Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          F0T7co3HEySUbiQjNhwzXWGLD6DsqwIwBxq/kQ3Xe/8=
Subject key identifier:   F4:20:D0:CB:BC:41:46:E9:D4:40:09:93:AC:D5:A5:61:D8:D5:16:D8
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       7C162DD91396AEC4C186AF8AD1EC0E64C5BA8C5A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          F9
Signing time:             Thu 23 Jul 2026 23:34:50 +0000
Manifest this update:     Thu 23 Jul 2026 23:29:50 +0000
Manifest next update:     Sat 25 Jul 2026 01:14:50 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (hash: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=)
                          2: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          3: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          4: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          6: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          7: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: s8nXdqy53LhD6MmBr4XLlj9YeJGCXo1McOA7piK5DTo=)
                          8: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          9: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          10: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          11: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:16:2d:d9:13:96:ae:c4:c1:86:af:8a:d1:ec:0e:64:c5:ba:8c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jul 23 23:29:50 2026 GMT
            Not After : Jul 25 01:14:50 2026 GMT
        Subject: CN=F420D0CBBC4146E9D4400993ACD5A561D8D516D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:9e:8e:75:32:1e:2d:bd:80:85:83:d4:18:
                    6c:5e:07:af:58:f3:96:e7:cf:14:c2:6d:cc:87:af:
                    b6:00:5a:fe:1d:5b:38:40:b6:f1:8b:98:29:1f:ac:
                    83:e7:27:fc:d6:41:3d:4e:3d:d1:c3:37:06:32:0c:
                    ce:6d:66:74:e4:87:2b:4a:6f:b1:ce:09:b5:96:26:
                    23:26:03:c7:88:1b:f2:7f:e0:4e:b3:0c:7d:87:90:
                    e8:5d:8f:9f:43:fd:a3:ad:96:4a:1c:ed:0f:3d:39:
                    d8:71:5d:55:a2:c0:87:99:25:5f:7c:06:16:a8:55:
                    a6:da:17:ef:79:89:e0:c8:6e:77:ee:8a:5e:08:9f:
                    87:2a:bc:f6:0f:35:0c:68:f6:7d:ef:24:87:e7:43:
                    c3:b7:10:25:dc:01:bb:df:c1:08:0d:ec:d6:db:0b:
                    96:5a:c2:07:81:58:cb:e8:89:ff:56:54:ef:14:37:
                    49:ba:29:51:a5:d2:c2:c9:1a:50:73:6f:3a:f1:7d:
                    3e:50:ab:84:4e:61:19:fc:fa:0b:9c:65:ab:c6:2b:
                    72:fa:bd:a9:75:79:5e:f1:36:d3:ac:41:ef:e5:33:
                    f2:98:c0:40:d5:f6:2e:2a:c1:3e:2c:36:10:73:7e:
                    c3:22:02:10:63:5d:6d:0d:63:76:b5:ea:22:c0:a0:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:D0:CB:BC:41:46:E9:D4:40:09:93:AC:D5:A5:61:D8:D5:16:D8
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ef:5e:18:db:02:d8:45:3f:b3:24:62:25:a3:2d:51:2f:52:
         20:d4:71:7f:e4:3f:b8:27:32:4e:24:7a:2c:50:cc:21:d8:5c:
         6b:b4:09:f4:d6:59:26:a6:12:43:6f:7e:a6:b4:48:42:8b:74:
         a0:4f:07:1c:41:d5:4f:5c:9f:7f:93:89:ec:f8:07:39:c6:40:
         0c:90:42:4c:f0:17:57:87:1b:bf:40:e5:6b:ba:88:1a:5c:d4:
         1e:eb:df:a6:eb:79:ed:c8:4f:52:41:14:20:7c:30:26:3d:84:
         2e:29:c9:e1:58:9c:5c:a8:87:31:c8:42:f4:d7:92:7c:d6:3a:
         d3:67:69:b3:a7:f0:75:f2:7f:56:69:2b:d0:64:84:83:bd:f0:
         79:b3:4f:0d:69:db:39:62:6a:ce:a4:01:63:de:d4:87:f0:0c:
         00:2b:cb:79:be:39:f4:4f:9f:73:07:ab:04:ca:1f:b1:71:a9:
         7d:02:c0:2d:56:1e:18:54:27:9d:a8:53:e4:4b:44:10:6f:8e:
         f7:2c:64:68:ed:9a:f8:52:c9:37:c6:24:02:9a:d0:e1:26:2d:
         2f:d2:8e:b9:ea:d3:a2:76:c7:af:11:ef:1b:fe:bf:aa:65:db:
         4d:15:06:8d:ad:94:c5:4d:09:2b:ef:cb:03:0e:2b:99:e1:75:
         80:6f:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:57 2026 by rpki-client