Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
File:                     95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json)
Hash identifier:          KleR4TpH2F8EyIr4a/0j0V74Ig7evAIes6cwTIkxhJo=
Subject key identifier:   6C:77:33:43:4B:12:19:84:79:BA:23:A4:67:50:E6:7B:24:26:AC:D5
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Certificate issuer:       /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial:       48ACF4D02D4A0FB55AD17291413F4DF482B9B2B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
Manifest number:          7B
Signing time:             Wed 29 Jul 2026 07:48:50 +0000
Manifest this update:     Wed 29 Jul 2026 07:43:50 +0000
Manifest next update:     Thu 30 Jul 2026 11:40:50 +0000
Files and hashes:         1: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=)
                          2: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=)
                          3: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=)
                          4: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: AxpywzwNkfML8T5RZFboSB/pkFbJ7TwRKUmQ1pFU78U=)
                          5: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=)
                          6: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=)
                          7: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=)
                          8: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=)
                          9: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ac:f4:d0:2d:4a:0f:b5:5a:d1:72:91:41:3f:4d:f4:82:b9:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
        Validity
            Not Before: Jul 29 07:43:50 2026 GMT
            Not After : Jul 30 11:40:50 2026 GMT
        Subject: CN=6C7733434B12198479BA23A46750E67B2426ACD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:37:53:91:77:9b:e0:32:80:2d:9e:22:3c:
                    7b:c5:0e:17:dc:bf:6f:89:0e:be:47:c0:f3:6b:9d:
                    1a:6d:38:79:6e:ed:50:f2:8a:9e:a6:d5:9a:ca:ae:
                    a3:72:37:49:a6:6f:7e:fb:3a:3d:65:b5:dc:c7:26:
                    c9:e2:88:cf:ab:b9:d9:85:a2:78:f6:de:18:9d:30:
                    b5:a4:b8:b0:b4:cf:ab:7b:f8:37:16:59:d1:1a:b5:
                    c2:0e:36:98:0d:3b:b7:8e:b6:24:0e:37:31:61:2a:
                    f4:21:de:3e:42:bf:8b:14:b3:1f:b6:c9:67:ed:5a:
                    e0:e4:fd:b6:d0:71:62:ce:a8:d3:3b:7e:3c:97:5d:
                    a5:d8:1e:4b:cc:61:21:52:63:8c:21:f1:73:fe:22:
                    d1:3d:d9:03:b6:45:a5:8b:8c:49:da:3e:95:8f:1e:
                    fd:d3:6a:ea:1e:32:85:9f:c6:95:36:72:ac:fb:cd:
                    92:f5:ec:90:b6:2c:70:b1:17:37:d6:e2:14:1d:fe:
                    f6:eb:34:9f:66:1f:44:65:b6:71:70:12:50:ef:3d:
                    dd:6a:55:fe:c2:03:bd:e8:64:0c:2d:48:20:44:7c:
                    06:af:dd:35:01:a4:70:5e:36:c4:c2:1a:06:db:53:
                    f8:a4:87:06:0d:52:3c:aa:fe:5a:5a:93:91:c1:f1:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:33:43:4B:12:19:84:79:BA:23:A4:67:50:E6:7B:24:26:AC:D5
            X509v3 Authority Key Identifier:
                keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:38:a7:d1:33:15:5d:bf:6d:db:81:ca:2c:66:d5:ab:42:
         b9:e2:f3:a8:1d:1b:59:72:fd:f0:b8:5e:13:ab:20:f1:55:10:
         e1:cd:3d:87:ff:e8:b6:4e:01:41:1e:04:b7:4e:72:3d:0e:cd:
         cc:82:7b:27:40:37:3c:bc:95:76:96:93:5c:66:08:21:93:67:
         ad:db:6c:67:ec:62:c2:8f:17:96:18:d4:dd:47:4e:e4:d5:08:
         ad:39:88:5d:9b:30:d3:3d:b2:c2:b9:d4:14:1f:f6:d3:07:8a:
         65:c3:9f:ad:89:3f:17:54:3c:3b:ad:56:a3:76:b1:28:9f:e0:
         51:8b:a3:3e:64:32:79:08:e9:ed:80:c4:8e:3d:72:fc:ec:c4:
         e6:6c:51:18:91:a3:c2:1e:44:22:7c:b0:4e:3d:c3:fa:c0:3d:
         bd:18:e2:03:c6:ce:0f:5a:8f:73:e5:1a:99:f5:e9:19:29:93:
         93:cf:f9:cd:97:e7:dc:fb:a9:da:7f:ae:e0:f3:56:62:a5:76:
         27:63:ca:b1:6f:83:bb:df:b9:6f:ec:8e:e0:d5:93:6e:3c:16:
         d8:e3:46:dd:a2:30:1d:a2:2c:2c:96:32:0d:5d:ef:85:22:7a:
         a4:d6:b3:89:2a:63:98:95:e7:80:a0:44:2c:9c:7c:b2:22:a8:
         d3:90:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:40 2026 by rpki-client