Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
File:                     95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json)
Hash identifier:          RgCSEspRnBNt8rYkaLgIRFB18GorHE2JfZe2FhQdW6I=
Subject key identifier:   7D:B5:DB:88:78:3F:2C:82:18:26:7D:52:A5:8F:56:DA:1C:1D:9C:0F
Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
Certificate issuer:       /CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Certificate serial:       4B7F1CBF6F6040EC4E02A2B43EE76A5E8E69275B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
Manifest number:          FB
Signing time:             Thu 23 Jul 2026 09:31:58 +0000
Manifest this update:     Thu 23 Jul 2026 09:26:58 +0000
Manifest next update:     Fri 24 Jul 2026 13:28:58 +0000
Files and hashes:         1: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=)
                          2: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=)
                          3: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=)
                          4: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=)
                          5: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: 2KWTsUQw2E62QEy79ondOuSgUWYBr7eyJoURB6DGy8k=)
                          6: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=)
                          7: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=)
                          8: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7f:1c:bf:6f:60:40:ec:4e:02:a2:b4:3e:e7:6a:5e:8e:69:27:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337
        Validity
            Not Before: Jul 23 09:26:58 2026 GMT
            Not After : Jul 24 13:28:58 2026 GMT
        Subject: CN=7DB5DB88783F2C8218267D52A58F56DA1C1D9C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:ef:42:de:cb:24:5a:12:7f:e3:12:92:49:
                    4e:1f:5f:7a:99:d6:b5:ab:8e:2e:dc:91:9c:ab:2e:
                    59:9c:ff:ba:b0:81:85:7c:ae:19:3e:14:b9:04:d8:
                    05:78:54:82:18:58:e8:66:c9:f5:9e:f6:de:1e:99:
                    01:28:bb:7a:0c:b4:c7:3a:32:3d:9a:07:fc:16:0f:
                    e0:3c:89:7a:81:d4:d6:92:b8:1d:56:fd:16:97:21:
                    07:26:87:c7:6b:fb:1e:2d:67:5c:3a:ee:fc:04:42:
                    99:d4:6e:c2:1b:76:15:b8:9e:f5:47:eb:93:e8:1f:
                    5d:68:96:d7:c5:38:c3:77:15:b0:b5:58:15:47:c6:
                    ee:35:ec:b2:e7:86:a7:62:e8:eb:19:fb:f3:fa:ca:
                    e4:3c:7f:42:c5:b6:0e:4c:41:d9:c6:cd:22:09:36:
                    4f:a7:c4:3e:f7:e3:9b:80:07:1f:38:69:4f:ce:e3:
                    2d:af:f8:0c:6f:b3:65:c1:24:57:59:73:08:f2:fe:
                    3c:42:e8:56:27:a2:de:a3:1b:f3:4d:85:0e:25:fa:
                    03:48:77:42:94:f5:4b:71:57:bb:de:d0:6d:3e:c5:
                    55:a1:ca:81:a5:9a:c9:34:74:fd:3a:c5:57:82:fb:
                    96:22:4e:65:4b:73:0e:9f:b4:c0:e8:27:d0:7b:08:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B5:DB:88:78:3F:2C:82:18:26:7D:52:A5:8F:56:DA:1C:1D:9C:0F
            X509v3 Authority Key Identifier:
                keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:04:35:03:a8:69:78:85:7f:50:b6:15:ec:ce:44:c6:35:50:
         63:a7:bc:dd:9a:f0:b3:3d:b5:eb:d5:35:7e:f8:ef:d7:a1:4b:
         b6:de:31:88:a5:3e:a4:e9:d6:7a:94:c4:0d:ea:cd:a2:2a:f9:
         3d:92:77:76:3f:1a:fd:cf:8e:9d:a7:a4:d5:49:82:2d:7d:cb:
         6c:0f:ac:ee:c8:70:e5:cf:f1:c6:3b:9b:89:d3:fd:b1:d0:bc:
         fd:6f:c3:e1:53:4d:22:c4:e6:b3:72:1f:67:ea:e2:79:01:81:
         cb:d3:cc:70:63:f5:e5:8a:df:ec:fe:60:f0:89:0e:e1:4b:af:
         bd:f1:86:68:b1:90:26:c4:71:0b:eb:61:62:30:81:10:d1:bb:
         cd:2a:59:55:17:44:34:4f:c6:94:35:12:0c:5e:fa:38:f3:94:
         80:06:8c:04:52:f8:df:c8:48:41:70:c5:f6:c0:0f:4f:04:c5:
         fb:ee:1a:2a:82:86:a8:a3:36:e8:6e:45:40:e9:5a:56:96:b9:
         97:2e:25:d3:09:2f:89:f0:06:c3:f1:e3:c7:44:4e:6f:da:e0:
         e4:17:19:42:cd:9c:bd:fd:75:a5:20:30:db:b6:97:d2:9c:aa:
         33:ba:46:36:3d:11:20:d8:cf:6e:b0:9f:05:58:62:9f:49:2a:
         f5:f7:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:22 2026 by rpki-client