Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File:                     718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier:          Y+p3X5mvRD1147vsOaRolwjxerTVxAJciQnj7+6gSNY=
Subject key identifier:   DC:EF:92:0D:30:81:24:9B:64:15:53:71:97:8E:7F:60:6D:33:56:69
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       5AE1B28EC68E3A29E15F0D67E1B6F8ACCEB7D797
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number:          53
Signing time:             Tue 28 Jul 2026 17:27:22 +0000
Manifest this update:     Tue 28 Jul 2026 17:22:22 +0000
Manifest next update:     Wed 29 Jul 2026 21:06:22 +0000
Files and hashes:         1: 3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa (hash: distAruWwJV8Z6b4BmZuBNQpPxsHf8vOHF4Agw+jkIQ=)
                          2: 3231392e38332e3137322e302f32342d3234203d3e20313430323933.roa (hash: f7n/uTJ1F+r1X4JAogOTJzYfN44+M+FFMOy6g9Zroto=)
                          3: 3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa (hash: sGrrcIk3afJ9E7DLvszkTbNTabO8r22Dvgg+QO5PoTY=)
                          4: 3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa (hash: uUXxe2oubP/XIqFRtOFAD2eSzNFzbuk/E3yzZzNqEF4=)
                          5: 3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa (hash: K+/yFwMvpUQXTRJBHOyhdN+YxG9U4N0OdNDEOURyx8U=)
                          6: 3231392e38332e3136382e302f32342d3234203d3e20313430323933.roa (hash: MmDbQB2VRSfiaD9xAvUAY28vAVaMoO2ogK6dCHUf/Ok=)
                          7: 3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa (hash: UARyymAfIDpy1ZPBQsVU1R3OSEyjaA0vvn5sxjgro1g=)
                          8: 3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa (hash: jr7jZ0peykfNX1djP7lYR6B63OpsiY99wvS1Gas/a7o=)
                          9: 3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa (hash: 1YX+Iyv65ITm5/5IT22wrDzCHtuFcomRyNDxfKqdzx4=)
                          10: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: Q4p+hQiIW9CC9vxaxRPHGSmnzlWLIqt8wrpxr8ppb2Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e1:b2:8e:c6:8e:3a:29:e1:5f:0d:67:e1:b6:f8:ac:ce:b7:d7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jul 28 17:22:22 2026 GMT
            Not After : Jul 29 21:06:22 2026 GMT
        Subject: CN=DCEF920D3081249B64155371978E7F606D335669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:09:0e:c7:d8:23:bc:2f:09:50:96:2b:fa:
                    6b:89:7f:22:fd:ea:07:8b:7a:42:79:b1:b8:aa:d3:
                    f3:0c:72:75:44:fc:64:ec:00:d0:5e:22:a7:ee:dc:
                    fe:27:6c:74:91:ca:21:af:87:85:a6:14:bb:27:88:
                    d5:b0:1a:1a:8e:a4:ce:70:ff:04:d1:b4:3b:a4:5e:
                    ef:4e:53:92:74:1b:29:84:b9:3e:d5:6e:d0:95:d1:
                    b4:4f:bc:8b:84:c2:7c:f3:b2:ad:8c:94:a4:4b:a6:
                    4f:e7:f6:e4:b0:b4:a9:68:87:37:ca:ce:4c:22:28:
                    e8:b8:d7:f9:4f:03:f7:95:b9:8d:7c:82:a0:da:6e:
                    25:07:5f:3c:3c:35:95:72:ac:0f:89:2f:62:64:19:
                    ce:a1:ba:02:38:6a:64:4f:48:5c:68:5c:34:2c:82:
