Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          Rq2qabahk6nvtj4TVgy8HiD7S5aXSnibTfPlC2KPlRw=
Subject key identifier:   F8:C9:36:D7:9E:D7:8C:DE:E0:88:E0:61:70:C3:DC:81:4E:11:45:2B
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       40FEEAE8249BE54A0D66BBFF8B8AD8D2B02CD330
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          0120
Signing time:             Thu 23 Jul 2026 18:54:21 +0000
Manifest this update:     Thu 23 Jul 2026 18:49:21 +0000
Manifest next update:     Fri 24 Jul 2026 20:35:21 +0000
Files and hashes:         1: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: fOCIKafefOoHqxC3v51uptPJgNkRAN3ROl5GwY7g/HM=)
                          2: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          3: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          4: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          5: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          6: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          7: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          8: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          9: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          10: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          11: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          12: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          13: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 20:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fe:ea:e8:24:9b:e5:4a:0d:66:bb:ff:8b:8a:d8:d2:b0:2c:d3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Jul 23 18:49:21 2026 GMT
            Not After : Jul 24 20:35:21 2026 GMT
        Subject: CN=F8C936D79ED78CDEE088E06170C3DC814E11452B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:48:ca:b2:f5:91:36:ca:0a:6f:fc:0c:d0:
                    8d:f2:f8:20:31:1e:d0:43:7e:48:a3:95:f9:63:bb:
                    2d:2c:96:b6:56:b7:d4:f2:ab:24:55:e4:b3:0b:08:
                    4b:00:24:39:0e:04:19:d5:20:d1:26:ab:b6:9f:b4:
                    02:36:1d:16:e3:4a:e2:05:26:5f:bb:7e:34:b4:b0:
                    f4:d4:c0:bc:c0:2b:c4:bc:75:54:6b:cf:a5:1d:5e:
                    4a:0c:8c:8d:84:73:cb:a4:21:2a:7e:b6:e3:01:90:
                    e6:fb:3f:9e:40:b4:83:a3:72:73:f5:7c:80:79:0a:
                    99:bf:e4:8f:42:02:85:75:72:66:db:cf:ea:3b:e9:
                    a4:84:c0:8d:b5:a6:1c:cd:a1:43:33:13:47:4a:29:
                    7c:88:16:40:80:d0:d4:f4:90:4a:91:0c:36:fc:f0:
                    2a:be:68:35:49:6a:71:8a:e7:96:b1:e3:73:19:8f:
                    fc:c2:d8:fc:3d:75:c6:b3:97:fe:28:46:5e:e3:30:
                    2a:cf:a4:01:e9:0b:1a:2f:5e:97:24:be:c3:d3:f5:
                    8b:01:4b:5d:92:77:73:bc:63:22:a5:b8:e4:69:0d:
                    16:5c:a8:00:51:54:48:56:15:ec:cd:93:bf:37:e2:
                    d0:3d:85:46:4a:bf:a0:24:b8:41:1c:76:c9:16:51:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C9:36:D7:9E:D7:8C:DE:E0:88:E0:61:70:C3:DC:81:4E:11:45:2B
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:59:c7:e5:9a:56:c9:6c:f0:12:39:f7:bc:b7:33:2f:da:
         e1:89:8f:9d:d8:47:9e:8e:66:c4:ce:35:a7:9c:68:30:2d:cc:
         26:8a:e4:00:1e:ff:c4:de:ff:7c:bc:d7:05:ad:9c:a5:30:ef:
         d9:1b:58:1b:3e:e6:bb:10:96:c7:f5:22:27:b4:a9:6d:8b:29:
         65:54:17:1a:82:a6:74:be:9d:47:7b:3d:d7:09:97:d3:55:72:
         4f:2c:a4:07:da:1c:24:d2:e1:fe:12:8c:38:f0:7e:c7:ed:42:
         8e:6d:ee:c6:67:a6:8f:d6:64:05:a5:64:62:67:e4:15:b4:3d:
         6f:a4:42:7e:86:94:b4:55:9a:0d:2e:a5:13:9e:07:b5:3a:47:
         f5:66:08:eb:16:c5:e0:a1:df:da:b1:22:09:f3:a3:91:42:0e:
         cd:ec:5a:ae:2c:cf:8c:4a:58:56:52:2c:e1:e5:bb:3a:a1:95:
         0b:69:ee:47:2c:5b:1f:63:fd:29:d6:d7:1f:91:86:c2:07:3c:
         a5:68:0a:4d:8e:16:a4:9e:cd:ef:79:16:e9:91:4d:15:65:17:
         41:10:c5:03:13:a1:59:b3:16:3c:a3:2d:92:6f:f7:2e:14:61:
         6e:1a:4a:9e:df:61:d0:56:5b:76:b4:50:8b:77:91:80:be:5f:
         3a:ce:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:35 2026 by rpki-client