Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File:                     7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier:          D5S6Xw5NQ9HPzVFPVFUktBEJlvpg/OLABeiAw/8oh+Q=
Subject key identifier:   FD:75:E3:D7:60:45:52:2F:27:47:AF:D7:2B:F2:0E:F3:D5:7E:22:1B
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer:       /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial:       167B73730AF3E35C23BD02B648AB5FE4A0BB6213
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 03:15:14 +0000
Manifest this update:     Fri 24 Jul 2026 03:10:14 +0000
Manifest next update:     Sat 25 Jul 2026 06:02:14 +0000
Files and hashes:         1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: bDyjwVUZq/0oI2mQlcl/QxfjwBi4Mf5fVi3evoY/BsY=)
                          2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7b:73:73:0a:f3:e3:5c:23:bd:02:b6:48:ab:5f:e4:a0:bb:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
        Validity
            Not Before: Jul 24 03:10:14 2026 GMT
            Not After : Jul 25 06:02:14 2026 GMT
        Subject: CN=FD75E3D76045522F2747AFD72BF20EF3D57E221B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:02:26:ea:ea:f5:f2:dd:e2:d5:45:25:3d:
                    3f:ea:2b:df:12:56:99:77:a4:2c:f6:56:b0:25:13:
                    a0:5f:d0:88:79:16:f1:ce:f4:98:95:c7:a8:ce:72:
                    10:05:07:45:9b:ed:47:da:26:6b:4f:54:85:10:7f:
                    64:40:c5:4d:30:2a:69:6d:11:0a:ae:32:c9:cf:df:
                    db:00:f6:15:1d:9e:bd:e7:97:c9:2b:72:36:ff:c0:
                    cf:cc:06:5b:d4:a5:2d:de:94:9f:89:09:a7:eb:c8:
                    23:80:72:55:ca:67:88:6b:b4:75:9b:3d:f4:6e:56:
                    2e:f4:ed:6d:68:eb:38:71:02:66:45:c3:89:23:da:
                    08:de:70:14:2b:24:10:10:80:13:dd:b2:a2:4a:44:
                    10:40:5b:d2:1c:83:31:04:f1:7f:65:e7:73:8e:44:
                    b7:40:b2:e6:fb:d2:1d:a0:fa:fd:55:19:7b:7f:4d:
                    81:03:63:f3:d3:5c:76:96:b6:9e:4b:e0:f8:86:97:
                    88:79:29:df:d0:d0:ec:9f:97:b1:b6:58:95:ac:b8:
                    8c:04:4e:2d:6f:e5:b7:b9:50:91:8b:b6:f4:0b:0c:
                    93:5d:bd:5f:97:70:b4:18:4f:8e:74:1d:84:e7:8d:
                    4c:c6:82:3d:44:55:21:d3:fe:fc:6a:c2:19:fc:e9:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:E3:D7:60:45:52:2F:27:47:AF:D7:2B:F2:0E:F3:D5:7E:22:1B
            X509v3 Authority Key Identifier:
                keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:3b:02:f1:1b:ce:d7:29:3d:67:42:5c:1f:32:64:41:d0:
         ca:5d:87:7c:0f:f7:04:7f:a7:7e:fa:54:44:d6:0d:52:8e:84:
         e3:6b:2e:59:6e:27:a0:f1:cf:21:e9:88:1f:64:59:1a:ee:4e:
         7d:b7:f4:ba:b5:0c:c7:d1:fd:e3:a1:cb:2e:6f:5e:bb:eb:4a:
         22:8d:c9:50:51:ff:c0:d6:95:97:38:83:6d:3d:e3:2f:81:4e:
         46:2f:01:94:95:f7:9a:c9:99:9f:10:c9:fe:25:38:13:9b:14:
         df:45:e2:8a:c8:28:bf:a8:d7:1a:7b:f7:6f:67:2f:e1:7c:b5:
         e0:87:ba:df:05:40:81:65:d1:69:d6:c9:2a:05:38:9e:ac:6a:
         7c:ca:f9:7a:ef:fa:a5:d5:dc:1d:9c:7d:e9:57:5f:85:2d:6c:
         56:7b:53:12:06:bd:41:60:58:cf:28:29:c4:e2:16:78:9d:bc:
         75:75:da:67:36:c6:4b:cf:8d:83:54:c2:ff:e4:8c:a5:b6:5b:
         72:58:6c:cb:e9:5e:4f:7c:7f:98:a4:fe:c9:e0:c9:28:97:77:
         fc:74:d2:df:f7:55:25:68:eb:e0:ad:81:f1:63:90:35:86:38:
         56:46:ba:0f:c8:10:32:6e:50:37:9d:3d:53:1a:5d:08:67:69:
         7a:d4:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:27 2026 by rpki-client