                    ab:db:22:64:ad:39:9f:fc:5e:7f:63:cd:ea:bd:a6:
                    68:e1:9b:a4:9c:c2:d3:2e:dc:40:51:c7:39:ff:f3:
                    86:81:27:60:67:5b:f5:4e:7c:0e:b8:c3:bb:4f:27:
                    49:1b:b5:95:ab:16:80:0d:31:02:85:a2:11:ab:1a:
                    ee:fe:b1:09:69:d6:de:61:4d:05:34:7d:66:17:1f:
                    0f:45:ad:18:00:db:e5:a9:98:2a:4f:5a:20:9c:c0:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:92:0D:30:81:24:9B:64:15:53:71:97:8E:7F:60:6D:33:56:69
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:36:16:8d:c1:04:5c:7c:ac:52:be:5a:d7:2e:3b:2e:5e:
         f6:57:f3:e3:7e:0d:13:30:ef:94:c7:d1:37:9e:5a:80:25:43:
         92:f9:5c:36:64:95:a8:6d:8a:d7:71:f6:e3:3d:00:1d:b6:a2:
         ba:cf:98:3c:fe:9b:94:87:b5:d0:dc:49:e7:89:eb:65:d9:14:
         a9:8d:7b:94:8a:4c:30:04:07:55:97:c6:82:75:1f:47:d9:3f:
         4e:26:88:18:c9:39:e5:f1:31:0f:65:ac:b1:1b:8c:a7:2b:df:
         1d:69:2b:08:e8:68:5b:a3:5a:9e:31:90:f6:84:01:d1:72:b5:
         84:a0:53:03:33:d4:da:df:54:1e:ae:ef:0c:1f:6f:fc:70:29:
         b8:8e:62:d9:e5:34:91:8f:d8:fa:2d:ab:d1:e5:2b:64:31:48:
         17:0e:5e:6d:19:4b:fc:31:0b:57:7a:4d:22:1b:63:90:1f:5c:
         92:97:ca:48:ce:e7:61:c1:e2:3c:73:9d:a7:b4:dc:35:dd:ea:
         c6:0c:bc:35:ca:fa:70:8f:c5:95:f9:04:6d:2a:e0:61:1e:10:
         50:e6:5e:f5:d5:9d:33:35:fc:b1:85:be:b6:63:67:58:25:7f:
         42:be:90:fc:9c:38:e7:44:b3:0d:64:9a:74:b9:1b:14:9a:fc:
         36:6d:ef:7f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWuGyjsaOOinhXw1n4bb4rM6315cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBF
NDJDQzJFQzAeFw0yNjA3MjgxNzIyMjJaFw0yNjA3MjkyMTA2MjJaMDMxMTAvBgNV
BAMTKERDRUY5MjBEMzA4MTI0OUI2NDE1NTM3MTk3OEU3RjYwNkQzMzU2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlgkOx9gjvC8JUJYr+muJfyL9
6geLekJ5sbiq0/MMcnVE/GTsANBeIqfu3P4nbHSRyiGvh4WmFLsniNWwGhqOpM5w
/wTRtDukXu9OU5J0GymEuT7VbtCV0bRPvIuEwnzzsq2MlKRLpk/n9uSwtKlohzfK
zkwiKOi41/lPA/eVuY18gqDabiUHXzw8NZVyrA+JL2JkGc6hugI4amRPSFxoXDQs
gqvbImStOZ/8Xn9jzeq9pmjhm6ScwtMu3EBRxzn/84aBJ2BnW/VOfA64w7tPJ0kb
tZWrFoANMQKFohGrGu7+sQlp1t5hTQU0fWYXHw9FrRgA2+WpmCpPWiCcwPmJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3O+SDTCBJJtkFVNxl45/YG0zVmkwHwYDVR0j
BBgwFoAUcYtr0x1A42IcfVI/DpzFEOQswuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY0MTg0NDQyMTkxODc0MS8wLzcxOEI2QkQzMUQ0MEUzNjIxQzdENTIzRjBFOUND
NTEwRTQyQ0MyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBFNDJDQzJFQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI2NDE4NDQ0MjE5MTg3NDEvMC83MThCNkJEMzFENDBF
MzYyMUM3RDUyM0YwRTlDQzUxMEU0MkNDMkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDs2Fo3BBFx8
rFK+WtcuOy5e9lfz434NEzDvlMfRN55agCVDkvlcNmSVqG2K13H24z0AHbaius+Y
PP6blIe10NxJ54nrZdkUqY17lIpMMAQHVZfGgnUfR9k/TiaIGMk55fExD2WssRuM
pyvfHWkrCOhoW6NanjGQ9oQB0XK1hKBTAzPU2t9UHq7vDB9v/HApuI5i2eU0kY/Y
+i2r0eUrZDFIFw5ebRlL/DELV3pNIhtjkB9ckpfKSM7nYcHiPHOdp7TcNd3qxgy8
Ncr6cI/FlfkEbSrgYR4QUOZe9dWdMzX8sYW+tmNnWCV/Qr6Q/Jw450SzDWSadLkb
FJr8Nm3vfw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:35:09 2026 by rpki-client