Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File:                     845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier:          Q4u8zhcso6Cp+SVTPeErXlhXTDQSzUXs4E7FKqHiFw8=
Subject key identifier:   38:BC:B7:97:D9:97:63:C5:B6:EE:46:42:DC:83:1E:80:66:72:EF:59
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       6E8124A39D03656645421BA03E3BCCB4471E38F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number:          013F
Signing time:             Fri 24 Jul 2026 02:25:08 +0000
Manifest this update:     Fri 24 Jul 2026 02:20:08 +0000
Manifest next update:     Sat 25 Jul 2026 04:02:08 +0000
Files and hashes:         1: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
                          2: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
                          3: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
                          4: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
                          5: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
                          6: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
                          7: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
                          8: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
                          9: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
                          10: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
                          11: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
                          12: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
                          13: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: SkEaAhuQnKhRgp42SCUMVkJtMm/KPdk9NzMxuTEjPKg=)
                          14: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
                          15: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
                          16: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
                          17: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
                          18: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
                          19: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
                          20: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
                          21: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
                          22: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
                          23: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
                          24: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:24:a3:9d:03:65:66:45:42:1b:a0:3e:3b:cc:b4:47:1e:38:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jul 24 02:20:08 2026 GMT
            Not After : Jul 25 04:02:08 2026 GMT
        Subject: CN=38BCB797D99763C5B6EE4642DC831E806672EF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:26:3a:56:92:fb:a6:ef:3b:86:24:0a:4f:
                    77:8c:32:ae:4b:f7:9c:5a:4d:2a:8f:5c:d6:8e:9e:
                    1d:79:a5:b1:dc:76:06:dd:f9:74:a7:cb:36:3c:b1:
                    7d:a6:c6:66:7c:5a:71:42:09:b4:2d:04:76:9c:ea:
                    41:cb:f1:4b:14:76:bf:bf:40:18:f3:5c:b1:29:a8:
                    a4:f8:87:f7:56:df:0e:bd:32:df:d7:0a:ed:37:90:
                    e5:8e:85:b2:d3:e4:a9:bb:93:28:53:12:38:a4:97:
                    e5:19:86:80:00:3a:93:ff:31:f4:7f:38:16:1e:7c:
                    a1:02:e5:5b:a6:d3:fc:e9:1d:5b:83:53:e3:75:36:
                    6a:f3:fd:09:21:e7:14:de:80:18:bc:7f:9f:f0:34:
                    86:f4:20:e5:46:37:b7:05:7f:6a:87:4b:2f:ef:34:
                    3a:38:cf:de:04:21:af:0c:51:21:9a:77:54:b2:36:
                    4a:66:20:c9:8c:1b:95:eb:ef:4c:d5:5e:29:f3:86:
                    67:65:a9:39:5b:88:2b:77:0d:c1:ff:91:66:5c:64:
                    c9:48:f1:02:5b:6c:6b:64:9e:93:45:cd:d0:0b:3c:
                    78:32:a0:7e:9b:9a:e5:14:ea:28:46:55:1b:52:5c:
                    ac:73:2f:ed:32:10:c8:1c:ee:27:ce:b6:78:a7:22:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BC:B7:97:D9:97:63:C5:B6:EE:46:42:DC:83:1E:80:66:72:EF:59
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:78:01:e0:e9:63:56:3a:6b:fc:80:17:b2:58:5c:60:5f:
         bd:df:d5:3e:7b:a4:a4:76:77:98:bd:f5:c9:a8:c8:a4:45:ad:
         4d:0e:54:c1:5d:d3:72:20:a5:dc:c3:cb:72:91:08:31:6e:58:
         9a:98:29:da:99:01:36:97:4a:4a:61:b0:3c:71:d4:e8:50:ba:
         73:02:9f:40:1c:e9:52:de:93:79:3c:a1:c5:3b:dd:fe:fa:f0:
         70:71:c2:03:db:58:60:4b:37:1a:5f:bb:42:7d:d8:34:9c:ec:
         19:48:72:34:1d:61:eb:6d:84:0f:da:a7:f0:ac:66:88:3d:02:
         9b:10:ed:4f:5e:d4:b6:0f:e7:56:4f:ca:55:44:75:59:d0:d6:
         0e:b5:c8:31:15:f1:10:a5:2e:36:a1:42:22:b2:b6:ca:1c:53:
         dd:3e:76:ca:a7:e2:70:f3:3a:9e:ec:1d:c0:cd:c5:e9:9b:fa:
         35:fd:a9:6f:78:a4:65:a9:44:d5:12:1e:d2:3a:18:88:0c:ea:
         a3:db:97:d9:07:fb:ae:e8:ef:78:cc:0e:b0:ad:02:94:a9:ec:
         89:12:31:3a:09:c4:e4:31:b6:a9:a4:a6:a9:c9:18:31:b0:63:
         d4:67:4c:dd:98:b8:e1:eb:09:36:3f:1d:ea:b8:fd:df:d7:1f:
         d1:92:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:43 2026 by rpki-client