Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File:                     6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier:          SM541AIzDw5t7+s4JTrYpAfMcsR9+vnQPfUb/2HrgpM=
Subject key identifier:   7B:7A:22:2F:0C:23:90:BD:CF:62:0A:B3:70:91:3C:29:4E:00:39:10
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       314B777D589FB594B2F5C27DCDEA57CA55E87557
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number:          89
Signing time:             Fri 24 Jul 2026 14:51:29 +0000
Manifest this update:     Fri 24 Jul 2026 14:46:29 +0000
Manifest next update:     Sat 25 Jul 2026 15:08:29 +0000
Files and hashes:         1: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
                          2: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
                          3: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
                          4: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
                          5: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
                          6: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: pTNDpxhWvBdu0IHb/rUwgD60WXrk2W7Xy84I07Q4c3w=)
                          7: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
                          8: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4b:77:7d:58:9f:b5:94:b2:f5:c2:7d:cd:ea:57:ca:55:e8:75:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Jul 24 14:46:29 2026 GMT
            Not After : Jul 25 15:08:29 2026 GMT
        Subject: CN=7B7A222F0C2390BDCF620AB370913C294E003910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:b0:90:83:cf:97:e2:36:3b:f1:0e:4e:48:
                    6c:5c:79:3d:36:6f:77:68:32:f0:da:89:3a:9a:7b:
                    1a:ea:af:cc:31:6b:91:8c:0d:d2:a1:2a:92:09:82:
                    b8:29:ed:f0:db:60:a3:be:19:76:3e:32:d9:20:0a:
                    de:38:eb:f6:9e:5c:00:05:c7:da:2a:63:ec:9f:68:
                    af:3a:5c:81:c3:97:1b:1b:5e:cf:a2:0a:cd:95:6b:
                    3e:15:10:ca:98:ae:f0:9b:5b:c0:f1:25:45:f2:83:
                    e6:5a:fc:2b:bf:e2:d8:3b:f9:f7:e0:8f:1a:a6:9d:
                    b0:d9:91:21:2c:d1:30:df:66:1e:2f:5b:68:81:1e:
                    58:cc:cc:ec:c9:7c:02:9a:3b:55:3f:b4:53:9a:a7:
                    08:d3:7b:6c:fe:6f:86:9a:4e:73:3a:e5:1d:bb:22:
                    40:b3:77:f6:02:29:e4:09:d7:f2:04:a9:66:12:f8:
                    99:99:6a:21:de:7f:3c:00:88:da:ba:75:b3:7c:d0:
                    bc:e9:15:7e:0b:6d:28:93:01:9a:1a:34:54:a1:47:
                    cc:57:0b:c0:ca:06:fe:ff:8b:de:3c:5a:1b:7a:6f:
                    96:5d:f7:91:65:12:b8:a4:05:98:2f:74:2c:3e:df:
                    ce:f9:e2:11:a6:fe:3f:27:64:b9:ac:73:ab:5c:7b:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:22:2F:0C:23:90:BD:CF:62:0A:B3:70:91:3C:29:4E:00:39:10
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:79:79:02:30:b6:65:f2:44:e3:c5:82:6e:7e:c2:77:15:a8:
         18:4d:1b:7d:e2:e4:4a:66:c8:01:d1:6f:9a:cc:27:74:d0:ab:
         88:d4:6f:e9:26:e8:d0:0c:bc:28:c0:fa:f7:68:d0:8e:6f:fe:
         b8:ae:01:3d:4e:02:4a:8d:4c:d6:c0:01:ad:72:eb:31:4e:07:
         1f:10:14:08:79:58:40:ea:96:ec:f1:88:d8:92:94:6c:78:5a:
         95:5c:52:23:3b:57:04:bf:88:c8:ac:9a:1d:93:3b:af:f2:23:
         c1:5a:fb:38:e7:d4:c4:9e:ff:04:21:cc:ec:96:ad:1e:84:e5:
         5a:48:e7:66:02:b8:4d:cb:bf:4b:31:ef:a4:d7:5e:b6:c2:40:
         08:7d:af:85:7e:15:ac:fd:87:12:14:98:e1:92:46:69:66:bb:
         a2:f1:f2:c3:f9:fe:e1:b3:ee:24:68:6f:b8:26:2b:01:9b:31:
         70:49:2d:d7:8c:9a:58:ea:5d:2d:16:a7:e0:cc:5b:fd:e3:d6:
         35:ab:06:c3:30:d3:a9:e8:09:2d:00:6e:a8:21:e4:ea:e5:5d:
         c8:ad:25:0e:c4:df:35:2b:e2:92:25:c0:49:af:12:36:21:e6:
         52:34:c1:b3:05:47:70:91:f8:0c:a1:d8:2f:40:46:27:d3:b2:
         e0:2a:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:38 2026 by rpki-client