Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
File:                     601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json)
Hash identifier:          2YUs1yxwRmn6mgh4Jq+x0AyokghhACaC4in4ouVg9ok=
Subject key identifier:   A0:1B:C3:D5:8D:A8:C5:72:50:44:96:7F:22:E7:2F:16:B6:BC:3E:28
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Certificate issuer:       /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial:       39E12A5E2B2AEAE8D9D2C0AC42F4D2E6B43A645B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
Manifest number:          8F
Signing time:             Fri 24 Jul 2026 08:35:47 +0000
Manifest this update:     Fri 24 Jul 2026 08:30:47 +0000
Manifest next update:     Sat 25 Jul 2026 10:45:47 +0000
Files and hashes:         1: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=)
                          2: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=)
                          3: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=)
                          4: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=)
                          5: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=)
                          6: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=)
                          7: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=)
                          8: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=)
                          9: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=)
                          10: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: O7JckY6Sri8o19y88C7r8lAu2cao8a5vCP2AHxgq3F8=)
                          11: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=)
                          12: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=)
                          13: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:2a:5e:2b:2a:ea:e8:d9:d2:c0:ac:42:f4:d2:e6:b4:3a:64:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
        Validity
            Not Before: Jul 24 08:30:47 2026 GMT
            Not After : Jul 25 10:45:47 2026 GMT
        Subject: CN=A01BC3D58DA8C5725044967F22E72F16B6BC3E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:1f:0a:8c:66:c5:6c:3b:05:f4:d5:b4:35:
                    f8:93:31:c4:c9:74:b0:b2:c3:01:c1:8e:02:aa:de:
                    bb:45:f2:e0:ba:3a:d6:0a:fd:39:ce:4f:83:21:f7:
                    f9:e3:6c:8c:de:ad:34:20:fe:b2:3f:e4:59:d5:57:
                    90:45:7c:0d:f1:63:2f:29:39:fa:4d:da:62:a8:ba:
                    c6:57:3b:09:2d:b2:99:9b:1f:a5:4a:fd:b4:dc:af:
                    98:48:10:79:b3:11:a9:02:36:f6:5b:cb:b0:48:1e:
                    ff:f0:ee:0b:30:2e:32:76:e0:24:bd:1c:a3:85:f2:
                    2b:35:5b:7b:30:b4:0e:0d:d1:c9:15:bc:52:26:fb:
                    28:28:12:80:60:e8:fd:a4:7d:d7:d8:58:93:3b:00:
                    7b:01:e2:76:cb:a7:0f:59:d8:35:0a:cd:45:6c:4c:
                    e7:61:d6:73:5b:83:c9:7b:83:4c:79:90:1c:73:37:
                    60:98:bb:15:24:cf:fd:db:48:f3:01:92:4a:b9:0b:
                    62:2f:a8:42:67:84:ad:df:a4:39:6b:41:54:52:9e:
                    b2:b4:1b:61:ea:30:e3:1a:05:ff:28:bc:cf:13:e4:
                    4f:e0:ff:cf:f7:d5:60:94:d1:f0:b9:ee:fd:a8:4f:
                    18:de:f5:8f:22:6c:14:50:39:bd:34:ef:19:05:ff:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:C3:D5:8D:A8:C5:72:50:44:96:7F:22:E7:2F:16:B6:BC:3E:28
            X509v3 Authority Key Identifier:
                keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:57:7f:e9:cd:6e:cc:32:b9:2f:41:e1:d4:78:57:bd:d3:
         8a:ad:26:06:cd:02:d2:fa:75:40:50:d1:19:fb:fa:db:7f:ff:
         7a:bf:c9:44:8c:05:a2:a8:e6:7a:53:3d:44:8c:9d:68:1f:3c:
         23:98:08:e6:d6:5d:34:06:f6:9a:7f:05:5a:5e:e3:c1:37:91:
         0f:c2:c0:31:cf:91:69:dc:91:76:7e:93:09:3b:ba:08:6d:ce:
         0c:89:31:93:be:90:8d:c1:55:b5:44:7c:4a:18:e8:e9:e6:66:
         03:cd:00:45:c5:f3:99:ab:cf:b6:8a:3f:a1:b6:57:c1:ed:47:
         43:84:96:6e:97:07:24:78:03:23:e5:0e:1c:82:ed:fa:3e:94:
         c5:9f:50:16:19:3e:1d:49:ad:e4:9e:da:f5:33:92:9b:5b:c5:
         02:d5:d2:11:fa:30:9d:da:82:b2:06:48:ee:11:62:a3:9d:32:
         7f:4d:c8:af:b4:1e:a9:5c:15:07:d1:c7:25:a1:b4:18:bc:fc:
         b3:3c:a5:e0:11:0c:77:6d:8c:66:e3:6f:0d:99:80:83:ad:04:
         7b:3a:ef:e9:50:1b:44:48:50:bd:ba:17:c3:c3:d5:2a:97:cb:
         b1:e4:80:59:0e:d7:e3:a1:54:9a:f1:84:35:89:70:00:d4:2d:
         c4:6a:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:33 2026 by rpki-client