Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
File:                     509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json)
Hash identifier:          aTZSyfisUdPrYZVmFBvDXKTNdWJd3JY5X8shHeorySo=
Subject key identifier:   61:34:92:5A:96:57:4D:40:BA:BA:82:C1:CB:86:BF:69:F5:85:B0:04
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       03926DE06449E3D5EF2017420B904751A2612DB4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
Manifest number:          FE
Signing time:             Fri 24 Jul 2026 09:20:53 +0000
Manifest this update:     Fri 24 Jul 2026 09:15:53 +0000
Manifest next update:     Sat 25 Jul 2026 11:58:53 +0000
Files and hashes:         1: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=)
                          2: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=)
                          3: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=)
                          4: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=)
                          5: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=)
                          6: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=)
                          7: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=)
                          8: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=)
                          9: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=)
                          10: 323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (hash: YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=)
                          11: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (hash: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M=)
                          12: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=)
                          13: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: zj+J6jfH65paK0U56HQI9pTjbqV0Ue8ZkU1OaB8sDw8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:6d:e0:64:49:e3:d5:ef:20:17:42:0b:90:47:51:a2:61:2d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Jul 24 09:15:53 2026 GMT
            Not After : Jul 25 11:58:53 2026 GMT
        Subject: CN=6134925A96574D40BABA82C1CB86BF69F585B004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:31:8b:34:0a:d3:c6:19:9e:b6:02:93:bc:
                    a1:41:eb:e3:73:74:68:b3:01:a0:d8:23:66:9e:ef:
                    cf:fc:ff:78:8f:b5:b8:d2:55:57:20:5c:37:83:d8:
                    37:58:ab:70:4f:6d:3c:5f:92:48:bd:df:ce:a0:03:
                    dc:74:c2:a7:ce:39:11:1b:bb:83:93:e5:df:e1:53:
                    9a:d5:ca:ae:8c:05:d6:65:79:bd:f4:c7:ae:b9:f5:
                    fc:41:bb:bb:a2:b1:43:b3:57:e4:ad:03:59:05:68:
                    61:e9:93:b9:ee:ad:e4:83:d2:47:4f:87:69:7d:18:
                    1d:a1:ec:b1:9f:df:79:62:d6:44:75:cc:4f:6b:0a:
                    af:22:d5:b6:30:16:82:2c:5f:5d:36:2b:f8:9a:3d:
                    2c:e3:2f:9e:55:93:56:ce:d5:00:83:d4:63:34:e6:
                    98:8d:f6:5e:e9:0a:18:35:8f:2b:4c:7c:9b:ce:54:
                    bd:13:de:b3:23:51:11:64:82:ce:0a:d4:f0:a7:3f:
                    e5:8e:81:93:4d:a6:d8:96:f3:5f:b0:f9:a7:66:8a:
                    4c:c1:dc:93:3b:43:c3:c6:3c:bd:82:37:20:ba:b4:
                    21:d3:b1:dc:01:d6:90:66:45:72:49:a1:37:c1:11:
                    b2:cf:6a:52:3d:b9:31:c4:24:1a:11:9e:07:50:38:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:92:5A:96:57:4D:40:BA:BA:82:C1:CB:86:BF:69:F5:85:B0:04
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:92:59:f7:89:02:90:64:dd:03:26:20:42:3c:2f:b5:7e:
         6d:7c:b4:73:01:8b:80:02:48:5f:ac:18:88:69:ad:4a:ed:b8:
         5b:48:9d:6a:c0:a1:b9:76:0d:d0:aa:3a:33:88:df:10:fd:fd:
         a8:44:7a:88:f8:0e:f6:16:50:8a:ab:63:c8:d8:9c:99:7e:dd:
         a7:ad:9d:73:e7:b5:5b:89:5f:dc:93:24:30:5c:46:1e:b2:58:
         14:4d:ff:49:6d:1b:4d:df:8f:d9:3e:56:67:32:0b:18:6c:31:
         f8:94:94:0b:34:d4:6f:34:88:30:19:27:58:9f:ce:b4:75:01:
         5d:bf:7f:e3:b0:c1:da:df:52:f2:a2:03:52:c3:3c:6b:ca:e7:
         20:a5:f6:02:76:f7:3e:1b:80:53:82:5d:a4:74:e5:0a:50:6b:
         79:34:31:4e:b7:95:3a:0e:e3:8f:b9:d8:1e:28:14:43:49:b4:
         6a:c9:3d:d1:b0:0b:2b:ab:8f:95:fb:2f:2b:85:fa:2f:ce:47:
         2b:fb:0f:42:e3:cd:be:34:3f:2c:ff:92:b2:05:fd:77:ed:75:
         6c:d8:fb:42:72:e9:06:f2:67:57:9d:74:42:04:81:0b:0a:b7:
         3e:5f:04:44:68:a4:f2:4b:76:21:98:28:be:9b:af:cd:1b:ba:
         5e:a9:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:22 2026 by rpki-client