Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
File:                     0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json)
Hash identifier:          aI4y4mVaB21sGsnek6XzI+PKMSha/Fx8lt+3zA1t69c=
Subject key identifier:   F8:01:07:DF:FB:1B:02:E8:F5:80:BC:1E:5F:67:D9:42:C1:79:15:6F
Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
Certificate issuer:       /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
Certificate serial:       69DD51617423A8426998A997D8191AEB3C0CA3D6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
Manifest number:          86
Signing time:             Wed 29 Jul 2026 14:39:35 +0000
Manifest this update:     Wed 29 Jul 2026 14:34:35 +0000
Manifest next update:     Thu 30 Jul 2026 17:27:35 +0000
Files and hashes:         1: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=)
                          2: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: BMZXNmnBzii91pNBXs4DnZ6302huuvzdIwuvJECuSVc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 17:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dd:51:61:74:23:a8:42:69:98:a9:97:d8:19:1a:eb:3c:0c:a3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
        Validity
            Not Before: Jul 29 14:34:35 2026 GMT
            Not After : Jul 30 17:27:35 2026 GMT
        Subject: CN=F80107DFFB1B02E8F580BC1E5F67D942C179156F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:7f:1a:f1:81:24:f2:af:e3:2e:e7:46:73:
                    fa:1e:aa:bb:56:e9:e2:5b:30:33:45:23:4f:87:54:
                    e2:fc:a0:7e:82:32:c1:13:45:46:02:5d:0d:a1:5e:
                    4e:fc:23:8e:11:6a:66:bc:31:1a:7e:2e:54:39:8d:
                    d5:60:35:ff:76:1d:95:2b:b7:40:e7:e0:e7:bc:4f:
                    d0:94:ba:cc:f2:0d:80:0c:a8:67:68:00:62:d3:7f:
                    d9:15:b7:0f:6a:5e:28:cd:f2:e7:33:15:09:50:a2:
                    e8:ad:28:0e:f9:66:94:c6:44:e2:d3:91:c8:8a:d9:
                    a0:1d:dd:64:2d:d7:87:9c:9c:0f:e8:ef:5c:bc:4c:
                    39:00:46:7f:60:d9:6d:f6:23:88:a7:03:d7:c8:34:
                    f2:ac:83:26:a3:b7:a2:d0:69:5b:e1:18:1e:e2:94:
                    3e:6d:ba:67:a3:46:37:20:98:07:d4:02:2d:4e:99:
                    79:d9:9a:da:85:d2:f0:0c:0c:c4:a9:64:cc:22:18:
                    97:e8:bb:30:a2:74:30:e0:c8:e4:d2:5f:eb:bf:91:
                    c3:72:59:ca:d6:98:1c:4e:be:f3:74:2b:8c:1c:ed:
                    e8:ed:90:59:0b:7b:1d:38:7d:35:af:18:8c:d5:36:
                    65:58:6d:01:c3:08:53:77:ad:67:20:4f:d9:1d:ee:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:01:07:DF:FB:1B:02:E8:F5:80:BC:1E:5F:67:D9:42:C1:79:15:6F
            X509v3 Authority Key Identifier:
                keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:38:94:ed:92:ca:3c:2a:67:96:2b:c9:27:ef:7f:69:68:
         26:b7:0b:23:72:4f:49:a5:08:76:bf:ec:00:06:3f:ac:4f:b2:
         58:d7:09:34:04:1a:c6:c1:35:94:45:27:c9:db:f3:ce:68:05:
         b4:5f:49:cb:45:b0:02:27:e2:3c:4b:bf:4e:c7:f6:a0:0f:ba:
         97:76:dd:3c:cc:14:da:59:9c:4e:b0:e6:21:4b:eb:93:17:6a:
         8c:95:92:ce:9a:43:cf:7a:5a:1d:08:47:3c:3a:4f:dd:b1:e5:
         7f:80:ba:8c:ef:26:fe:6f:cf:42:d1:fe:3a:f2:d5:90:93:f8:
         57:a9:c1:df:d9:7a:7e:d1:a0:bc:d0:ee:e0:e0:08:b3:f4:50:
         06:f3:9d:94:2c:f1:52:51:84:9f:cc:d6:75:cf:d0:74:59:c2:
         95:e7:b3:56:7d:61:07:42:da:aa:10:b0:57:ab:2a:8b:89:eb:
         6b:0d:d7:1a:48:e9:c5:d1:bd:ac:85:70:09:e0:55:90:91:7c:
         e7:03:88:9b:f9:15:8a:21:0e:28:fc:45:72:84:cd:1e:13:75:
         6d:9a:4b:ed:e5:6a:bc:60:16:b5:aa:a2:f4:a8:1d:ef:52:c9:
         10:bf:c2:b8:ee:83:41:36:0b:7a:30:54:31:93:00:c9:46:fd:
         db:c9:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:42 2026 by rpki-client