Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
File:                     B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json)
Hash identifier:          AX4+Ni4Ek/3IA8GymHqqrbWxQtgFgHG3HEZxFqFj7I4=
Subject key identifier:   FC:2F:3A:3B:FC:CD:C2:C2:CF:81:D7:DA:BA:77:BC:BD:0B:D7:17:7C
Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
Certificate issuer:       /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Certificate serial:       7188DBFC6A09488C413A6A0E28DA9CB405B7E700
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 16:06:36 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:36 +0000
Manifest next update:     Sat 25 Jul 2026 18:06:36 +0000
Files and hashes:         1: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=)
                          2: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: mzRO1i0WD5hbvfja31RFS/UnTN6HIDfv+3vqwhkeo6E=)
                          3: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=)
                          4: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 18:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:db:fc:6a:09:48:8c:41:3a:6a:0e:28:da:9c:b4:05:b7:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
        Validity
            Not Before: Jul 24 16:01:36 2026 GMT
            Not After : Jul 25 18:06:36 2026 GMT
        Subject: CN=FC2F3A3BFCCDC2C2CF81D7DABA77BCBD0BD7177C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:37:a3:5e:e0:0d:b2:62:05:51:08:a7:82:
                    06:50:02:e4:5b:9c:00:34:03:b4:d2:29:0b:a4:52:
                    8a:22:d7:97:e6:66:fe:69:ab:f2:ec:6d:00:a7:9b:
                    9d:67:50:9e:79:4b:2a:91:91:ea:50:f5:f2:d0:16:
                    e4:e0:cc:e0:f2:07:79:ac:b8:30:d2:13:44:62:b4:
                    72:0a:70:ad:c2:9f:41:0f:89:9c:65:01:f9:68:5f:
                    61:f8:f7:4e:53:ff:47:73:65:e1:c2:73:e8:80:a8:
                    1b:14:4e:f6:15:3d:98:b3:b7:94:a1:01:43:de:88:
                    dc:fe:68:00:77:9b:9e:37:c0:80:59:33:0e:5a:84:
                    6a:07:8d:80:21:9f:ce:8c:de:d7:7c:f7:75:92:1d:
                    b4:27:be:19:23:11:cd:95:72:28:3c:61:c7:e5:8b:
                    7a:04:21:e8:53:4f:c4:f1:e0:5e:64:b9:3f:96:77:
                    8c:a2:ae:00:c4:b0:36:48:ac:98:8e:71:f5:81:de:
                    07:45:2b:5a:93:1e:7b:1b:88:a2:6e:5c:40:84:62:
                    21:85:38:71:65:c2:3a:d2:80:81:e3:75:84:ca:80:
                    db:73:16:c5:12:e6:e8:7a:64:06:f6:78:f6:9d:59:
                    e7:fd:d5:c8:5b:ae:9e:e7:02:c6:93:95:e9:3a:c5:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2F:3A:3B:FC:CD:C2:C2:CF:81:D7:DA:BA:77:BC:BD:0B:D7:17:7C
            X509v3 Authority Key Identifier:
                keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:a1:b0:75:32:ee:16:19:4d:c2:28:a1:cd:fb:3f:f6:68:
         49:9a:1f:2c:12:1a:d6:ee:ec:3f:8c:45:89:a9:2c:d7:89:a1:
         30:3c:7b:c7:b7:75:71:71:dd:4d:fd:34:68:64:e5:2e:43:21:
         f3:b3:b5:98:86:b4:ee:80:8b:2a:e3:e3:9c:87:2a:44:da:a1:
         eb:63:45:7e:f7:90:93:d4:15:df:98:6e:aa:94:81:52:a8:ca:
         32:89:50:34:df:3e:b4:47:be:2a:03:48:9c:68:9c:08:ef:44:
         2c:f2:41:02:0c:86:12:4d:50:b8:66:57:91:0f:b1:bd:c3:b6:
         ab:2b:fe:3c:04:53:06:6f:88:ff:da:78:a7:16:72:6c:91:f5:
         e1:21:92:aa:2c:bd:4e:06:5a:f7:b0:f1:84:d8:a6:61:97:54:
         6f:1e:4d:0a:31:9b:df:eb:57:c7:e6:ab:bb:08:ab:27:6c:48:
         25:13:e9:83:01:d5:fc:af:ee:ba:a5:dc:df:99:75:4c:31:a1:
         60:77:56:37:6b:aa:1d:92:a2:44:c3:14:12:95:b8:b2:1c:43:
         ea:94:0e:7e:6a:5b:8a:d8:17:d5:19:a6:ff:e7:22:80:15:36:
         8a:b0:28:b9:bf:52:9c:f3:56:f4:3a:eb:67:86:74:cc:15:cb:
         90:c3:23:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcYjb/GoJSIxBOmoOKNqctAW35wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw
MjYzNjg2RDAeFw0yNjA3MjQxNjAxMzZaFw0yNjA3MjUxODA2MzZaMDMxMTAvBgNV
BAMTKEZDMkYzQTNCRkNDREMyQzJDRjgxRDdEQUJBNzdCQ0JEMEJENzE3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTTejXuANsmIFUQinggZQAuRb
nAA0A7TSKQukUooi15fmZv5pq/LsbQCnm51nUJ55SyqRkepQ9fLQFuTgzODyB3ms
uDDSE0RitHIKcK3Cn0EPiZxlAfloX2H4905T/0dzZeHCc+iAqBsUTvYVPZizt5Sh
AUPeiNz+aAB3m543wIBZMw5ahGoHjYAhn86M3td893WSHbQnvhkjEc2Vcig8Ycfl
i3oEIehTT8Tx4F5kuT+Wd4yirgDEsDZIrJiOcfWB3gdFK1qTHnsbiKJuXECEYiGF
OHFlwjrSgIHjdYTKgNtzFsUS5uh6ZAb2ePadWef91chbrp7nAsaTlek6xcc1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/C86O/zNwsLPgdfaune8vQvXF3wwHwYDVR0j
BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC
QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3
Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/yhsHUy7hYZ
TcIooc37P/ZoSZofLBIa1u7sP4xFiaks14mhMDx7x7d1cXHdTf00aGTlLkMh87O1
mIa07oCLKuPjnIcqRNqh62NFfveQk9QV35huqpSBUqjKMolQNN8+tEe+KgNInGic
CO9ELPJBAgyGEk1QuGZXkQ+xvcO2qyv+PARTBm+I/9p4pxZybJH14SGSqiy9TgZa
97DxhNimYZdUbx5NCjGb3+tXx+aruwirJ2xIJRPpgwHV/K/uuqXc35l1TDGhYHdW
N2uqHZKiRMMUEpW4shxD6pQOfmpbitgX1Rmm/+cigBU2irAoub9SnPNW9DrrZ4Z0
zBXLkMMj2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:47 2026 by rpki-client