Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File:                     1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier:          G/8Ls7lNBotAqk/SmO8cNtZjjVtRItGP0yzHxpq4/sc=
Subject key identifier:   89:84:AE:9A:81:80:BA:81:2D:F4:94:A4:23:FC:2F:67:FB:8E:6E:3C
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       57CAA732252A41D6D02478D3F13A40DC609B4D6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number:          011D
Signing time:             Fri 24 Jul 2026 09:30:54 +0000
Manifest this update:     Fri 24 Jul 2026 09:25:54 +0000
Manifest next update:     Sat 25 Jul 2026 09:48:54 +0000
Files and hashes:         1: 3134302e3231302e31382e302f32342d3234203d3e203536303436.roa (hash: 4XH4NW1fbHdXD4a8DFQmHzoxsWs6cHdsn9AL3hluo2Y=)
                          2: 3134302e3231302e32372e302f32342d3234203d3e203536303436.roa (hash: jUYEgZH0MXYqOeVlldpQVG4JGhPFcz1ChMn8LbjcIhs=)
                          3: 3134302e3231302e32392e302f32342d3234203d3e203536303436.roa (hash: zbdC+xnhB3/Ixpwx2Mv6RIWN0NGFCnvAFUX89ZgJF5w=)
                          4: 3134302e3231302e31392e302f32342d3234203d3e203536303436.roa (hash: UXFk4wWTjHH3u21DSpm4bYhClt4TzwYbA8fG9WK956M=)
                          5: 3134302e3231302e32322e302f32342d3234203d3e203536303436.roa (hash: KOUMTopFTFtdMp0MzGoR1D0CR819nWmuRX1CMIfQnNE=)
                          6: 3134302e3231302e32382e302f32342d3234203d3e203536303436.roa (hash: d607khQiQnigTg1F+OoOsZJIXuAoyLuGPxR5EwBZmOo=)
                          7: 3134302e3231302e32332e302f32342d3234203d3e203536303436.roa (hash: kvgoH2jMNObinEuJoA1NwJakRuHGSo6bASBGl8xlgl0=)
                          8: 3134302e3231302e32312e302f32342d3234203d3e203536303436.roa (hash: l0hPko2ZXCOeA/311IA+OFAcQs7DgsvtABbBhm7khis=)
                          9: 3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa (hash: ucM6Jxz5/EwvTfspvH6tvbds6be5PlWP5svisIpotV0=)
                          10: 3134302e3231302e32352e302f32342d3234203d3e203536303436.roa (hash: 4bSwFuNsKxLX2Mab+Wi1aimjfSTBRHXojh2stB7Opvc=)
                          11: 3134302e3231302e32302e302f32342d3234203d3e203536303436.roa (hash: fu5OX6AN2arGw+lToKsCYM0Zyg2PehN3eBycuZTpTzA=)
                          12: 3134302e3231302e32362e302f32342d3234203d3e203536303436.roa (hash: n3VyU42Lfcy4g/56VeaDrZAbySZjpyCmGrkFpjFCa2M=)
                          13: 3134302e3231302e32342e302f32342d3234203d3e203536303436.roa (hash: 6J4cWkIKyL6J/8jYbqzVFC7+9rZoe2tTz1LY59VYxLU=)
                          14: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: tIJ6zzEHobYDMGpeouH++Y8heu7wICK8tc6A9w5OGmw=)
                          15: 3134302e3231302e33302e302f32342d3234203d3e203536303436.roa (hash: JCib6eEHsmJfGLVHPcFSzMlPbRqgc/vpDrsCHl6GrZE=)
