Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
File:                     D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json)
Hash identifier:          TENA3M/sAQnp5dYEQPESB9/YlaoHWEMoAo2rEVHJL/0=
Subject key identifier:   B3:BB:A4:E5:08:A2:55:97:21:2B:31:A3:26:C7:97:19:C3:DA:53:75
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       4E4CDB0754D122CE6537E4C0F84953218F5C35EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
Manifest number:          8B
Signing time:             Fri 24 Jul 2026 01:25:00 +0000
Manifest this update:     Fri 24 Jul 2026 01:20:00 +0000
Manifest next update:     Sat 25 Jul 2026 01:40:00 +0000
Files and hashes:         1: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=)
                          2: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=)
                          3: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=)
                          4: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (hash: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk=)
                          5: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (hash: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M=)
                          6: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=)
                          7: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (hash: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg=)
                          8: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=)
                          9: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (hash: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc=)
                          10: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (hash: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE=)
                          11: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=)
                          12: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=)
                          13: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=)
                          14: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: dxsE9JYfWhSTkcReMW/EOoYeYal3iPdTWfRkHBH40Hs=)
                          15: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=)
                          16: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=)
                          17: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=)
                          18: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (hash: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4c:db:07:54:d1:22:ce:65:37:e4:c0:f8:49:53:21:8f:5c:35:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Jul 24 01:20:00 2026 GMT
            Not After : Jul 25 01:40:00 2026 GMT
        Subject: CN=B3BBA4E508A25597212B31A326C79719C3DA5375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:01:df:7e:8f:84:9b:37:bf:86:6d:29:15:
                    ff:49:d1:1f:63:aa:46:6d:b1:87:b5:97:af:98:4d:
                    64:3a:8a:1e:96:1d:33:33:35:be:85:ad:2e:c0:d3:
                    94:e0:41:08:fb:34:c4:9f:cd:46:8b:27:47:e9:30:
                    c7:89:3a:26:8c:59:d1:78:74:a1:b3:0a:4e:90:2e:
                    e0:73:11:db:45:a4:86:8b:88:e0:23:94:61:8a:59:
                    8b:c5:8e:27:e3:79:69:0d:fc:3b:51:c4:ee:82:23:
                    1c:89:35:c0:48:5c:bb:e7:17:dc:91:17:ae:e1:a8:
                    22:d3:f8:17:f6:a1:65:11:0b:e2:89:c8:f2:fa:d6:
                    a7:ed:23:95:78:34:87:a0:60:77:47:43:a8:42:5d:
                    aa:f3:37:89:39:56:4d:49:0f:8a:7e:69:c6:8e:e1:
                    c8:f5:c3:dd:1b:f6:2a:54:6e:c1:20:f9:87:02:e4:
                    d4:a8:d6:70:a5:06:29:b5:1e:b6:98:99:a5:a2:e5:
                    47:5f:2a:0a:2e:ac:f2:3d:8c:74:24:41:8e:aa:2e:
                    5c:fc:ec:c8:4d:b4:a5:ce:62:38:a8:d9:c1:bf:3e:
                    c8:e2:86:c2:25:95:15:06:12:2c:5b:23:e6:32:32:
                    68:db:4f:8c:fc:22:b5:74:91:bc:66:d4:06:de:a4:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:A4:E5:08:A2:55:97:21:2B:31:A3:26:C7:97:19:C3:DA:53:75
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:b0:ed:26:b2:19:43:54:dd:a6:a5:74:4e:d5:bf:5b:e6:
         01:6b:35:38:29:52:f4:ba:f8:0f:d4:6c:e4:78:5f:68:41:e4:
         2d:b2:ff:09:40:62:a5:eb:1d:4b:fa:a4:c2:71:54:79:cd:90:
         1b:1b:9e:45:25:dd:bf:8b:1d:bc:ef:88:33:e7:58:62:20:c1:
         32:7d:d0:27:50:e0:ab:97:6b:b4:c4:00:78:3b:bb:0d:4f:73:
         c2:59:30:a6:e5:cc:cc:23:71:ee:72:03:c0:48:35:63:3b:88:
         f7:19:4e:8d:2e:07:5b:99:9e:4e:1c:8c:59:6c:c7:35:05:8c:
         fb:4b:4d:4b:13:3b:24:92:16:84:2c:2e:95:89:1a:04:77:54:
         f2:7a:cb:d9:91:26:35:7c:71:6e:99:05:27:f3:97:59:76:89:
         a1:9a:75:23:11:1b:a8:bb:61:29:27:1c:77:5b:d9:5d:5c:9c:
         1e:9d:5b:96:3d:d8:62:93:d1:35:5b:b2:87:1c:e3:a4:6c:a1:
         59:91:48:9f:5a:fb:e2:6b:c1:eb:77:97:68:6c:dd:a4:77:4e:
         03:02:49:d4:39:2b:0e:a3:49:6e:6a:bf:c0:a0:3b:0d:1c:eb:
         b4:84:d5:5f:85:86:c9:53:72:63:c5:ca:f6:9c:90:bb:50:3d:
         c4:95:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:56 2026 by rpki-client