Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
File:                     200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json)
Hash identifier:          oMXTTW/CVY+p25wOmGwJV1AAJineH0x8Um0LkBWtSfI=
Subject key identifier:   DF:7C:26:2A:A6:E8:81:A6:09:EA:5B:DA:45:23:8E:74:26:6A:9F:B8
Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
Certificate issuer:       /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Certificate serial:       2094241FF607314AFA06F4FAB280135C8868FE96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
Manifest number:          83
Signing time:             Fri 24 Jul 2026 09:15:52 +0000
Manifest this update:     Fri 24 Jul 2026 09:10:52 +0000
Manifest next update:     Sat 25 Jul 2026 10:47:52 +0000
Files and hashes:         1: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: ovzVAT62GdE8asfDzx+LmqpVo6a9jrxfIXK6crZGRA0=)
                          2: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=)
                          3: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=)
                          4: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=)
                          5: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=)
                          6: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=)
                          7: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=)
                          8: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=)
                          9: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:94:24:1f:f6:07:31:4a:fa:06:f4:fa:b2:80:13:5c:88:68:fe:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
        Validity
            Not Before: Jul 24 09:10:52 2026 GMT
            Not After : Jul 25 10:47:52 2026 GMT
        Subject: CN=DF7C262AA6E881A609EA5BDA45238E74266A9FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4c:7b:69:3e:b6:7e:a1:71:ef:03:64:f9:ca:
                    8c:64:ec:00:4b:5a:a6:e5:af:73:3c:cd:56:e8:dd:
                    48:35:5a:d9:88:e2:2f:d0:fd:49:f1:c1:6f:51:66:
                    58:64:b2:ca:8c:22:d2:06:77:d7:7d:29:4f:18:63:
                    da:55:5d:98:db:24:30:12:55:a6:24:e1:03:41:a6:
                    65:fa:42:c4:06:d2:a4:c2:e3:e2:58:84:98:74:83:
                    63:01:2e:b7:b1:fd:ce:2e:e4:36:99:2d:77:7d:54:
                    6b:42:2d:55:95:3c:9a:74:6b:7d:f2:35:79:26:2d:
                    ff:1b:97:c1:63:07:cd:e8:bc:41:6f:9a:16:70:36:
                    46:ea:b1:62:d7:98:7b:30:8c:c0:4d:84:62:14:3e:
                    9c:dd:b3:b1:30:0f:18:9c:c6:e3:a1:a4:ec:8b:af:
                    5b:90:05:89:d8:0a:68:d8:34:71:1e:f0:8a:12:b7:
                    4a:30:24:2f:12:d0:74:49:58:a6:56:06:3c:ae:95:
                    ad:39:f7:c0:2d:b3:61:19:a3:42:ab:be:93:8e:ec:
                    4b:64:9d:ae:5b:a1:0e:b1:ba:87:19:bb:c2:8b:4c:
                    72:24:2b:1b:f7:73:08:2f:b6:7a:90:5d:7c:19:1d:
                    0e:20:44:f5:b3:90:91:a2:6c:d5:bf:81:f2:2d:15:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7C:26:2A:A6:E8:81:A6:09:EA:5B:DA:45:23:8E:74:26:6A:9F:B8
            X509v3 Authority Key Identifier:
                keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:45:42:5c:93:12:11:d4:46:1a:23:10:66:7d:87:71:51:49:
         66:92:3f:81:04:40:6e:a9:cd:7c:b1:72:46:51:a6:f6:24:0b:
         b0:da:46:c6:29:7b:bf:9f:21:dc:af:47:3f:c0:ef:c9:53:02:
         05:ad:34:1c:db:26:e4:80:1b:81:0e:ea:51:70:e6:e9:29:c8:
         47:c6:f7:ab:1c:53:8e:ea:0b:1c:37:6b:bd:8c:85:00:ea:28:
         91:d5:3b:b7:42:3b:52:69:2f:11:96:5d:32:d4:1d:ed:fb:b9:
         9e:b5:e9:c2:40:4d:c4:e7:23:24:8e:71:a8:04:eb:fb:e2:a9:
         6a:5b:05:a9:9e:ad:0b:9e:e3:dd:12:d2:62:54:dd:56:06:e6:
         08:89:20:00:01:7c:47:65:23:d7:f1:dd:b4:fb:8c:34:91:da:
         92:64:69:e7:2e:20:69:f8:63:6e:f8:52:a2:44:ef:8d:bf:83:
         4f:72:af:38:d8:79:6e:c9:69:2c:e8:91:24:bc:fa:96:99:49:
         2b:45:54:5e:71:f8:aa:58:b6:9e:15:84:3d:57:0d:66:04:d6:
         38:c9:a1:79:e6:1f:48:59:18:1d:4f:35:04:31:99:9a:c1:46:
         e4:48:33:df:ba:e7:60:0d:c6:88:c8:e6:64:4b:c1:4b:86:a4:
         92:9d:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:53 2026 by rpki-client