Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File:                     1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier:          LImbZLCbyvFu+Fi9oTrDpg35DSfiZMFESPMeYpOawJA=
Subject key identifier:   5B:EC:04:D1:E2:A0:AE:BA:0F:9F:03:B7:75:0E:A1:4D:7B:57:15:A7
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer:       /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial:       24F42502A7A3709D09F52551930FD4DA77F78FBC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number:          74
Signing time:             Wed 29 Jul 2026 05:13:31 +0000
Manifest this update:     Wed 29 Jul 2026 05:08:31 +0000
Manifest next update:     Thu 30 Jul 2026 05:28:31 +0000
Files and hashes:         1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: wiWwnmM924SyavRXPXuJsA5rlfsPH7mrY/WHyTT+LJ4=)
                          2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f4:25:02:a7:a3:70:9d:09:f5:25:51:93:0f:d4:da:77:f7:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
        Validity
            Not Before: Jul 29 05:08:31 2026 GMT
            Not After : Jul 30 05:28:31 2026 GMT
        Subject: CN=5BEC04D1E2A0AEBA0F9F03B7750EA14D7B5715A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:94:b4:e8:ec:2f:c2:ba:96:69:16:83:9e:
                    c8:bb:8e:d1:4f:a2:d6:67:a7:73:cd:03:8c:a2:9a:
                    c8:a5:24:fc:1a:3e:1a:be:cf:cd:9e:a5:78:02:73:
                    73:95:06:66:a0:e3:a4:70:a7:3e:ae:f0:2f:b3:eb:
                    63:21:b6:28:14:35:46:c2:8d:e9:a0:61:70:44:02:
                    a7:7c:73:e9:a6:18:0f:0e:a7:cc:00:cc:32:e7:73:
                    9c:d1:ad:a5:e4:f1:99:63:35:70:4d:49:39:ab:8f:
                    65:ad:b3:7a:98:16:56:86:52:c7:53:a4:96:9d:11:
                    c2:6c:b2:53:05:4a:a9:53:66:38:f9:d0:52:d8:9c:
                    24:05:a0:c4:1d:2a:df:25:82:9d:5f:63:3f:ea:e4:
                    15:70:34:14:15:38:39:30:aa:49:af:bd:36:e8:af:
                    23:be:89:6a:e2:47:e0:de:6b:09:37:b4:cb:b6:31:
                    c3:c9:5b:c4:41:b3:3e:48:a9:27:a5:c2:dc:58:e0:
                    d2:75:59:7a:54:6b:40:a0:ec:18:f9:a7:9e:c2:7b:
                    c3:c7:e5:d7:5a:37:33:3b:f3:eb:aa:cd:d3:46:da:
                    3d:e6:52:b1:ed:6d:ad:36:84:5c:b5:78:81:05:7b:
                    b2:cf:8d:0e:56:8f:f1:fa:a3:77:4e:88:1f:06:1c:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:04:D1:E2:A0:AE:BA:0F:9F:03:B7:75:0E:A1:4D:7B:57:15:A7
            X509v3 Authority Key Identifier:
                keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:15:02:14:ac:1f:a7:39:06:73:66:f7:e1:d6:1f:8e:f8:fd:
         62:0a:2d:3d:31:07:23:19:5f:03:c0:96:ad:42:91:75:90:d3:
         6d:ac:5f:69:a8:b7:98:46:ce:f7:2f:2b:1f:38:24:ed:3d:ca:
         da:68:d3:7f:05:fd:2c:2b:8f:c1:95:9a:3b:cd:08:12:05:21:
         2f:60:6c:36:d6:bc:37:9c:f8:13:14:b7:d9:35:f4:52:be:18:
         84:fc:37:43:91:55:68:eb:c5:ad:89:4a:a0:9a:ae:f3:cf:cb:
         b1:bd:07:a0:38:73:c9:5a:71:39:a5:d2:89:0a:5b:55:09:fa:
         b7:0a:96:bd:9c:f4:a1:69:92:a7:e7:4c:67:ab:73:99:c1:e5:
         fc:99:45:97:36:ea:90:b0:cd:29:97:a8:4d:7f:9e:9a:f9:5c:
         aa:fa:71:57:c3:d5:43:bf:ce:fc:ef:d5:f7:ff:da:1c:c7:97:
         d2:b4:3c:a6:45:be:19:c0:ef:6d:54:ee:0a:3f:b4:e2:12:c3:
         28:af:a5:1f:c2:b8:df:78:16:9b:54:03:13:85:9e:9b:a1:a9:
         db:d5:a4:9a:44:cf:dd:f1:e7:fe:45:a3:29:11:e9:90:10:c4:
         46:95:d4:48:e3:e6:9f:05:75:c4:e1:3d:ba:38:dc:31:4f:4c:
         62:35:de:d6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJPQlAqejcJ0J9SVRkw/U2nf3j7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5
RjdFRUQwOTAeFw0yNjA3MjkwNTA4MzFaFw0yNjA3MzAwNTI4MzFaMDMxMTAvBgNV
BAMTKDVCRUMwNEQxRTJBMEFFQkEwRjlGMDNCNzc1MEVBMTREN0I1NzE1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGJS06OwvwrqWaRaDnsi7jtFP
otZnp3PNA4yimsilJPwaPhq+z82epXgCc3OVBmag46Rwpz6u8C+z62MhtigUNUbC
jemgYXBEAqd8c+mmGA8Op8wAzDLnc5zRraXk8ZljNXBNSTmrj2Wts3qYFlaGUsdT
pJadEcJsslMFSqlTZjj50FLYnCQFoMQdKt8lgp1fYz/q5BVwNBQVODkwqkmvvTbo
ryO+iWriR+Deawk3tMu2McPJW8RBsz5IqSelwtxY4NJ1WXpUa0Cg7Bj5p57Ce8PH
5ddaNzM78+uqzdNG2j3mUrHtba02hFy1eIEFe7LPjQ5Wj/H6o3dOiB8GHE8XAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUW+wE0eKgrroPnwO3dQ6hTXtXFacwHwYDVR0j
BBgwFoAUGyx3Ew16raGEb/7+QW9QWZ9+7QkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTAwODYyMzM2MjI0NDYxNS8wLzFCMkM3NzEzMEQ3QUFEQTE4NDZGRkVGRTQxNkY1
MDU5OUY3RUVEMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUwMDg2MjMzNjIyNDQ2MTUvMC8xQjJDNzcxMzBEN0FB
REExODQ2RkZFRkU0MTZGNTA1OTlGN0VFRDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhUCFKwfpzkG
c2b34dYfjvj9YgotPTEHIxlfA8CWrUKRdZDTbaxfaai3mEbO9y8rHzgk7T3K2mjT
fwX9LCuPwZWaO80IEgUhL2BsNta8N5z4ExS32TX0Ur4YhPw3Q5FVaOvFrYlKoJqu
88/Lsb0HoDhzyVpxOaXSiQpbVQn6twqWvZz0oWmSp+dMZ6tzmcHl/JlFlzbqkLDN
KZeoTX+emvlcqvpxV8PVQ7/O/O/V9//aHMeX0rQ8pkW+GcDvbVTuCj+04hLDKK+l
H8K433gWm1QDE4Wem6Gp29WkmkTP3fHn/kWjKRHpkBDERpXUSOPmnwV1xOE9ujjc
MU9MYjXe1g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:43 2026 by rpki-client