Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
File:                     09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json)
Hash identifier:          1DteABZaVssY2GtaX7hJQOBbONLpW4SxObXoTNqsLWs=
Subject key identifier:   16:00:C0:0E:CD:03:2C:0E:B1:75:35:D7:65:4C:8D:92:39:D0:8B:A6
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       680A9181D430E01A9AF70EA86602B543D33C176F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
Manifest number:          010C
Signing time:             Fri 24 Jul 2026 00:24:55 +0000
Manifest this update:     Fri 24 Jul 2026 00:19:55 +0000
Manifest next update:     Sat 25 Jul 2026 01:18:55 +0000
Files and hashes:         1: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=)
                          2: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=)
                          3: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: 3U0eGhShUlnisYvcR7pmhgG4tPcTOTRc768O0fjEF6Y=)
                          4: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0a:91:81:d4:30:e0:1a:9a:f7:0e:a8:66:02:b5:43:d3:3c:17:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Jul 24 00:19:55 2026 GMT
            Not After : Jul 25 01:18:55 2026 GMT
        Subject: CN=1600C00ECD032C0EB17535D7654C8D9239D08BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:10:ec:65:59:0c:d0:92:58:35:5e:df:a8:
                    3d:2f:a2:67:f4:ec:ef:40:fd:8d:53:98:2d:d5:fc:
                    80:5d:bc:f6:80:39:da:23:37:c5:14:7e:20:bf:7a:
                    ac:9e:69:16:3e:7b:24:ac:20:3c:95:d4:69:31:fb:
                    9e:be:cb:8b:3b:80:e3:f0:46:b8:e1:f8:5c:96:ad:
                    5e:5e:bc:c4:e4:f9:42:85:9a:ee:5e:de:01:5e:fa:
                    95:99:80:f2:be:bd:18:0d:49:fc:96:56:cf:b9:ac:
                    c2:ae:73:2d:08:b4:5a:49:44:d3:98:c5:22:2e:de:
                    47:01:cc:ca:9b:68:a2:ed:7a:3d:5f:ca:20:eb:25:
                    55:65:4a:72:d3:20:10:4e:5c:cc:f2:15:6f:7d:b7:
                    c8:0f:e4:79:4e:d1:c8:7c:18:db:b5:5c:9f:a1:8e:
                    25:e7:7c:13:b0:ed:69:ce:5a:51:10:ad:cb:ac:05:
                    1c:21:40:91:a7:e5:e4:d9:b5:61:d3:dc:bd:7b:7e:
                    44:0f:cf:bf:7d:65:40:41:9b:3a:e9:53:2d:95:b6:
                    fc:06:65:9b:a3:2d:9a:6f:4a:68:98:96:3b:4d:6b:
                    a7:e4:ae:f9:79:ca:ce:3a:7e:8e:5e:d6:c1:f1:22:
                    52:ce:6b:f6:4e:aa:af:7d:63:ab:94:04:74:23:37:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:C0:0E:CD:03:2C:0E:B1:75:35:D7:65:4C:8D:92:39:D0:8B:A6
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:b4:a5:ae:20:4a:ea:b7:2f:d1:fe:38:10:fa:64:2a:20:
         1d:28:f3:bf:87:f9:18:16:ef:3e:48:c3:7e:4c:a2:3f:0c:63:
         4e:c0:54:e4:f9:29:41:47:a6:ad:9a:7f:66:ea:7e:aa:ad:5a:
         27:6d:27:e3:fe:bd:75:72:eb:e4:e9:df:5f:a5:d9:d8:2c:07:
         68:68:a8:dc:3b:03:6d:a6:d6:7c:73:ba:88:8a:8e:79:ef:ad:
         d2:6f:19:82:77:70:b0:25:36:97:42:9d:e9:af:9f:c6:2f:e1:
         27:74:4d:69:65:83:58:96:5e:0e:72:4e:ce:0b:b4:fb:a6:86:
         45:0b:56:d9:d3:47:74:d2:ef:6a:82:1d:e1:41:21:10:16:c1:
         02:e4:9e:48:2b:d2:6a:ed:4a:63:aa:20:d9:15:e9:ec:35:9c:
         41:1a:87:2d:f2:28:05:d3:1f:9a:a5:22:76:50:35:e2:ea:ea:
         39:9a:15:63:53:21:8b:c7:57:f8:3d:66:16:ee:ed:23:25:2e:
         39:c2:c0:30:f8:7a:f6:14:c7:bb:68:b4:ae:70:b1:a4:bf:b5:
         12:ac:e6:ce:f8:32:35:d8:7f:18:23:08:0b:a1:84:b7:f7:f3:
         09:3b:4b:d8:25:bd:c9:60:e9:3f:f7:67:cf:72:0b:ae:e3:06:
         a9:36:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:29 2026 by rpki-client