Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
File:                     BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft (raw, json)
Hash identifier:          oeLfvG5laK0AUcMLPBhm8X+vp+pAs4QiljCFTIhAr5c=
Subject key identifier:   67:82:1A:52:DA:DC:05:D7:E4:25:3B:16:B1:CE:13:CC:AD:B5:CE:9F
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       7CC4C97949BF7832EF0E344DD16089BA1BA2C5A6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 21:17:47 +0000
Manifest this update:     Tue 28 Jul 2026 21:12:47 +0000
Manifest next update:     Thu 30 Jul 2026 00:36:47 +0000
Files and hashes:         1: 3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (hash: Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=)
                          2: 3130362e332e31362e302f32302d3230203d3e203233373234.roa (hash: lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=)
                          3: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (hash: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=)
                          4: 3131342e3131352e302e302f31372d3137203d3e203233373234.roa (hash: GfJl+8k+x926XIyhzeOnyi2P7nB+2KG8yC4nA0cG9PA=)
                          5: 3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (hash: J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=)
                          6: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl (hash: H0XhsNYhIi/v3/ixJ1endiudu6S5YpTl5SDmj+dTnVM=)
                          7: 3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (hash: yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=)
                          8: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (hash: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=)
                          9: 3130332e35342e35302e302f32332d3233203d3e203536323832.roa (hash: kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=)
                          10: 3132322e3131352e3233322e302f32312d3231203d3e203233373234.roa (hash: yvHJeUNbBLjIA1uCIwuozmaBxyAk+8Qro/Cz4RL6dn8=)
                          11: 3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (hash: zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=)
                          12: 3130332e35342e34382e302f32322d3232203d3e203536323832.roa (hash: njKoSaWfi1fkQuUrNF9621tCcCYx26fOri8fTHRgZt0=)
                          13: 34352e3131342e39362e302f32322d3232203d3e203333363738.roa (hash: t0MWhrASdQRMLyBv3kSVEOD5luNKKNMMpjuRAyutYn4=)
                          14: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (hash: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=)
                          15: 3130362e332e3139322e302f32302d3230203d3e203233373234.roa (hash: VwFeq3QNx8C1znAV513FBBjmORwGRi/MbWfhasR7FLc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c4:c9:79:49:bf:78:32:ef:0e:34:4d:d1:60:89:ba:1b:a2:c5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: Jul 28 21:12:47 2026 GMT
            Not After : Jul 30 00:36:47 2026 GMT
        Subject: CN=67821A52DADC05D7E4253B16B1CE13CCADB5CE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:76:4d:8c:1f:91:ed:4a:f5:de:49:88:78:
                    0d:79:b5:7f:22:30:94:3c:2d:ad:6b:0b:8d:b0:97:
                    a0:6d:26:e5:4d:e0:c4:ff:26:8e:9d:bb:66:2f:f3:
                    be:69:9d:4b:6d:3a:85:ae:7d:82:f2:7b:91:47:b7:
                    61:ec:70:cc:c2:84:0e:9e:8a:16:47:49:5d:ef:07:
                    64:c1:e9:19:28:6c:cc:70:a5:3b:60:17:4b:07:ed:
                    d8:15:7a:93:22:f8:9b:07:d1:12:cc:a5:34:20:9c:
                    5c:df:59:5b:61:49:ff:1e:f8:3e:95:37:e1:e0:1d:
                    44:54:9c:c2:72:3a:38:f2:31:ab:6d:bf:33:33:4e:
                    98:95:36:a1:69:de:c1:bb:9e:07:f4:3d:7a:39:33:
                    84:65:e0:73:06:f0:4a:69:29:6a:13:fe:0c:6f:d0:
                    0e:7f:5a:7e:9f:37:e3:0a:ed:c4:5e:80:32:3d:d5:
                    c4:e1:8a:c7:5f:87:7a:b4:d5:a9:97:f6:f0:fe:42:
                    d0:89:65:48:e1:e2:32:17:6f:17:27:4f:c4:b1:c8:
                    7d:4d:b3:82:72:65:a1:3a:db:0f:0e:d7:1f:37:fc:
                    e0:6a:de:17:43:f6:07:ae:c4:1c:8a:8f:15:ba:cf:
                    f3:92:be:21:fe:61:4c:59:0a:9a:95:6a:e1:06:c4:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:82:1A:52:DA:DC:05:D7:E4:25:3B:16:B1:CE:13:CC:AD:B5:CE:9F
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:03:1a:23:d9:6d:53:25:a9:09:63:b6:41:8d:47:05:84:e1:
         45:6c:d5:2c:cf:e2:7e:44:07:d9:86:83:cc:f5:36:13:83:0a:
         20:8e:72:e1:ce:84:1d:65:79:9d:f7:78:d3:ce:ad:bd:58:3e:
         3c:33:6e:92:1a:1a:e0:da:ce:6c:52:45:81:37:dc:1b:e2:fe:
         7a:3e:bf:81:f9:2e:68:db:78:cf:6d:e5:c0:50:99:86:c2:24:
         cd:3c:7a:8d:43:63:f5:96:1c:e4:91:8e:c3:e0:c7:6e:70:e3:
         4f:6d:d9:80:ce:96:13:83:dc:05:fd:e6:69:d3:84:0f:ac:ec:
         38:45:9f:73:86:dd:08:55:15:69:4f:f9:45:2a:44:67:ca:76:
         2a:89:bc:65:b5:bc:e3:9b:cf:15:97:1f:4e:be:54:3a:d8:8d:
         1f:e1:08:54:c3:a2:ce:b3:c1:d3:d5:03:17:36:9e:5d:3f:99:
         74:98:1c:16:65:83:c4:93:00:a1:93:9c:1a:65:a7:1e:4d:6a:
         18:0a:3d:36:21:88:b6:80:93:e2:55:a5:40:88:e5:56:0c:41:
         65:2b:9b:f4:47:b0:81:8c:23:b3:c3:26:f4:47:59:a8:93:1c:
         01:af:34:32:a8:03:b4:12:82:89:e8:f1:41:6a:9c:18:b3:7f:
         02:7b:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:43 2026 by rpki-client