Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft
File:                     7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft (raw, json)
Hash identifier:          rnJfhNhEFTdPb7w3zmQOrto4zpoiWx1p0TsJUE6XuMk=
Subject key identifier:   84:0A:68:F7:5F:E5:9B:A7:F1:FE:DE:D2:23:1B:2C:4D:B6:E6:D9:5B
Authority key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F
Certificate issuer:       /CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
Certificate serial:       6E27099070A2468B1C376071330D80BACCABBB78
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft
Manifest number:          2B
Signing time:             Wed 29 Jul 2026 15:39:42 +0000
Manifest this update:     Wed 29 Jul 2026 15:34:42 +0000
Manifest next update:     Thu 30 Jul 2026 15:51:42 +0000
Files and hashes:         1: 3131312e3231302e31362e302f32342d3332203d3e203435313036.roa (hash: y6rLG5MGWhuQpG3jyn5ZyzIM4qeNCE/D+iaUlbOa8X8=)
                          2: 3131312e3231302e302e302f32302d3332203d3e203435313036.roa (hash: 4DjhKvqSq3IX3/NNTmAHZ5682EPO414ycb2vyooRbXQ=)
                          3: 3131312e3231312e3139322e302f31382d3332203d3e203435313036.roa (hash: 8Mn803+TcdNNZRgp/2XUzUL1fvd82Vt2Hzq8sENe0Us=)
                          4: 3131312e3230382e3132312e302f32342d3332203d3e2034383337.roa (hash: 1dEopTFRZW8mtpna1k4UYOCNYv3DaJ2ov+N+MWZqkTk=)
                          5: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl (hash: o2syRMOrmO4G9iW42vhbUJYr6N23xpsO3tzYGTweD5k=)
                          6: 3131312e3230382e3235342e302f32342d3332203d3e203435313036.roa (hash: /9/wcHPixQ3zSf0oWBQhT74E0lowSuv9Eu8B3+gZotQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 15:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:27:09:90:70:a2:46:8b:1c:37:60:71:33:0d:80:ba:cc:ab:bb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F
        Validity
            Not Before: Jul 29 15:34:42 2026 GMT
            Not After : Jul 30 15:51:42 2026 GMT
        Subject: CN=840A68F75FE59BA7F1FEDED2231B2C4DB6E6D95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:82:f1:07:4c:18:1e:c1:5a:58:5d:6f:fa:
                    64:f6:ab:de:4e:41:85:95:ff:3f:3b:05:76:60:04:
                    1e:39:fd:dd:11:3a:a4:50:1f:fb:4d:5a:9a:b0:a8:
                    ef:23:ee:d4:68:22:7e:e4:ad:5e:c0:fa:a7:4a:8d:
                    cc:ab:9f:bf:a9:8c:6f:49:df:f2:b4:80:fb:86:03:
                    5f:d4:ea:9d:db:c0:19:02:79:08:0a:c7:44:1b:11:
                    26:32:03:a3:2e:74:e3:9f:43:e6:ba:6a:61:15:90:
                    84:4b:2a:ab:7f:ba:61:b4:39:8e:93:7b:c5:ae:bc:
                    19:ae:9c:0a:99:9e:78:02:a7:43:72:44:ae:b6:1a:
                    7a:83:31:c2:4c:08:d0:d6:ef:a4:92:98:c6:ce:72:
                    54:c2:ed:37:f9:af:be:32:8a:e4:56:67:af:7c:5b:
                    2d:31:7c:39:f4:4c:71:ed:dc:a1:fb:9d:ac:52:3a:
                    0e:ad:c8:74:9c:f4:df:e0:89:b8:85:60:2f:30:eb:
                    21:ae:81:32:1b:ad:d1:35:03:8e:6f:d9:ee:89:fc:
                    d2:f8:af:a8:92:c0:1a:63:a0:5d:f9:c6:f9:88:b6:
                    57:20:c4:ac:48:42:ac:ae:69:0f:0e:3b:50:1f:f0:
                    c0:ac:ed:40:c8:72:70:73:84:dd:2e:4b:33:3e:f8:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:68:F7:5F:E5:9B:A7:F1:FE:DE:D2:23:1B:2C:4D:B6:E6:D9:5B
            X509v3 Authority Key Identifier:
                keyid:7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:a0:57:91:0a:0b:17:3a:28:86:f1:6b:2c:f2:22:ef:98:
         41:cd:49:e1:84:34:1c:eb:ca:61:47:b3:44:27:27:72:e0:48:
         33:6a:a8:e1:76:02:8d:0b:5a:dd:1e:45:38:ab:fb:d7:30:95:
         28:53:5e:9a:4e:9a:e8:be:0f:1b:df:9c:87:00:18:41:53:ea:
         74:88:56:16:6f:4d:cb:86:a8:59:cf:04:a0:be:e8:e7:dd:61:
         14:4f:44:9f:c3:d7:cb:86:b0:c8:7e:a9:57:5c:3e:c4:63:14:
         7c:11:5a:bf:68:a5:39:46:26:c1:34:e4:bc:ea:68:65:16:5c:
         ef:dd:bc:d2:3d:33:f1:09:cf:56:ba:c2:df:bd:cc:c2:f4:9b:
         22:3f:40:b9:b7:a4:7e:8d:59:4e:4a:5d:3e:06:c5:7c:22:1f:
         4a:33:5e:7e:bf:02:d0:44:8e:2c:d4:4f:fc:ab:23:e8:8e:d5:
         0c:a0:cb:a6:be:0c:3a:77:23:2f:9e:7a:06:bf:51:22:7d:d9:
         07:ff:4b:fb:4c:47:80:f6:15:0c:ee:a2:59:d1:2a:f2:38:02:
         ff:8c:2a:ac:37:30:93:58:c8:58:02:f0:41:d5:30:05:f7:e1:
         d2:69:cf:c1:94:f7:93:bd:e4:d8:ce:6a:ed:62:5f:21:c7:bf:
         ba:64:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:57:40 2026 by rpki-client