu5EsrGp78Fgjo70c/RiVj8u61/iAyuNRpGDq/lOqD/HpH0uEmG6Bz
4LdsvoblbeFMeYbOJ2JCsOrugk/UzD7cCg4+5fmjsAIOOc2APuicvMD3LOO/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUheSjI2AEFTYPKTSPR+aOziXJoY8wHwYDVR0j
BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF
MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2MDMyMDQ0MjQxMDU5ODYvMC83RjA0RjZGQ0UyMjc1
MDYwN0U1NEU1NThFMDM5RTBGNTUxRDMxMzVELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzx7qxRDzOef
1TwHCfA+b6gQYA+THmyeBIqoH5M4ZoPyCtfPYlTR/93jaRsAuQQOqlmEW0EwYBxq
zwOOX5KnQnKX/1bY8CECfkEQyGQj9iO+X/99MQTqqha6bG63WRFP5/T1Ad2X3XHZ
l/wk5TykvsAFD9rlGGQ3hmbBn5QQ68geZaHVqT8+AZRp3VqcAfPs5OT3FxaRLYXM
mCD4GcMWM694eQR9qEVBuIOCgn10ZLwbolVoQH+eOY5jYSTprcAZDurx1oMuNb81
Bxae0pMhG3tfGC2Q0xtVK7jnpV5QN0GxRDeDym3uJt4AWr7QJqJ5j+s17vdh9T44
yL9KWXxiVQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:51 2026 by rpki-client