Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
File:                     BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json)
Hash identifier:          yySIfpiMkifr622EoVf/CYz8sGVcdVN2PHAjEWygnxM=
Subject key identifier:   78:57:B8:E1:96:5D:4B:44:41:D7:16:F4:36:ED:27:AE:C9:03:91:3F
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Certificate issuer:       /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial:       408650C428209460FE51475E864B3186F4F47F93
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
Manifest number:          010B
Signing time:             Fri 24 Jul 2026 02:20:07 +0000
Manifest this update:     Fri 24 Jul 2026 02:15:07 +0000
Manifest next update:     Sat 25 Jul 2026 02:32:07 +0000
Files and hashes:         1: 3133392e3135392e3131302e302f32332d3233203d3e2034383131.roa (hash: NWOangmfU7hPM0GAAWBT29BcqvtrSc+dSLLFunpo2lY=)
                          2: 3133392e3135392e3131302e302f32342d3234203d3e203633373038.roa (hash: u2Xez3m0bNfnhMU7GsmzxlGjpd4PoiGBy06vMNIQco0=)
                          3: 3133392e3135392e3130362e302f32342d3234203d3e203633373038.roa (hash: UIQv1mA4sp0Ja1nj+FnOC4Rwma+IEtdo3LEFL7OQeO0=)
                          4: 3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa (hash: RUUu9/8ht2gZrxuJ8NZzgO27EBxw9n9jh8iUiHxgJbg=)
                          5: 3133392e3135392e3130322e302f32342d3234203d3e203633373038.roa (hash: kC1xWwPv/msbk1bEB0tkdT5MJnnsiK1mSu4ol7LJar0=)
                          6: 3133392e3135392e3131302e302f32342d3234203d3e20313338343231.roa (hash: JG+ofHqZWv6Nya0a81SKNr/OXpdilEnT5N6Jq+liVKY=)
                          7: 3133392e3135392e3130302e302f32342d3234203d3e203633373038.roa (hash: NPOTNrn95Yc2Ya8GBluii5cYdKteEeJcHcNZDgONax4=)
                          8: 3133392e3135392e3131312e302f32342d3234203d3e2034383131.roa (hash: ztztT/98+d8kkC6dabjapzG0RJX9ROe6hwqGUgLLE0I=)
                          9: 3133392e3135392e3131302e302f32342d3234203d3e2034383131.roa (hash: x5w/7rdBBm639A6Ins7TJQgH6Ypnq+hy7R37z0Drfvo=)
                          10: 3133392e3135392e3130352e302f32342d3234203d3e203633373038.roa (hash: Y/HRKKEIR7UleP09f7lkKz1BNIEUBa6vHIby0sRsre0=)
                          11: 3133392e3135392e39362e302f32312d3231203d3e2034383131.roa (hash: SXBK1HRfMyGFMtNljLtFLSEV86QhaY6pAGON1iOIIFI=)
                          12: 3133392e3135392e39362e302f32342d3234203d3e203633373038.roa (hash: 5+HNGyquB7I//W4cJYk2hRBoAmdAUCq3vZOz++FnAzM=)
                          13: 3133392e3135392e39362e302f32312d3231203d3e20313338343231.roa (hash: YjkXSj5QatWVgkXmVewnIXKrye1hvs7XzamADAO5Ago=)
                          14: 3133392e3135392e3130332e302f32342d3234203d3e203633373038.roa (hash: jhpfKk6QWasZI5w9Pwpf8UdiCqjatU2c7+WQ4690LoQ=)
                          15: 3133392e3135392e3130382e302f32332d3233203d3e2034383131.roa (hash: SQIAiu4xcKTBzHc8DxVHvpp0fjSMpgAqiP+zlDTLQa4=)
                          16: 3133392e3135392e3131322e302f32322d3232203d3e20313338393530.roa (hash: vrHJbpS1WoPqsIGjbxG4OKWUWtqhy6FK9nCYFD8ijJQ=)
                          17: 3133392e3135392e3131322e302f32342d3234203d3e203633313939.roa (hash: vLUpnqwf7adZP9KRBaTzIbiZbe7G66UoUojJqaRnTRM=)
                          18: 3133392e3135392e3130312e302f32342d3234203d3e203633373038.roa (hash: XlGdb9CWTilG80xu5EvI9nRtNiLhdMTQRZKIGsix3Sg=)
                          19: 3133392e3135392e39392e302f32342d3234203d3e203633373038.roa (hash: C1tx58f9dTjtL2bg59z6mLQv77FCqWTxYB6i077AxBk=)
                          20: 3133392e3135392e3131322e302f32342d3234203d3e20313338393530.roa (hash: rZNc5gmTt6KsopbMpn2sSlGP0G0LizQ0No3xN/3qVJs=)
                          21: 3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa (hash: KPAOTt8wYMJ11vfUGh+BRyjaApro0Jq6GJ2iKDPBenQ=)
