Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File:                     4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier:          TXgrOmkv68dvjkSOu5X2a4j1asSyu4amMCU3D5/v078=
Subject key identifier:   A3:15:3C:3E:6F:F7:B1:E8:31:24:9D:58:C8:58:57:C0:20:86:F3:51
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer:       /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial:       1128B3A542B8E0590847F2DA63FCFC50BB7F3332
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number:          F9
Signing time:             Fri 24 Jul 2026 14:26:26 +0000
Manifest this update:     Fri 24 Jul 2026 14:21:26 +0000
Manifest next update:     Sat 25 Jul 2026 17:46:26 +0000
Files and hashes:         1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: kLCQK4qd6CGKPq8NQOZeS6GhTKpiOX/uUede6xd2TYE=)
                          2: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
                          3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
                          4: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 17:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:28:b3:a5:42:b8:e0:59:08:47:f2:da:63:fc:fc:50:bb:7f:33:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
        Validity
            Not Before: Jul 24 14:21:26 2026 GMT
            Not After : Jul 25 17:46:26 2026 GMT
        Subject: CN=A3153C3E6FF7B1E831249D58C85857C02086F351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:d4:1c:ad:c8:84:6a:27:ab:3d:87:cc:ff:
                    e2:ab:58:ff:3f:9d:95:f2:8c:60:ab:5a:5a:04:98:
                    58:ff:6f:ee:5b:51:33:80:e9:9f:7e:1b:fd:3b:9f:
                    48:a5:4f:22:e5:08:6e:12:0a:5c:b6:f2:64:b3:38:
                    19:bb:3d:5e:57:e0:51:df:38:00:c5:9b:f8:b1:46:
                    0d:37:50:c9:96:8c:09:7c:b0:d1:b3:a1:51:82:c0:
                    f9:9f:7b:81:38:0c:9c:3a:a9:58:e8:16:23:a6:71:
                    9b:97:27:24:31:1a:9c:cb:a5:d5:8a:91:9a:e1:01:
                    45:67:66:c3:89:fd:3b:39:17:e8:5a:44:52:aa:ec:
                    40:7a:c8:b1:e7:87:73:31:f2:24:05:ce:6b:7d:03:
                    e8:50:19:c0:97:55:86:72:7c:96:d2:21:29:ab:dd:
                    5f:a0:93:4c:2a:c0:5e:d3:e0:2e:22:6b:f5:30:39:
                    d6:c6:30:34:b9:6f:62:ae:7a:e4:31:b0:34:da:53:
                    78:4b:3a:c7:c9:09:0c:58:7d:78:29:47:e4:92:31:
                    e0:f9:8f:eb:e9:46:10:78:1b:bd:8a:2c:b9:af:09:
                    44:1e:70:81:6f:d0:6a:dd:b0:18:28:fb:65:f2:2b:
                    7d:b7:32:ba:bf:33:9c:27:9a:59:55:0e:55:5c:18:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:3C:3E:6F:F7:B1:E8:31:24:9D:58:C8:58:57:C0:20:86:F3:51
            X509v3 Authority Key Identifier:
                keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:19:aa:00:e5:23:b6:7e:1f:4e:8c:ea:dc:6d:12:55:4c:37:
         29:db:28:68:bd:31:41:31:e3:4a:82:6d:3c:ed:34:d1:8a:01:
         ac:90:0e:12:ae:4f:c0:15:00:4d:70:73:57:c7:42:28:7b:af:
         81:bf:32:6e:73:e6:98:ff:c5:f8:dc:e8:fc:4d:58:c9:b8:db:
         09:97:e0:1f:f1:f2:59:53:4e:91:72:76:19:18:5c:82:b0:be:
         6c:46:da:67:c4:48:41:6f:27:0b:73:ee:99:99:c4:54:8f:a4:
         f6:69:87:84:20:66:2c:e2:de:9d:45:06:1b:bb:ca:0f:16:18:
         b2:23:4e:4f:3a:73:81:e2:18:14:d1:b4:22:c8:46:ec:be:4f:
         9e:21:c9:a1:9a:ba:45:f3:55:00:4b:d6:28:0a:ac:3f:6c:87:
         fc:36:6b:85:20:f3:13:0d:b1:bf:fc:84:3b:04:ad:50:e0:c7:
         90:5b:b3:21:8e:a6:1b:34:a8:5f:3a:17:f2:64:17:13:23:3b:
         bc:76:41:a5:16:79:80:d2:df:e5:e7:29:93:f4:ba:8a:b4:65:
         9f:df:c0:72:6b:1c:e7:ba:33:02:89:d5:6c:c1:3e:84:f5:91:
         41:0d:c6:4e:e3:fa:a8:fc:62:ed:24:73:b8:2c:d3:8c:05:09:
         f5:9f:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:08 2026 by rpki-client