Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
File:                     6845D331C417296D3A93181DD9010591B1F70D50.mft (raw, json)
Hash identifier:          FCW4LjVRnpe9qTMPw7AJYrwn9T9MtG8yHP/Fnch5m5A=
Subject key identifier:   14:EE:2C:A6:9F:7B:D1:E0:71:C3:7B:50:BD:95:D1:02:F5:70:7E:33
Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Certificate issuer:       /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Certificate serial:       7D3CB525BEF0D9A78D140C0B703BBC313C0F9659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
Manifest number:          02B0
Signing time:             Tue 28 Jul 2026 17:16:29 +0000
Manifest this update:     Tue 28 Jul 2026 17:11:29 +0000
Manifest next update:     Wed 29 Jul 2026 17:37:29 +0000
Files and hashes:         1: 6845D331C417296D3A93181DD9010591B1F70D50.crl (hash: e4S35Z6+5VpROZNXGg7rDySR6asCX0fo1OxZpEtEtYg=)
                          2: AS132203.roa (hash: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0=)
                          3: AS45090.roa (hash: HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3c:b5:25:be:f0:d9:a7:8d:14:0c:0b:70:3b:bc:31:3c:0f:96:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
        Validity
            Not Before: Jul 28 17:11:29 2026 GMT
            Not After : Jul 29 17:37:29 2026 GMT
        Subject: CN=14EE2CA69F7BD1E071C37B50BD95D102F5707E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:b2:1b:7c:db:7a:ea:34:5d:89:e7:b3:67:
                    57:d7:8d:b0:56:af:b7:2b:5b:7b:9e:0b:fd:16:81:
                    3b:37:48:36:b8:77:2a:30:98:9a:32:28:e2:7c:54:
                    bc:64:5d:c1:ad:7b:90:cd:81:72:c8:a7:96:04:c2:
                    54:80:66:f4:ac:d3:35:81:7b:5c:0e:01:ed:d7:24:
                    23:9f:e9:13:50:b4:04:ef:75:5f:2f:74:cc:64:4e:
                    cb:f4:08:1c:79:cc:18:fd:49:cf:e6:85:37:7e:fd:
                    ba:ad:3b:23:76:45:cd:29:bb:7c:8f:84:06:64:17:
                    3f:18:04:bf:29:6b:62:80:73:b1:fe:cb:83:06:b3:
                    b4:03:ec:37:a0:9d:10:46:f5:36:6a:fd:b4:79:f1:
                    62:4f:b2:a3:3b:f2:c0:14:78:6b:dc:10:36:30:84:
                    34:03:dd:37:8e:d0:0c:93:87:29:1c:d3:c7:e3:6d:
                    8e:56:71:ec:83:03:da:c0:98:30:00:73:7d:65:83:
                    b9:35:a2:d2:50:80:13:60:5c:33:c5:52:df:cc:23:
                    b3:ec:7f:04:c8:15:22:14:45:0a:b9:b1:ea:97:2c:
                    e5:7c:77:69:ab:bb:22:b0:ef:dc:71:32:66:48:f2:
                    0d:d8:c0:85:c5:53:14:8e:a7:55:d2:19:46:8f:87:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:2C:A6:9F:7B:D1:E0:71:C3:7B:50:BD:95:D1:02:F5:70:7E:33
            X509v3 Authority Key Identifier:
                keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:24:d1:b7:bb:ca:d8:18:44:22:e6:e2:6f:95:ca:65:de:
         24:a7:83:26:95:a0:e1:2a:0b:50:e4:a7:90:a1:b5:d7:26:86:
         17:d8:d5:da:ba:c2:2d:87:fb:7a:3d:a7:f3:62:7e:ed:af:e7:
         5d:19:e5:22:23:67:7a:b8:f4:fb:49:b0:71:2a:02:61:3b:65:
         bf:ea:ff:75:4b:a0:88:a8:3f:b9:4c:9c:36:08:d6:08:57:89:
         e9:c9:1a:77:c3:cd:96:f4:b4:3c:da:62:f9:61:d9:94:e4:04:
         6a:84:c3:9d:6a:2b:59:20:b0:d7:e4:66:0a:1c:be:ae:50:03:
         9e:1e:58:00:58:21:0c:7b:4d:ec:a3:fa:6b:9c:13:86:47:c4:
         44:18:a7:61:b6:12:c5:2d:53:f3:1c:33:42:4b:19:d4:87:ab:
         f5:71:24:0d:5d:79:7f:ca:6b:42:88:86:9e:49:1f:8a:3d:08:
         0d:12:94:bd:9b:17:18:4c:0f:a9:41:40:df:7d:a1:ae:de:82:
         92:12:30:2a:a7:0b:a0:7b:8d:7c:f4:1b:47:30:4e:2c:51:86:
         bc:8f:b0:b1:51:66:57:e8:b5:a8:78:66:f0:04:95:e0:8e:24:
         af:44:a2:7c:31:3b:8a:a7:cc:ee:73:b5:5d:02:94:eb:a0:f5:
         55:15:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:38 2026 by rpki-client