Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
File:                     78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json)
Hash identifier:          MsXyGOkv4zDt9wFNPv+G3XF5l0caz8b1ga1M1Db4iuU=
Subject key identifier:   E9:1E:C3:64:C5:37:33:D4:62:5D:74:F7:CF:99:2D:45:DC:BF:F8:83
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Certificate issuer:       /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial:       6D4C47D3C4063542D51298EB64AF538D09ECA33F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
Manifest number:          F8
Signing time:             Fri 24 Jul 2026 09:25:53 +0000
Manifest this update:     Fri 24 Jul 2026 09:20:53 +0000
Manifest next update:     Sat 25 Jul 2026 13:07:53 +0000
Files and hashes:         1: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=)
                          2: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: FJbg9nO23GqwHvITWVM/iRFaLlBV6l24U+VA6YNHM3s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4c:47:d3:c4:06:35:42:d5:12:98:eb:64:af:53:8d:09:ec:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
        Validity
            Not Before: Jul 24 09:20:53 2026 GMT
            Not After : Jul 25 13:07:53 2026 GMT
        Subject: CN=E91EC364C53733D4625D74F7CF992D45DCBFF883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:93:3a:e1:4a:e7:8c:bc:c0:df:ae:c5:16:
                    22:b6:7a:6f:03:58:56:b5:cb:02:9b:46:41:d3:12:
                    25:30:c3:08:2d:ab:ac:c4:19:ec:d5:3b:97:73:ca:
                    75:d5:58:17:c2:ea:ee:8d:e9:8c:fb:08:82:a4:7f:
                    9a:d2:a9:5f:de:8e:df:c6:04:45:d6:5f:17:9a:3f:
                    be:20:71:59:22:bd:df:64:14:a5:65:bf:a2:52:3a:
                    60:c8:64:d4:ac:b9:a2:47:d2:49:c2:d9:13:18:b2:
                    78:59:5e:2e:21:3e:ab:bc:20:17:bd:ad:99:dc:23:
                    22:b4:11:46:11:11:fe:05:53:c0:84:50:6b:36:4f:
                    1d:a2:28:7a:a3:c4:62:34:9e:39:5d:1f:94:26:8a:
                    2e:46:5a:7a:40:0e:12:f6:d2:df:a7:0d:6f:1f:4d:
                    8f:ef:36:49:eb:c6:24:d8:c3:9a:16:c3:ea:38:07:
                    fc:5a:02:e4:8c:e9:6f:4f:d4:7a:db:69:cb:7b:0b:
                    0a:16:35:45:3e:f4:48:96:ae:e4:7c:78:f5:67:30:
                    9b:d9:25:d7:89:b2:e3:8a:e6:43:d4:9b:00:01:1e:
                    e4:bb:dd:14:35:91:c2:89:6f:db:5f:08:a3:3c:6b:
                    8c:2f:10:bf:a0:f8:b6:ea:44:21:6f:e2:e6:e8:9e:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1E:C3:64:C5:37:33:D4:62:5D:74:F7:CF:99:2D:45:DC:BF:F8:83
            X509v3 Authority Key Identifier:
                keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:00:ea:10:05:19:27:b2:57:9e:1c:1d:60:7a:b6:4b:9b:
         5f:61:54:59:60:24:de:31:e5:97:54:19:d5:c4:90:aa:a1:a2:
         3c:36:c9:ae:73:e4:78:d8:f8:ad:42:27:0d:db:20:8d:da:16:
         44:c1:a2:a1:c1:46:d3:1e:21:0d:e2:3c:de:84:57:42:8e:56:
         72:5f:25:02:56:2b:b6:93:e5:d9:e2:50:1b:94:3b:c7:46:86:
         fe:d2:8c:7f:1e:64:4d:7c:af:1b:fd:53:8d:92:7c:5e:98:dd:
         ca:a1:94:09:f4:d2:ea:ae:e0:8a:5c:83:eb:9b:d4:64:f4:4d:
         d8:0e:7d:7c:55:c3:7d:a5:de:18:ac:75:20:e3:ae:58:5d:78:
         d3:3f:96:00:38:fb:0e:1a:64:f6:72:7b:7b:bc:7d:62:8b:4c:
         f6:c0:af:1f:34:c0:6c:99:ef:90:0a:5a:20:c6:b6:dd:67:d2:
         9e:08:33:62:d7:73:f6:fa:26:e1:77:1c:da:c9:90:49:6a:7c:
         d9:81:61:84:3c:63:0e:b9:69:16:38:0a:8f:9e:2a:0d:3b:bb:
         33:ff:e5:4d:64:13:fb:1d:ee:2e:a7:ff:6e:ce:cd:50:6a:30:
         af:23:84:2a:91:c8:a9:53:47:02:d9:1a:08:4a:8a:d5:c9:3a:
         7b:1a:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:11 2026 by rpki-client