Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
File:                     B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json)
Hash identifier:          WKyQEYLwiKbNqMqSKrQCQCzBppVpKFooitZFX3UD1yI=
Subject key identifier:   03:6B:49:2C:42:83:27:A3:7D:A0:9A:E7:94:71:DA:65:12:4E:F3:59
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Certificate issuer:       /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial:       1FDA7D02356CD37452D617FB518F5D195BCA836D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
Manifest number:          85
Signing time:             Tue 28 Jul 2026 18:57:34 +0000
Manifest this update:     Tue 28 Jul 2026 18:52:34 +0000
Manifest next update:     Wed 29 Jul 2026 20:20:34 +0000
Files and hashes:         1: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=)
                          2: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=)
                          3: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: SG5ejPz1n3nlU4j+R+zWZ+yGn0LZX/6YWv/kW5Mw+D8=)
                          4: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=)
                          5: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=)
                          6: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=)
                          7: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=)
                          8: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=)
                          9: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:da:7d:02:35:6c:d3:74:52:d6:17:fb:51:8f:5d:19:5b:ca:83:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
        Validity
            Not Before: Jul 28 18:52:34 2026 GMT
            Not After : Jul 29 20:20:34 2026 GMT
        Subject: CN=036B492C428327A37DA09AE79471DA65124EF359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:3a:23:a3:44:60:c3:70:c1:e8:f5:4c:ae:
                    b4:9c:5f:69:11:6f:5a:98:8a:e1:70:11:e0:f8:18:
                    90:38:74:19:c5:dd:06:3b:e4:67:c1:bf:3e:d3:3e:
                    93:d5:09:38:f6:0f:df:b4:09:1c:90:ea:9b:d0:aa:
                    21:a6:bb:c8:31:81:d2:3c:a2:a9:f9:c7:46:02:ec:
                    0d:80:00:62:60:49:e9:66:59:2b:9c:cf:c9:98:2f:
                    ab:31:30:33:9e:ff:10:d5:3a:0b:61:fd:c7:fa:8f:
                    40:15:4e:ef:ec:0c:a9:b9:03:55:e9:e8:ec:5f:85:
                    ec:47:2e:81:e7:52:0b:08:58:fc:8e:47:02:bc:79:
                    44:0d:1e:62:94:a6:2f:fc:93:a9:aa:80:9c:e2:2c:
                    2c:00:e0:96:7d:4d:e6:f1:bf:89:26:5e:0c:1a:a6:
                    cf:2f:4f:16:9b:94:a9:b2:38:61:92:4a:df:48:60:
                    84:dc:f8:e3:90:28:b6:8e:6a:ca:aa:af:3c:3f:f6:
                    01:2d:66:5f:f7:b4:9e:24:a9:ca:d9:af:eb:17:da:
                    25:4e:3f:0a:19:17:3e:7d:5c:5f:11:67:59:f8:97:
                    01:44:25:63:b6:46:75:80:51:6d:f8:45:b2:bf:67:
                    fc:a2:67:e9:ed:9d:27:81:76:2a:14:13:cd:8d:84:
                    64:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:49:2C:42:83:27:A3:7D:A0:9A:E7:94:71:DA:65:12:4E:F3:59
            X509v3 Authority Key Identifier:
                keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:08:60:74:aa:86:35:73:04:9c:10:22:f0:04:43:1a:4d:42:
         8c:59:a5:97:f7:61:63:b9:b0:33:63:0b:c5:6d:8c:b9:f7:cf:
         73:63:1e:c3:cf:f3:64:23:66:03:8e:57:68:06:4e:ab:91:b8:
         3d:b6:cc:58:93:ba:00:5e:0a:16:d7:89:99:b7:7a:29:15:b7:
         66:e8:db:ed:5c:55:04:52:2d:00:0a:07:13:ec:af:e1:e7:46:
         c4:2a:22:fa:a8:93:5b:4c:af:ed:09:c6:35:6a:c8:8a:49:70:
         b7:c1:67:56:19:5c:ec:3c:1d:d1:dc:7f:c1:a9:fb:c3:a4:5e:
         50:89:64:96:96:84:12:b3:68:fa:6b:13:0c:a4:41:5a:c0:10:
         f6:26:23:f6:aa:77:88:d4:a3:e9:6c:df:52:40:0c:ac:53:26:
         4b:ad:92:80:bf:05:fa:36:bc:ff:e0:4b:a8:9b:ed:7f:93:f2:
         53:77:e8:79:65:72:28:95:d5:35:f3:2f:09:c9:a6:83:37:dc:
         cc:35:f8:21:d1:17:7d:d5:4c:c9:93:8a:3a:5b:14:e3:7b:be:
         88:2f:69:2e:d8:32:74:8f:99:e7:6a:ce:7b:e6:9f:fe:7b:da:
         40:f1:50:38:d8:d2:ab:93:3e:cf:0d:45:f2:54:2c:7d:47:c8:
         83:85:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:33:24 2026 by rpki-client