Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
File:                     6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json)
Hash identifier:          ZMxFfNJM+fqXOImxX2DyXBOhdihdulzw3sduY9AJDvM=
Subject key identifier:   CC:49:B0:21:8D:2C:DF:BC:69:88:B5:32:D6:1F:1B:08:4E:26:0D:40
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       778056A8967F249A4130F94AF8ACBE032421443D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
Manifest number:          9B
Signing time:             Fri 24 Jul 2026 05:05:24 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 06:16:24 +0000
Files and hashes:         1: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=)
                          2: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=)
                          3: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=)
                          4: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=)
                          5: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=)
                          6: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=)
                          7: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=)
                          8: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=)
                          9: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: b8MKhnTX6k16BSe+8OQ6zu0YSixru79Upt9VnxyXsbI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:56:a8:96:7f:24:9a:41:30:f9:4a:f8:ac:be:03:24:21:44:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Jul 24 05:00:24 2026 GMT
            Not After : Jul 25 06:16:24 2026 GMT
        Subject: CN=CC49B0218D2CDFBC6988B532D61F1B084E260D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:97:e5:4e:1d:7a:15:71:88:f8:d7:c1:57:
                    36:f1:96:66:e2:b0:d0:c3:45:b2:6e:bb:d8:ce:08:
                    ac:14:53:76:1e:78:b7:70:93:3c:4f:46:fb:8b:56:
                    c4:09:a1:15:57:d4:04:f5:45:33:f9:20:4a:bb:a7:
                    1e:a2:07:22:61:b1:ae:cc:ee:ec:33:4b:a9:84:c3:
                    76:5b:25:54:60:f0:c9:b3:4b:9e:b5:e6:11:f6:f6:
                    76:ab:16:7b:2d:ae:ac:24:80:c2:dc:6c:46:bb:1f:
                    82:29:32:d5:46:f8:5a:d0:5b:15:48:99:c9:d3:d7:
                    e0:8d:71:6b:b1:4f:01:0c:39:39:38:a6:24:fd:77:
                    71:63:d3:98:68:7c:99:d4:4f:36:76:80:c3:68:48:
                    6a:47:e4:b9:da:55:f6:96:00:fe:53:ef:8f:e3:6f:
                    8a:0a:4e:b0:da:8f:34:e4:7e:f5:3a:ac:f9:46:c9:
                    eb:af:80:c2:c9:6e:41:f1:10:d8:19:9c:14:cf:7b:
                    23:28:1d:cf:26:e0:a2:91:26:0a:81:a9:78:11:75:
                    e9:5e:5d:05:5c:c2:9c:46:bc:32:83:54:48:c9:88:
                    b6:61:f1:db:98:1e:c9:0f:f6:18:84:eb:af:5d:0c:
                    27:25:56:c3:43:59:2e:d9:14:40:9a:bf:f7:a5:69:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:B0:21:8D:2C:DF:BC:69:88:B5:32:D6:1F:1B:08:4E:26:0D:40
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:88:de:26:b6:42:b1:72:73:bd:b3:3e:e6:0b:88:cf:e2:da:
         01:63:0d:ab:ca:eb:37:97:2e:c1:2a:c1:be:bc:34:b0:b7:bb:
         fc:7b:5e:0d:9c:05:ea:0c:0f:90:e2:22:96:c0:46:5c:b8:64:
         c3:20:60:90:91:51:84:82:bd:18:0d:03:ea:b3:6b:14:f9:5d:
         48:38:fe:15:56:56:42:fe:fa:b1:89:ee:73:e4:49:0e:ed:c8:
         c0:bb:61:ee:8f:9b:03:20:8d:14:3e:d5:84:94:b5:79:06:33:
         6e:09:e6:d3:e2:be:17:4b:78:d7:e1:3b:05:d2:be:0d:7a:69:
         d7:7e:65:7f:4b:a6:8f:69:3d:26:f4:b0:e2:40:c5:f5:40:6b:
         5a:4f:a6:94:69:b2:55:ef:84:56:df:f8:c9:08:eb:f8:a0:b4:
         40:99:ba:6b:d9:48:af:f8:b8:e2:44:94:3f:f3:78:24:8d:c7:
         a7:5e:9c:13:10:ee:28:e0:93:ce:21:d8:a8:f0:0e:9e:50:b1:
         02:c2:74:75:be:25:42:3b:26:db:17:be:69:62:14:1d:b4:3e:
         eb:f5:28:cb:5b:54:68:c8:2d:33:78:63:57:47:eb:04:63:3a:
         98:a3:b4:b9:fd:48:73:d4:28:2d:63:a3:2e:b8:8d:bc:82:e8:
         97:12:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:30 2026 by rpki-client