Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File:                     6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier:          /6CIPcYBVvuLzoCMUSfAGdsdhuU8/CkyYa8V6DhzD1Y=
Subject key identifier:   4E:D0:1A:B3:02:53:C5:AB:82:BE:57:AB:9C:47:04:65:7A:83:35:28
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       4097E5C3D30C0F2C0E47EBDF3E2940DAD91578DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number:          8F
Signing time:             Wed 29 Jul 2026 03:23:17 +0000
Manifest this update:     Wed 29 Jul 2026 03:18:17 +0000
Manifest next update:     Thu 30 Jul 2026 05:06:17 +0000
Files and hashes:         1: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
                          2: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
                          3: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
                          4: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
                          5: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
                          6: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
                          7: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: Q+39G9Z5ArgRTP/I43SK96t7neZ7d+e5kDVW+z7MjSo=)
                          8: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:97:e5:c3:d3:0c:0f:2c:0e:47:eb:df:3e:29:40:da:d9:15:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Jul 29 03:18:17 2026 GMT
            Not After : Jul 30 05:06:17 2026 GMT
        Subject: CN=4ED01AB30253C5AB82BE57AB9C4704657A833528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:3b:56:c6:4e:73:45:b5:37:53:58:2f:bf:
                    45:bc:a8:3e:48:06:70:b1:7f:56:bf:f7:a3:30:63:
                    97:2f:22:88:a0:17:ff:51:f9:fe:d7:7a:ea:9e:c0:
                    d0:2b:b4:65:0f:c4:63:07:0f:32:fb:47:51:2f:84:
                    19:d3:d5:db:f5:23:4e:7d:d4:60:61:a0:17:bb:2c:
                    b4:c2:31:0b:e6:26:4a:f1:b8:16:e3:c4:9f:eb:97:
                    e5:8a:94:b0:79:bd:5c:a2:5c:ae:7e:eb:32:6b:15:
                    14:55:2e:23:91:7b:54:fb:ad:18:b5:66:02:c8:c9:
                    75:94:b6:7d:a9:5d:9d:cb:95:03:2a:7c:b0:83:da:
                    ee:15:80:50:6e:9b:03:c3:1f:24:96:7c:9b:43:8e:
                    92:f1:61:8c:85:4c:90:b5:c8:97:73:a4:90:2c:38:
                    95:f2:3d:89:96:19:e5:82:ae:c0:e5:1a:4a:dc:5c:
                    4b:25:8c:e7:b5:2a:fc:89:2a:09:dd:36:fc:b8:e5:
                    eb:44:41:8e:3e:3b:67:7b:e1:ba:16:92:32:16:b5:
                    20:19:25:c9:d8:a5:f3:9b:a3:03:25:d0:c5:1d:b3:
                    8a:63:a4:91:4f:c9:70:8d:c3:01:6b:5e:7d:b2:5c:
                    e6:0f:d0:a0:a1:7e:44:87:c1:04:ee:79:a1:a0:f8:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:1A:B3:02:53:C5:AB:82:BE:57:AB:9C:47:04:65:7A:83:35:28
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:d4:5e:76:83:d9:58:89:1b:43:04:21:3d:ca:21:45:57:
         d3:b3:8f:f7:8f:85:b5:29:e3:86:64:42:fd:3d:29:c3:d4:ec:
         e4:eb:e5:8d:5f:25:44:45:20:04:9c:67:4e:39:dd:cb:49:c4:
         87:1c:45:5f:8d:43:5f:4a:ae:0a:69:34:6e:6d:f7:0b:88:0a:
         02:48:38:75:61:9e:74:ad:1a:40:71:b3:7a:4c:23:88:bb:37:
         f6:04:59:e4:bc:3f:59:3a:2e:a5:3a:0a:6c:c2:90:68:fd:b3:
         7c:9c:d1:35:f8:c1:f6:94:9b:1d:c0:81:e3:f1:42:4a:e2:d9:
         f8:fb:55:9c:ed:57:ab:18:af:b5:65:4e:0d:9e:4e:8c:59:da:
         72:03:bf:a7:ee:da:17:ba:bc:a4:83:b8:c5:24:e9:ed:1a:97:
         8d:41:9c:a8:3a:3f:c5:c9:b9:73:75:dd:72:37:60:46:a5:a4:
         b4:99:7d:31:c9:4c:41:67:dd:67:48:41:3c:16:41:f4:70:0f:
         97:06:e0:27:e6:61:47:98:00:79:98:84:8b:cd:39:f1:03:7d:
         4d:f2:ff:a9:22:3a:59:fb:c7:5e:1a:d1:ed:50:2b:a1:42:31:
         1c:06:c7:f8:91:b5:eb:7d:14:d5:dd:7c:a7:12:8c:c0:ef:c5:
         d5:39:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:30:13 2026 by rpki-client