                          16: 3134302e3231302e31372e302f32342d3234203d3e203536303436.roa (hash: iA6xW2mo9UOww43TiFwUvVclWeN47TBsNl4uB8qad2M=)
                          17: 3134302e3231302e31362e302f32342d3234203d3e203536303436.roa (hash: NAVE/Qr6QHMC4XtFqhb5OBdtmjnpHmKja8imwFdn/KQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:a7:32:25:2a:41:d6:d0:24:78:d3:f1:3a:40:dc:60:9b:4d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Jul 24 09:25:54 2026 GMT
            Not After : Jul 25 09:48:54 2026 GMT
        Subject: CN=8984AE9A8180BA812DF494A423FC2F67FB8E6E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:87:65:6d:b9:8b:c2:d5:1b:62:2a:29:c6:
                    df:40:54:17:7d:0c:dc:69:40:b5:98:6f:4e:99:06:
                    57:56:20:1d:e2:44:f1:09:98:78:98:f5:e6:a9:fd:
                    54:5f:3f:fb:79:cf:ff:1d:05:42:1b:c2:91:22:ef:
                    03:3c:86:1f:9c:26:85:b4:f8:ee:39:65:77:e5:2d:
                    32:19:cd:e0:2f:01:c2:d2:0c:22:ae:0e:0d:d8:f6:
                    3b:d4:5c:74:2a:1e:ec:39:cd:c2:5a:b1:b5:25:2f:
                    0f:23:ed:3a:07:2d:4c:80:9c:d5:10:8a:12:58:1e:
                    25:20:65:ff:7e:e8:50:42:8d:dd:10:c2:e6:30:b5:
                    b8:4e:fd:65:be:3f:37:25:5a:a2:cc:9b:b1:6e:67:
                    32:b4:f3:cf:51:2d:5a:60:82:88:ec:02:a3:7a:9e:
                    04:a1:8b:7a:33:38:a2:a6:8c:f4:1d:44:51:45:0b:
                    85:3b:ec:96:96:31:37:2e:a1:94:d3:48:d6:76:b2:
                    df:e9:3c:55:92:9a:31:ce:f9:50:57:85:d4:11:b9:
                    80:db:99:82:b6:86:68:ac:e8:e2:9a:da:72:52:0a:
                    02:e2:97:53:74:fe:c4:da:a7:29:df:99:f5:53:ad:
                    4c:70:0d:ee:62:ae:b0:72:25:d7:f6:80:36:8d:bb:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:AE:9A:81:80:BA:81:2D:F4:94:A4:23:FC:2F:67:FB:8E:6E:3C
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b4:89:a2:c2:42:55:82:62:79:40:0d:72:cd:26:a0:3d:65:
         72:d9:28:79:8f:21:26:0e:7b:2f:22:4a:5f:e9:7f:48:26:85:
         f2:c5:42:d2:9f:d1:b7:4c:9c:06:d3:5b:b4:2c:b5:68:c6:03:
         f0:43:81:d2:1d:9c:0a:15:5a:65:b0:41:ed:71:55:0d:37:d1:
         2c:e2:30:02:69:1e:2b:ce:ca:a3:0a:78:a4:72:50:96:22:d9:
         6f:66:dd:c5:a9:8c:d1:88:3f:c8:0d:51:0c:7e:eb:bf:c3:8e:
         41:be:eb:82:59:81:6e:16:14:1e:2c:f7:c8:fa:1b:34:c4:3c:
         19:44:f6:69:5a:f0:18:fd:a3:b9:c2:93:e1:04:4c:37:e5:df:
         79:2e:a2:72:9e:b1:e8:e6:c1:b3:3c:4d:b4:76:be:bf:0a:ba:
         7d:fc:e4:f5:61:71:46:80:6f:f3:1a:41:b2:55:4b:a3:20:99:
         2c:ea:d5:33:21:30:99:00:68:3b:03:fc:82:13:db:99:ad:06:
         86:f3:b6:7d:be:6e:31:2a:81:a7:f8:17:68:cd:33:20:f1:dc:
         1e:8c:cd:1d:b8:e5:08:dd:ef:44:51:dd:3c:a3:a8:43:2d:74:
         8f:94:54:1a:34:ba:78:5d:47:52:83:f3:42:50:b4:a5:0c:74:
         40:fa:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:47 2026 by rpki-client