                          22: 3133392e3135392e39372e302f32342d3234203d3e203633373038.roa (hash: MJGnJEX3mPUWJ3T+kOk2yj8vF5HL7UZPgheQBYXeSqY=)
                          23: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=)
                          24: 3133392e3135392e3130382e302f32322d3232203d3e2034383131.roa (hash: wH3bQowpWEvqO8anFHeXJfVl0QYFd140RAA1gLzJB5k=)
                          25: 3133392e3135392e39382e302f32342d3234203d3e203633373038.roa (hash: ACMnJzta+eqBGZ47LK0GTOJNfrYWvv9lfMTDo0ZyGKI=)
                          26: 3133392e3135392e3130382e302f32332d3233203d3e20313338343231.roa (hash: rsd8hv6JPmkROh9GULWwX6M33deol6uYMMfNJByQ57g=)
                          27: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: lrzU9hJ5Ja34q6LETdG+8lio8K2DQqD75q+vLs2D6GM=)
                          28: 3133392e3135392e3131332e302f32342d3234203d3e20313338393530.roa (hash: 7sRIVlJ3JUGN7CFpJD00rshyf7PoKtEVYLRHKjwkdIw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:50:c4:28:20:94:60:fe:51:47:5e:86:4b:31:86:f4:f4:7f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
        Validity
            Not Before: Jul 24 02:15:07 2026 GMT
            Not After : Jul 25 02:32:07 2026 GMT
        Subject: CN=7857B8E1965D4B4441D716F436ED27AEC903913F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:b5:36:d2:d7:58:77:31:8e:67:97:96:d1:
                    a5:8a:44:6e:92:fd:7b:ea:8a:6f:d3:e3:eb:3e:db:
                    e2:c6:c3:33:59:30:bc:a8:d4:e4:ad:47:cc:55:4a:
                    44:28:a1:31:03:95:63:3a:f8:1c:f3:59:c2:68:2a:
                    71:db:68:e9:59:c9:2d:99:86:df:e4:0e:04:50:e4:
                    d6:9b:a3:5c:ea:bd:8b:48:b6:d9:b0:a8:8f:fa:23:
                    21:92:cf:ef:66:f2:c1:4c:17:95:16:fb:ac:48:f7:
                    4a:77:e3:2d:02:1e:b8:2a:11:81:e7:6b:a0:18:56:
                    4b:05:5d:f9:f9:d7:6c:67:c0:0f:02:f0:ca:0c:7f:
                    91:96:65:68:17:ad:ad:80:a8:73:85:92:54:bf:dd:
                    c4:69:0a:59:ec:cb:73:80:04:b4:4d:50:b9:2c:71:
                    f8:11:bd:b4:58:c8:e6:d1:6f:18:a7:cd:53:4c:ae:
                    78:b0:5d:b7:07:fb:bf:62:a1:10:f1:0a:7b:a4:a0:
                    e5:b0:be:94:c2:91:39:e0:2c:cf:46:f6:4a:c3:04:
                    f6:f9:ed:de:f6:c2:b4:77:b0:e4:83:6d:c9:6e:84:
                    8f:ef:5b:00:f8:c0:a5:b1:3f:fc:94:b3:f3:5e:4e:
                    44:14:b6:21:35:e9:cd:63:f6:59:81:74:63:fc:f2:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:B8:E1:96:5D:4B:44:41:D7:16:F4:36:ED:27:AE:C9:03:91:3F
            X509v3 Authority Key Identifier:
                keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:ff:3d:84:c5:30:25:90:14:82:0d:ee:5b:c3:37:9f:ca:
         5c:00:e5:18:13:69:34:0e:63:08:00:59:6b:d4:b8:9d:70:82:
         a2:d5:14:30:28:ac:5a:2e:56:fe:7c:53:92:67:95:34:5c:db:
         d9:f9:b4:d2:53:60:43:9b:4b:c5:b2:84:51:0f:ec:9f:65:40:
         01:4a:19:45:76:56:76:6b:32:70:8e:1f:a0:21:73:09:f5:84:
         a5:16:2e:1e:69:ff:fd:8e:fb:39:a3:ef:df:bb:e4:cf:d8:d5:
         0a:61:22:3c:a8:1b:0d:eb:0f:76:5e:64:34:de:6c:91:39:a2:
         90:65:13:c3:bb:20:f1:95:19:ae:97:ec:5d:8b:88:11:0b:53:
         09:e1:95:ce:bd:53:c6:e8:34:33:7c:e2:03:fd:4d:1f:b0:27:
         40:de:1d:49:cc:e4:fe:2d:2e:f3:b9:8f:ec:8c:cc:3a:92:a1:
         cb:5d:b5:60:0c:21:f1:73:c3:2f:2a:31:d5:88:e6:5e:c7:fd:
         dd:5f:68:d7:f4:8f:e2:cc:e5:4c:25:99:1a:08:a3:55:ab:08:
         ec:86:4f:ed:a8:19:ca:9b:89:70:45:60:a5:0b:c5:03:1e:58:
         d7:6b:8f:a7:b7:90:af:bf:b0:d5:9e:79:66:2f:09:62:d9:43:
         f8:6c:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:22 2026 by rpki-client