Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
File:                     8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json)
Hash identifier:          HPOpmJD3EjIf0onB2RfyGJhzLNInOlKwQ2FxYLIWAkQ=
Subject key identifier:   33:E0:91:8D:38:0A:CB:78:6A:50:7D:C2:2F:A0:ED:68:63:B8:C9:C2
Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
Certificate issuer:       /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Certificate serial:       1015BF72BF8CD5DED9FAB4301963A810F98E4615
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
Manifest number:          F9
Signing time:             Fri 24 Jul 2026 05:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 04:55:24 +0000
Manifest next update:     Sat 25 Jul 2026 08:47:24 +0000
Files and hashes:         1: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=)
                          2: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: 1IXien/astjgFIXBc5eDtd6ujqChVP9DmazJCfABVpw=)
                          3: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=)
                          4: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=)
                          5: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=)
                          6: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=)
                          7: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:15:bf:72:bf:8c:d5:de:d9:fa:b4:30:19:63:a8:10:f9:8e:46:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
        Validity
            Not Before: Jul 24 04:55:24 2026 GMT
            Not After : Jul 25 08:47:24 2026 GMT
        Subject: CN=33E0918D380ACB786A507DC22FA0ED6863B8C9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:f0:85:0d:9a:5c:a6:ab:31:dc:07:5c:ce:
                    9b:3c:54:ca:a5:8b:3c:07:35:9c:69:1e:54:ea:6e:
                    aa:aa:52:54:1c:7e:1b:73:5f:cc:69:cc:3d:4b:92:
                    8f:36:0a:54:54:ec:55:e3:52:b0:77:da:33:68:d2:
                    3e:1c:e4:be:1f:3c:09:d2:b2:53:59:31:17:8e:2c:
                    0d:a4:7e:30:bf:5a:65:04:22:de:27:25:d1:4a:a6:
                    65:a7:33:ef:bd:1a:d3:78:11:29:bc:cb:72:57:dc:
                    89:c1:b9:32:f3:a9:05:99:ce:ab:70:82:18:03:b9:
                    76:3c:f5:be:ee:1a:28:4a:5f:35:f6:f6:80:e7:8d:
                    d0:3b:5e:84:ec:df:cf:53:89:aa:fd:69:10:fa:9d:
                    6e:b6:b9:db:a4:35:32:0c:07:79:ac:6b:c7:fc:36:
                    c8:2c:48:aa:44:00:ab:c4:92:d1:da:60:1b:43:53:
                    01:04:f0:d9:63:b4:a3:57:d4:3e:94:5d:fb:2a:07:
                    77:3c:05:43:c0:6b:6f:a8:b1:0a:b1:83:eb:ac:a0:
                    95:d4:0b:81:ba:2c:c1:cb:6a:01:21:a0:75:f5:6d:
                    56:1e:0f:43:41:df:07:7d:f5:89:df:83:77:7b:e5:
                    a9:a7:38:ad:6a:ba:9b:bf:9a:0e:c8:9e:6b:d7:14:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:91:8D:38:0A:CB:78:6A:50:7D:C2:2F:A0:ED:68:63:B8:C9:C2
            X509v3 Authority Key Identifier:
                keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:cd:72:f9:5f:6c:33:a0:07:65:6c:8f:9c:61:de:b4:17:
         d8:e1:ee:1b:12:5a:13:a0:b0:5f:20:44:74:1e:af:a2:36:d7:
         98:77:90:ff:79:be:d0:d3:65:34:32:01:ea:88:da:f3:c1:d0:
         aa:1d:dd:9d:5c:31:15:43:81:a5:01:c4:08:60:2e:11:c0:60:
         d0:14:30:a1:ca:08:74:2e:31:ad:d1:eb:60:dc:ec:17:d6:ba:
         3a:55:dd:23:29:5d:ce:52:d9:b7:27:7a:a5:da:a1:17:11:62:
         aa:e2:f9:44:78:75:93:0b:29:73:fe:40:0d:bc:94:4e:78:4e:
         c9:bd:af:99:cc:89:14:f4:de:46:1c:57:31:8e:6b:ad:67:ab:
         fc:a0:22:55:9b:8e:19:c9:25:8f:a2:8b:22:91:de:14:c4:66:
         49:35:3e:30:5a:0c:bf:5c:2b:88:ff:e7:c5:64:e2:66:79:f1:
         3e:c1:bc:90:da:e7:9e:a4:27:fe:58:c1:a6:3b:1f:08:a7:42:
         95:07:c5:bf:11:15:d6:a8:b1:0d:bd:22:84:34:d0:a9:36:cd:
         a7:67:2e:ca:4b:2b:ad:78:ec:ec:33:5b:f3:87:ec:41:2a:e4:
         41:7c:fa:ed:e2:98:af:ff:73:1d:39:ef:da:d6:28:80:f6:7b:
         87:82:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:26 2026 by rpki-client