Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          t/HBHhaB5Ccp6M0dPL6GND4w7+V2I/UfF9LLkooXwcg=
Subject key identifier:   4C:82:F7:8B:79:9C:06:56:CE:F2:8F:4C:08:35:80:DF:B9:9E:25:A3
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       79F6B9F578D8794356C6C2DF95B50788A10E45C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          F8
Signing time:             Fri 24 Jul 2026 00:09:54 +0000
Manifest this update:     Fri 24 Jul 2026 00:04:54 +0000
Manifest next update:     Sat 25 Jul 2026 03:03:54 +0000
Files and hashes:         1: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
                          2: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          3: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: X4H1ymx9raU7VQQ/Fe7soEhsRvQvQZay3qJmx+MsJtw=)
                          4: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          5: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          6: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          7: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          8: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          9: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          10: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          11: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          12: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f6:b9:f5:78:d8:79:43:56:c6:c2:df:95:b5:07:88:a1:0e:45:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jul 24 00:04:54 2026 GMT
            Not After : Jul 25 03:03:54 2026 GMT
        Subject: CN=4C82F78B799C0656CEF28F4C083580DFB99E25A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:7f:1a:7f:11:57:35:12:ce:8a:5e:03:1c:
                    44:4f:71:fb:94:20:4f:f3:8c:36:c5:e8:f7:a1:9a:
                    65:3b:bb:82:cd:b2:01:f0:fd:01:95:ac:fa:a4:9f:
                    85:7c:42:d4:d1:2e:0c:5d:15:b0:9b:a0:ce:3b:af:
                    ea:50:25:9d:64:e1:b4:b2:ac:c6:f7:a0:65:de:54:
                    6f:8b:86:e7:8e:4f:f1:0f:94:a7:61:8a:01:b2:8f:
                    0b:6a:ba:b0:d3:0d:99:47:fa:f3:32:d0:e5:2e:17:
                    4e:54:14:d3:b8:0e:13:d7:fb:df:76:d6:02:2a:e5:
                    5c:17:22:4b:50:f4:ee:db:d9:33:d6:ca:23:0d:97:
                    d0:fa:d9:91:4c:90:1a:76:01:95:ed:c3:91:34:2c:
                    99:14:6e:0d:0a:c5:7f:e1:32:09:68:24:79:f0:18:
                    04:b5:2b:51:df:6c:0a:39:4c:99:7c:23:5b:5d:10:
                    41:6b:00:cf:e1:d5:a2:05:fb:f5:71:19:9a:34:f4:
                    2b:ba:cc:39:c8:2d:9e:39:f1:7c:63:83:4e:a8:8a:
                    02:62:05:d7:a3:d1:d0:7f:e0:94:fe:99:3b:0b:3c:
                    28:71:2d:89:e4:fa:0b:72:3b:1a:bb:4b:1a:13:0b:
                    bf:fc:15:02:bf:e1:e6:e7:ae:90:7f:95:55:2d:53:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:82:F7:8B:79:9C:06:56:CE:F2:8F:4C:08:35:80:DF:B9:9E:25:A3
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fb:17:6c:3b:d0:80:7b:ec:92:2a:c9:d0:73:f4:91:b0:c9:
         4e:f2:f7:fe:99:41:c0:33:e2:39:3b:b1:a8:bf:17:98:74:5e:
         49:6c:a7:1f:86:e1:19:e8:61:7e:dd:52:e2:86:e3:e6:96:ad:
         4b:2d:6a:84:e1:ff:e3:e4:1a:b3:32:92:60:cd:1c:9f:e4:74:
         29:74:e9:16:80:70:83:46:3a:7c:9a:7c:87:62:7d:5e:1d:64:
         cf:70:ba:78:90:6a:28:1e:b2:d6:0f:13:c8:e1:b4:6b:f1:6f:
         82:30:b4:1e:e3:16:29:d8:86:ec:9b:47:92:33:ff:e3:34:92:
         89:8d:1a:d9:59:b6:02:0e:d0:8b:64:dc:3d:56:6b:90:47:c2:
         a4:e2:fa:37:73:9f:7c:70:2b:d3:df:7a:09:3c:c0:4f:9c:7a:
         39:2b:eb:5a:69:58:fc:10:e2:1a:0f:34:38:e5:06:f3:1f:70:
         53:56:6e:15:70:f1:5f:a0:36:04:fd:bc:da:9e:7a:83:38:26:
         2a:f7:20:63:10:70:7a:53:ce:ee:53:c4:50:96:f5:c7:ea:d5:
         48:79:a4:3d:83:ff:19:92:b5:dc:fc:d4:f7:63:42:9e:f4:35:
         90:76:03:48:9f:01:63:18:e2:ba:2c:e8:86:9a:d2:b9:d4:47:
         b9:58:06:f4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUefa59XjYeUNWxsLflbUHiKEORcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3
M0JGNUZCRjAeFw0yNjA3MjQwMDA0NTRaFw0yNjA3MjUwMzAzNTRaMDMxMTAvBgNV
BAMTKDRDODJGNzhCNzk5QzA2NTZDRUYyOEY0QzA4MzU4MERGQjk5RTI1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6H8afxFXNRLOil4DHERPcfuU
IE/zjDbF6PehmmU7u4LNsgHw/QGVrPqkn4V8QtTRLgxdFbCboM47r+pQJZ1k4bSy
rMb3oGXeVG+LhueOT/EPlKdhigGyjwtqurDTDZlH+vMy0OUuF05UFNO4DhPX+992
1gIq5VwXIktQ9O7b2TPWyiMNl9D62ZFMkBp2AZXtw5E0LJkUbg0KxX/hMgloJHnw
GAS1K1HfbAo5TJl8I1tdEEFrAM/h1aIF+/VxGZo09Cu6zDnILZ458Xxjg06oigJi
Bdej0dB/4JT+mTsLPChxLYnk+gtyOxq7SxoTC7/8FQK/4ebnrpB/lVUtU13/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTIL3i3mcBlbO8o9MCDWA37meJaMwHwYDVR0j
BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2
MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD
RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufsXbDvQgHvs
kirJ0HP0kbDJTvL3/plBwDPiOTuxqL8XmHReSWynH4bhGehhft1S4obj5patSy1q
hOH/4+QaszKSYM0cn+R0KXTpFoBwg0Y6fJp8h2J9Xh1kz3C6eJBqKB6y1g8TyOG0
a/FvgjC0HuMWKdiG7JtHkjP/4zSSiY0a2Vm2Ag7Qi2TcPVZrkEfCpOL6N3OffHAr
0996CTzAT5x6OSvrWmlY/BDiGg80OOUG8x9wU1ZuFXDxX6A2BP282p56gzgmKvcg
YxBwelPO7lPEUJb1x+rVSHmkPYP/GZK13PzU92NCnvQ1kHYDSJ8BYxjiuizohprS
udRHuVgG9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:16 2026 by rpki-client