Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
File:                     6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json)
Hash identifier:          hrc0XiLF9MUz7MRHwAs+7fCOE0pw3vkj9PwcLIiugxs=
Subject key identifier:   C7:FD:2E:93:06:32:61:1F:4B:4C:01:A6:B4:77:9E:7F:D5:30:5D:D2
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       1BD2E82728412BAC68610068B062824CD14B961A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
Manifest number:          8A
Signing time:             Fri 24 Jul 2026 07:30:38 +0000
Manifest this update:     Fri 24 Jul 2026 07:25:38 +0000
Manifest next update:     Sat 25 Jul 2026 10:42:38 +0000
Files and hashes:         1: 34352e3132342e3132342e302f32322d3232203d3e2034383132.roa (hash: CXEpAmsvqUr2yoEBoF7EcLtMxD3Q11yE8kM6MZ+Yois=)
                          2: 3132312e34362e3235332e302f32342d3234203d3e2034383131.roa (hash: h5S/8OMiNh1ekmL5NK6fWlNsK0E9t/53SO5cpRd3yug=)
                          3: 3132312e34362e3234342e302f32342d3234203d3e2034383131.roa (hash: WKUTb3+nU8Q8MVc6zgKN74/b/hNERmvdsnThxBvo2+0=)
                          4: 3132312e34362e3235342e302f32342d3234203d3e2034383131.roa (hash: 3pXA4qKU3vp45gTirzMkKrU8Zk4wL0OLas0e2KqoDHA=)
                          5: 3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (hash: EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=)
                          6: 3132312e34362e3234352e302f32342d3234203d3e2034383131.roa (hash: K2+E96TOB123eDmds7ch4nsFIxsPGZkKGQ6NOjteGKo=)
                          7: 3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (hash: TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=)
                          8: 32372e3130392e3132342e302f32322d3232203d3e2034383131.roa (hash: rYu/eBQM4h8/XihKL8IwRwGboqy1k9QH6j6PxhBjm+I=)
                          9: 3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (hash: rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=)
                          10: 3132312e34362e3235312e302f32342d3234203d3e2034383131.roa (hash: wRj2VcGqF83HOgkXpso91G8BmGLTATNaFM8r75p6m9c=)
                          11: 3132312e34362e3232342e302f32322d3232203d3e2034383132.roa (hash: yKAHVIn3NJVUHJeWRyBNQvW/+Ho4lCgMnLH+ppAs5Js=)
                          12: 3132312e34362e3234392e302f32342d3234203d3e2034383131.roa (hash: cmvIW4sXtGEpVBV8idr95fS3oeQBOCkjgxn412lwIng=)
                          13: 3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (hash: /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=)
                          14: 3132312e34362e3233322e302f32332d3233203d3e2034383131.roa (hash: ya78O7sAuJyhGsU6/IknufRy2nAzwBu9UN31pB+KKU4=)
                          15: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: soWl40+c47F9gsjCYueqEFNy4RZHO/J/oebCkVZkZDo=)
                          16: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=)
                          17: 3132312e34362e3233372e302f32342d3234203d3e2034383131.roa (hash: 5Ea7CEt1wZxAZnI6KN8ov4WmZLGvDEjxqq46jr+KFXY=)
                          18: 3132312e34362e3233392e302f32342d3234203d3e2034383131.roa (hash: caHxbqdTaK/FENayyJGGA0UrdY4LzN4IKHKwr6s7HqI=)
                          19: 3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (hash: BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=)
                          20: 3132312e34362e3233382e302f32342d3234203d3e2034383131.roa (hash: lreg6XU0+Tzz4w970jTicRygNZq0vFs5IE++gRHl1AU=)
