Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
File:                     F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json)
Hash identifier:          EfCAWXgcgYEKoNnqQ4jkpPIY7+ADjtrFNeTEhrGGDdQ=
Subject key identifier:   AA:5D:8B:9A:80:9C:FE:FF:07:64:57:97:2F:DD:A1:4C:6C:EA:06:E2
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       550F51E19AFC4CAC68F3CA931AC7923C7C2D53DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
Manifest number:          31
Signing time:             Tue 28 Jul 2026 17:47:25 +0000
Manifest this update:     Tue 28 Jul 2026 17:42:25 +0000
Manifest next update:     Wed 29 Jul 2026 19:17:25 +0000
Files and hashes:         1: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=)
                          2: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=)
                          3: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=)
                          4: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: /rLtGRqr/cDK1ZAmkrkjzIyvSb3cUKq6hGChdTBkY9M=)
                          5: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=)
                          6: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=)
                          7: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=)
                          8: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=)
                          9: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=)
                          10: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=)
                          11: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0f:51:e1:9a:fc:4c:ac:68:f3:ca:93:1a:c7:92:3c:7c:2d:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jul 28 17:42:25 2026 GMT
            Not After : Jul 29 19:17:25 2026 GMT
        Subject: CN=AA5D8B9A809CFEFF076457972FDDA14C6CEA06E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:6e:54:a8:1c:8a:fc:f1:16:40:44:69:51:
                    6f:e9:3f:1e:0c:f7:98:43:ad:ca:20:1d:87:ec:0d:
                    3d:bf:70:b4:83:af:ca:aa:fe:b9:de:cf:22:fc:4a:
                    6f:92:5c:82:42:03:9e:b2:f0:57:ae:5e:4c:cf:b9:
                    5f:b7:fc:db:62:a9:d4:90:77:4c:75:a4:12:cd:f3:
                    df:b6:99:eb:c8:a7:88:ef:db:b9:5b:df:89:82:86:
                    77:de:9f:74:b5:b5:32:b3:34:6d:b8:e0:28:89:fd:
                    ce:99:32:62:a3:63:91:29:f0:35:b5:d2:6f:4e:ad:
                    cd:43:59:f7:5c:60:5d:d5:66:ea:37:cb:d9:52:46:
                    e9:f9:a8:b9:19:95:99:3b:f9:5d:cd:83:5f:b2:1f:
                    05:51:b7:c7:4b:19:59:7e:6d:78:c4:ed:e4:99:0c:
                    e5:1e:94:4e:b4:3d:21:43:73:c2:b3:4f:a1:01:db:
                    63:49:4e:a1:e9:86:a5:b6:78:b9:eb:51:5d:eb:2e:
                    5f:48:33:a6:5d:f6:eb:81:ee:2a:a3:c4:27:ea:9c:
                    3b:3a:cd:ad:5f:55:a2:f0:58:ca:c5:18:ff:97:2b:
                    d6:c3:aa:43:f7:f2:76:6a:09:12:2e:8d:58:9e:08:
                    3c:d9:2b:07:b1:31:03:d0:51:1d:76:13:34:ed:11:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:8B:9A:80:9C:FE:FF:07:64:57:97:2F:DD:A1:4C:6C:EA:06:E2
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:c0:6d:56:f4:50:36:71:a8:fa:dc:29:56:fb:1b:3c:cb:
         41:69:74:4d:85:7e:4f:9f:d2:0d:82:08:8e:aa:a4:c2:a3:df:
         07:b8:ca:eb:63:1d:3a:fc:a5:a1:af:86:d5:bd:0a:a2:e7:01:
         e2:30:fe:39:f9:43:a0:07:e1:4b:e3:99:c3:01:e7:98:99:b2:
         78:47:fc:d7:d1:ed:c3:6a:47:b8:55:8b:d7:f0:4e:38:f1:2b:
         f5:9e:8a:7e:14:97:27:85:ce:0f:96:3f:28:c0:fa:fd:2e:95:
         fa:55:2c:16:ab:96:ae:fb:0e:81:e2:65:bf:5a:49:a8:90:eb:
         d0:77:8e:b6:46:22:41:3b:ce:30:0d:f6:82:9e:75:b5:de:84:
         88:12:58:b2:83:86:c9:00:c8:66:9d:c4:b2:b4:60:08:a5:08:
         03:38:bc:c0:0b:f6:8d:e2:ae:4b:13:94:24:31:5c:52:79:12:
         6e:71:37:05:8b:b8:15:18:bc:40:5c:14:0e:39:91:3b:68:cb:
         4d:d5:7a:9c:f1:f6:a8:4b:bc:7c:b7:76:07:22:bd:62:f7:f8:
         07:62:ea:23:28:f8:b7:02:5b:d9:3e:2f:28:8c:1d:d8:89:36:
         9b:2a:7d:3b:e3:56:d9:78:f2:75:a5:1b:ca:d3:64:d6:ac:5d:
         7c:6d:97:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:45 2026 by rpki-client