Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
File:                     4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json)
Hash identifier:          2F8j4bf08gXiRV69DfRK4mYmjEvFr8zssoRs49F1OAM=
Subject key identifier:   BB:FA:23:46:C2:BF:40:DC:FC:0D:FE:98:9F:43:3F:39:7D:AB:8D:EE
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       228351DFBA4DF8E2A3F8B11C90434539B5F512CD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 06:35:33 +0000
Manifest this update:     Fri 24 Jul 2026 06:30:33 +0000
Manifest next update:     Sat 25 Jul 2026 07:24:33 +0000
Files and hashes:         1: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=)
                          2: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=)
                          3: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: 6wR/uJNhMsJKjAUYQAwVVPm5VEQP8vNsI8UOqbI2j2A=)
                          4: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=)
                          5: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=)
                          6: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=)
                          7: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=)
                          8: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=)
                          9: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=)
                          10: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=)
                          11: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=)
                          12: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:83:51:df:ba:4d:f8:e2:a3:f8:b1:1c:90:43:45:39:b5:f5:12:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Jul 24 06:30:33 2026 GMT
            Not After : Jul 25 07:24:33 2026 GMT
        Subject: CN=BBFA2346C2BF40DCFC0DFE989F433F397DAB8DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:9d:bf:92:7f:85:18:b5:ef:96:65:83:6c:
                    49:05:3f:94:86:6e:c9:bf:b4:5e:bb:21:85:a5:67:
                    68:73:05:63:96:cd:cd:15:a2:1d:8d:c8:cb:93:c7:
                    9e:bd:07:aa:3a:50:35:44:5f:dd:a8:58:40:a7:0e:
                    55:46:cc:8a:01:98:f5:32:6e:b5:16:9f:43:71:64:
                    c6:f8:b6:60:b0:7c:3d:0b:f2:8a:8c:fb:fc:09:cd:
                    1e:43:28:09:1b:e5:e7:f9:17:b7:1c:0d:5f:4d:13:
                    3d:40:91:ae:78:42:fd:9a:41:49:49:ac:c8:39:62:
                    44:20:da:8d:28:27:21:b9:b3:48:69:3f:60:3d:f9:
                    35:99:8c:4d:15:71:66:3a:bd:70:45:a5:15:df:e6:
                    1c:1c:88:fd:70:b9:da:43:e8:95:3f:bd:2c:60:5f:
                    86:de:8b:77:ee:9c:50:12:af:4f:e7:19:da:65:e4:
                    71:46:19:b5:e8:45:ac:9c:b2:b4:55:7a:85:6a:31:
                    86:1a:1e:ab:59:14:d5:56:3a:56:02:72:14:bb:1e:
                    be:aa:4e:bb:83:bb:f7:ec:b3:41:c7:de:e9:5b:84:
                    f1:85:04:a2:88:f1:af:c0:52:b9:4d:0e:fa:ce:95:
                    02:ff:9a:d2:b1:d1:9e:fe:80:5a:92:fd:64:9b:28:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FA:23:46:C2:BF:40:DC:FC:0D:FE:98:9F:43:3F:39:7D:AB:8D:EE
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:49:1d:58:7b:2e:22:9a:0c:c1:56:76:f5:0e:1f:2e:01:
         17:3c:cc:e3:75:66:d1:5d:0f:6c:dd:37:cf:74:a7:e5:f2:63:
         62:4b:07:5f:3f:b2:0a:da:e2:bd:91:62:f6:04:20:d7:2c:62:
         1e:dd:04:ec:5f:c5:9b:c0:58:24:34:e0:6a:38:a7:96:a3:22:
         48:01:27:de:c8:51:91:61:96:03:59:1e:af:5d:6c:bf:b8:ea:
         71:82:15:55:be:d6:ea:5c:88:18:f0:95:3e:29:6f:f8:79:9d:
         8a:34:ee:72:c1:0b:c3:51:4f:00:a9:29:a7:75:39:45:a3:cc:
         fd:4e:da:d3:c5:15:53:f8:74:65:15:9f:cd:78:28:dc:bf:64:
         32:95:2f:65:c1:4b:ce:cb:67:99:24:8f:bc:74:73:c3:e1:e7:
         b8:01:94:3e:fe:dd:06:d5:dd:87:72:ed:45:d6:5a:ec:23:14:
         54:f5:66:1f:c9:f0:ec:eb:ee:65:c4:1d:cf:4d:62:4c:f2:9c:
         f1:0a:ce:76:2c:3c:3d:cd:a8:dc:d5:93:2a:e3:1d:96:dd:a1:
         84:6a:a1:c8:41:1b:1d:73:89:92:8d:29:7f:8f:4b:b9:09:14:
         87:4a:02:4d:e8:e0:3e:b8:81:36:11:a3:ce:6a:39:a4:6d:74:
         4c:da:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:02 2026 by rpki-client