                          21: 3132312e34362e3235302e302f32342d3234203d3e2034383131.roa (hash: 3NXFOW+JxLSqSLZN+FPKsUDOS5JMhZ+sra5cXJvMIzU=)
                          22: 3132312e34362e3235322e302f32342d3234203d3e2034383131.roa (hash: cxwtN8rgMwMkJebqJNIyJvCO710JkpyekZUx7VMA6FU=)
                          23: 3130332e32382e3231322e302f32322d3232203d3e2034383131.roa (hash: qc620Oxlzt7dIVpTjlxhUtMjAuP4sggvYYhOIp/BQvg=)
                          24: 3132312e34362e3234362e302f32342d3234203d3e2034383131.roa (hash: UdhPDpYX1v0Mwbch7R6+oi4dEsD74pACn2DpgqSxhjs=)
                          25: 3132312e34362e3233352e302f32342d3234203d3e2034383131.roa (hash: mJAl+LwwvXOwdBQoGHrfrqfj6m3rDD+aqn7fMRg2QmI=)
                          26: 3132312e34362e3233362e302f32342d3234203d3e2034383131.roa (hash: aOL2twD5oXm+ZXFKGnkUGShNfSgPt+QKt3iWK0pV7Ro=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d2:e8:27:28:41:2b:ac:68:61:00:68:b0:62:82:4c:d1:4b:96:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Jul 24 07:25:38 2026 GMT
            Not After : Jul 25 10:42:38 2026 GMT
        Subject: CN=C7FD2E930632611F4B4C01A6B4779E7FD5305DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:31:62:f1:81:77:4b:2c:47:a1:1c:c5:09:
                    22:01:85:8c:68:fd:4d:3a:82:76:b5:22:8f:99:d4:
                    0a:a0:d3:da:8f:d6:66:03:28:cd:b3:e4:e1:66:ed:
                    3c:d0:a4:94:12:51:7f:58:97:2c:22:53:75:7e:b5:
                    61:1c:70:e2:88:c9:8d:49:fe:52:b0:00:9f:04:d4:
                    2e:34:7a:f9:30:ea:98:c9:dd:ec:28:c6:bd:3c:c5:
                    a5:e9:1d:54:b0:a1:c1:0e:e7:dc:06:b4:7a:68:77:
                    a0:80:5c:ca:ed:d5:ed:a2:d6:c1:33:31:35:0a:a6:
                    66:ae:32:e7:39:b9:82:fe:1e:a2:5d:b5:0b:38:24:
                    9a:a5:8e:a2:0e:6e:08:cc:96:57:31:64:cc:6e:60:
                    d2:fd:50:f6:3f:78:12:63:d4:b5:99:c5:a9:5c:43:
                    06:4c:54:d2:44:82:02:af:75:1e:c7:16:b9:9b:2f:
                    7d:ec:0f:eb:c3:e5:10:7b:6b:cd:cf:a1:10:2b:ad:
                    bf:05:f0:8a:9a:b2:2c:a5:2f:00:01:0d:c2:cb:2c:
                    a8:0c:a9:66:2f:66:3a:db:bc:79:b3:50:ff:67:de:
                    ab:de:70:74:cd:1e:ec:1d:c8:af:0e:50:d1:e4:7c:
                    f8:93:75:7b:04:29:3a:7c:61:a8:b3:05:cb:d2:4a:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FD:2E:93:06:32:61:1F:4B:4C:01:A6:B4:77:9E:7F:D5:30:5D:D2
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:76:a6:2a:76:97:9c:1e:2c:c1:4f:5d:a7:36:44:35:c0:39:
         76:86:a1:2d:d4:1d:ec:7f:74:eb:2e:09:7e:6b:58:60:3f:18:
         6a:47:d9:bf:b3:98:50:99:12:b3:3e:f0:79:51:87:87:a9:26:
         d1:51:83:49:4a:08:fe:3d:ef:b4:65:cb:be:11:fd:d5:7c:56:
         cf:83:38:d0:33:c4:38:c2:88:35:b0:f0:ad:d7:78:bc:75:1a:
         6a:7d:13:5b:6d:c6:95:63:84:1d:b3:ac:46:37:13:44:d7:6f:
         4e:6b:13:44:e5:4e:df:de:2e:c1:12:70:1a:9f:69:5f:6c:b3:
         f3:c8:59:33:f0:70:f4:01:30:af:f0:2d:bd:16:58:dc:dd:e4:
         55:ad:6c:78:45:be:42:a1:4f:a9:43:77:b8:e8:55:89:f8:64:
         af:ad:fc:8b:f3:d5:38:c1:a7:89:84:7c:47:18:a7:50:2e:fa:
         3f:ff:b0:a9:e9:ae:f1:56:a5:20:dd:44:25:a4:42:40:f2:37:
         83:05:55:71:35:40:35:3d:2f:c9:ba:b0:1d:42:02:0a:dc:a9:
         6d:f7:a9:ec:66:39:aa:1d:da:96:6b:bb:f2:b7:4e:ec:98:f3:
         67:e2:b9:3e:de:62:60:82:43:39:56:e5:57:d2:8e:8b:ed:04:
         2f:01:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:20 2026 by rpki-client