Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
File:                     1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json)
Hash identifier:          Tai06EASSAdtARKatqxpMCGf5ZS4uJ+vw5hsZy3fCpc=
Subject key identifier:   BD:23:8E:2C:A3:AA:F3:07:42:58:EE:70:CA:A4:70:42:79:E1:61:06
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       5FCA66BC14C7F36BA0CA3333D561A0FF7AA87FFC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
Manifest number:          01E1
Signing time:             Fri 24 Jul 2026 03:25:16 +0000
Manifest this update:     Fri 24 Jul 2026 03:20:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:25:16 +0000
Files and hashes:         1: AS24373.roa (hash: lHZo1qqYvvZtMBDB0UDEySpVRejGte3tz9NgBR7e3to=)
                          2: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=)
                          3: AS17621.roa (hash: zRljjb52XHiNdSxfLLqrAwWf7soP3ZXOA6q8cDNDNRw=)
                          4: AS59083.roa (hash: Z100p9HOjk+mF7crq0CZJnUV/XfjIQj7eGvkpYgi6Kk=)
                          5: AS0.roa (hash: MGE1I5nLgi2EXKW8NuMkkJLFt6UGuB4YuKT8zQml0/c=)
                          6: AS394881.roa (hash: uNlkd6JnCXliDu3t+qzOd5BwmcVsibO2dilTIlXUcXQ=)
                          7: AS139259.roa (hash: xYaDcFVM2Y/8RZa9QIohRwpFU7DW5BfYeUk92/go1D4=)
                          8: AS138527.roa (hash: ONSMAuOvbH7RfIxQwPsXri8s6XRjzCo6/RpUxAMRBBM=)
                          9: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: xOo2wGgfcW31/1N2X8HXwrGMl7aKj1pXdJV0/mWbikA=)
                          10: AS4515.roa (hash: OTIETi3MG/xKB3HyilCE0M6KVDY7+mj0yGCzFMfXUnY=)
                          11: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=)
                          12: AS59803.roa (hash: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=)
                          13: AS4812.roa (hash: uR8+jvbPWxX/gya7yb2Z9YMAFb2ToXh5oJ8ZtPWHAUc=)
                          14: AS13444.roa (hash: +X0olCc0xu0SyWwtuBjNMSx1pfUPwP7AiRpJF4RbydU=)
                          15: AS25743.roa (hash: 62wm3hjrKSTAMQ4s0HfcJZmR7Dw8rHd9Oq7Gl2Vg8Dw=)
                          16: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ca:66:bc:14:c7:f3:6b:a0:ca:33:33:d5:61:a0:ff:7a:a8:7f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Jul 24 03:20:16 2026 GMT
            Not After : Jul 25 05:25:16 2026 GMT
        Subject: CN=BD238E2CA3AAF3074258EE70CAA4704279E16106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:82:25:1b:55:00:5f:24:75:b1:23:60:a4:
                    e8:d2:f0:a0:f5:f8:a7:b6:f7:e1:9e:42:7b:e0:80:
                    f0:bf:97:29:7d:80:29:55:d4:6c:0f:73:f2:a0:c1:
                    9e:c4:21:b8:6a:f6:0e:52:82:11:44:3b:a8:6e:d5:
                    c3:ac:8c:29:08:a4:80:c1:d2:29:03:00:a4:46:61:
                    54:5a:7d:ae:52:ad:da:bd:aa:ac:b1:eb:f0:9f:99:
                    2a:ed:7d:67:5f:33:06:eb:c4:dc:c2:b0:b8:ab:31:
                    e0:4a:79:c4:3c:95:84:b9:39:ee:13:ef:9c:b7:80:
                    ba:69:a7:b6:7f:9c:cb:46:d7:60:63:31:3f:79:7d:
                    86:c3:87:fd:a7:63:08:8a:eb:81:be:7a:7b:74:66:
                    d9:c0:eb:7f:b4:ca:b5:17:bb:6f:5d:9f:c1:22:53:
                    1d:65:b5:b7:0b:28:1a:dd:f1:cf:02:d7:ac:9f:86:
                    9f:b5:56:56:2f:3c:98:ab:66:a8:9b:03:c9:ca:b6:
                    06:9f:ef:a6:fc:2e:9e:ae:e5:e9:92:a5:91:46:ab:
                    03:c3:9e:88:3c:f0:f5:52:40:2f:e2:7f:35:6e:d6:
                    fd:d7:d7:01:9d:e4:70:70:39:34:44:4a:43:d2:7f:
                    ff:cc:a5:fb:d8:44:65:c6:3d:3f:db:65:2c:02:af:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:8E:2C:A3:AA:F3:07:42:58:EE:70:CA:A4:70:42:79:E1:61:06
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:63:b0:29:29:6b:22:d7:8d:5d:f6:77:ee:4e:24:38:10:bb:
         bd:73:63:06:5b:5e:ce:77:61:69:d6:da:21:ea:e6:bb:07:f2:
         79:06:e3:7b:e9:f0:d8:1e:ad:97:69:f6:b8:17:6a:9d:4b:26:
         52:27:94:c2:ca:38:f8:83:5d:80:90:1b:6b:9a:c3:7f:bf:33:
         7a:61:21:d6:f0:3d:ab:ee:18:77:ef:3b:90:47:71:9f:10:a0:
         cf:6b:22:d0:cc:64:6e:b7:c9:73:26:b4:08:29:fa:69:0f:63:
         a0:00:3d:03:e1:c5:e4:95:2e:28:74:95:7e:c0:ee:65:e4:cf:
         90:ca:e0:c9:f8:89:dd:0d:16:92:90:bb:c6:13:70:93:aa:28:
         1a:a3:68:d9:de:99:d5:5b:35:04:d2:99:1c:0c:a2:86:13:cc:
         39:e3:2b:6a:2d:92:6b:29:91:b3:8a:26:07:ad:4d:31:6b:5f:
         9d:e4:98:6e:f9:63:2a:3f:8a:1d:58:85:d9:e1:a7:4c:b4:41:
         59:47:dd:de:f3:2c:3e:10:a2:cb:a9:48:ee:fc:e0:9b:b2:dd:
         c7:cb:69:2f:b7:cb:62:ec:2c:7e:08:eb:c0:02:e9:5e:14:80:
         18:83:90:21:16:fb:bf:1a:93:c5:b9:81:4d:de:da:b7:8f:ec:
         d2:10:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:25 2026 by rpki-client