Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft
File:                     66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json)
Hash identifier:          xAJ4lG6EKCVq5t7ExwOw+WplTbBv+6YBOI8BxMgxk1E=
Subject key identifier:   37:09:C8:38:F2:61:65:D9:D0:84:A9:9D:C2:0A:9E:09:AA:EE:2D:3B
Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A
Certificate issuer:       /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
Certificate serial:       3AEB5BA91107F51E90695577B51257A6B525A1A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft
Manifest number:          FB
Signing time:             Fri 24 Jul 2026 06:20:33 +0000
Manifest this update:     Fri 24 Jul 2026 06:15:33 +0000
Manifest next update:     Sat 25 Jul 2026 09:21:33 +0000
Files and hashes:         1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: 6oNFINpMkV/9xAMppXLKaMuZry9DeVNYtQldkKvxiV0=)
                          2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=)
                          3: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=)
                          4: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=)
                          5: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:5b:a9:11:07:f5:1e:90:69:55:77:b5:12:57:a6:b5:25:a1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
        Validity
            Not Before: Jul 24 06:15:33 2026 GMT
            Not After : Jul 25 09:21:33 2026 GMT
        Subject: CN=3709C838F26165D9D084A99DC20A9E09AAEE2D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:1c:5d:22:cc:67:26:46:b1:15:f2:bc:0f:
                    81:70:f2:c5:10:3b:37:22:d2:84:c6:9c:1b:6f:0f:
                    df:0a:ac:b2:64:c7:db:30:e8:b4:0c:40:f3:68:6b:
                    88:46:b8:bf:98:ab:f9:72:d6:1b:ec:d3:bf:cf:e7:
                    d2:90:f3:e0:81:4b:26:23:52:53:31:fb:da:77:84:
                    98:31:8a:b2:85:51:15:0e:49:eb:53:14:a4:63:c0:
                    b3:9e:fe:6a:14:12:76:a3:e4:3d:11:73:c2:97:63:
                    ad:b7:1b:8a:4e:95:bb:28:79:a1:c8:1e:dc:23:e9:
                    8b:12:00:89:3c:20:2a:15:3a:4c:05:d8:ce:a3:aa:
                    57:05:1e:8e:d2:16:34:1f:4e:d3:11:a3:cb:8b:97:
                    37:93:98:45:e9:8c:77:36:05:ad:b6:13:9f:b2:80:
                    61:bf:34:e8:e2:c2:5b:2b:d2:6c:3b:f3:08:62:0c:
                    a3:78:f2:62:a4:d5:f8:fb:7c:bf:05:10:35:7a:8b:
                    4b:d9:c6:b9:e8:48:e8:0f:38:7b:49:4b:a6:46:bf:
                    d5:fa:00:95:37:f5:88:09:b9:f3:71:c7:c3:f7:83:
                    22:ee:0e:7a:f4:e4:d0:13:f2:a5:86:9f:22:a1:b1:
                    0d:05:54:d2:6d:b5:49:5c:aa:36:75:a8:e9:b9:97:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:C8:38:F2:61:65:D9:D0:84:A9:9D:C2:0A:9E:09:AA:EE:2D:3B
            X509v3 Authority Key Identifier:
                keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:46:28:d3:f9:f9:f8:fd:57:64:e3:0a:5c:07:55:78:37:5f:
         9a:87:e3:f5:9a:01:30:a9:46:eb:92:71:2a:c0:75:c2:7d:52:
         5b:f2:e9:e3:ad:2d:c8:f7:81:5f:0c:2e:96:55:a3:10:15:17:
         cd:c2:a9:d1:f2:ed:04:ec:c5:1f:8c:64:89:e6:2b:04:19:df:
         0d:66:7e:5a:f1:a8:ca:79:91:52:a9:35:0f:58:2d:63:a5:b2:
         c9:8d:56:4d:b8:a4:52:91:c6:f7:98:9a:8a:dd:cc:ac:b4:65:
         62:32:39:12:3a:39:f0:77:1e:83:d5:d9:f8:df:74:4b:3a:b6:
         02:c7:05:ca:bd:c8:82:a8:41:fc:53:2f:69:be:9b:d6:b2:90:
         6c:db:db:d5:56:8b:bd:b2:6c:49:b2:fe:0a:5a:59:1e:17:ac:
         fa:19:b6:92:f0:8a:4b:18:5a:eb:a8:ed:7e:a7:09:e8:a2:b3:
         6a:a5:77:76:4b:14:cb:0a:d2:64:92:d8:62:11:83:5e:b0:f7:
         82:03:bd:0c:7e:74:58:56:15:da:b2:4a:e2:4a:79:86:26:08:
         4c:7e:fd:90:58:0c:b7:e9:03:c9:d2:a0:86:56:43:80:98:a5:
         ab:b9:32:da:85:fe:05:5d:9c:f6:5b:90:f6:ca:c1:0d:3d:50:
         5f:25:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:31 2026 by rpki-client