Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
File:                     E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json)
Hash identifier:          ESZj3oulnnnQvNFaz5USQ9NvcDbDy8WpKqr/3vwU31A=
Subject key identifier:   2B:D9:D2:52:AF:3E:94:6D:FC:E3:63:C0:05:BF:49:C7:04:EA:C6:91
Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7
Certificate issuer:       /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
Certificate serial:       164E07F26190623E7B035707F79B5EBE006450CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
Manifest number:          81
Signing time:             Thu 23 Jul 2026 15:49:03 +0000
Manifest this update:     Thu 23 Jul 2026 15:44:03 +0000
Manifest next update:     Fri 24 Jul 2026 19:07:03 +0000
Files and hashes:         1: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=)
                          2: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=)
                          3: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: vA2VgDACYefZF+fcw26XFc0S4j98Fb1HzHVm17l5Oik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4e:07:f2:61:90:62:3e:7b:03:57:07:f7:9b:5e:be:00:64:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
        Validity
            Not Before: Jul 23 15:44:03 2026 GMT
            Not After : Jul 24 19:07:03 2026 GMT
        Subject: CN=2BD9D252AF3E946DFCE363C005BF49C704EAC691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:89:0c:13:56:76:51:54:9b:5f:28:6c:9a:
                    aa:0c:eb:f0:81:9e:78:df:84:92:e3:5a:45:ab:55:
                    b1:85:5b:2f:26:89:69:df:35:3f:ee:1a:28:07:23:
                    e0:4b:04:c0:0a:81:7b:3e:d2:22:cf:3c:54:64:79:
                    3e:0d:18:c3:94:08:4e:62:5e:68:ab:5e:18:49:46:
                    53:16:5c:cd:4c:d2:97:be:21:0d:b2:79:53:b5:68:
                    03:7f:c3:15:e6:1c:35:7a:00:05:6d:67:ed:7d:6b:
                    9d:35:d1:2d:ad:b5:6d:17:1c:9f:c5:49:a0:4d:93:
                    7c:58:20:59:1d:e0:01:74:32:fe:ce:fe:8a:d2:79:
                    c3:52:55:1b:34:66:3b:d2:81:bb:6b:cc:df:5e:d9:
                    69:3c:1e:43:e3:4f:e1:56:d0:6a:6d:1d:a0:72:1b:
                    35:ce:98:89:51:3a:97:e6:c9:1f:8f:49:04:37:dc:
                    f8:fc:30:60:b5:f2:3c:24:7d:b9:db:da:a5:4d:4a:
                    8d:7b:0b:49:5b:68:cb:1e:cc:6a:45:ab:b9:f2:61:
                    47:7b:33:92:d0:af:df:76:79:69:2f:da:a3:39:6d:
                    92:13:70:bc:c2:b8:07:69:a3:c5:d0:da:18:10:86:
                    d0:2d:d3:04:0e:34:2c:fd:89:c6:06:39:55:35:91:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D9:D2:52:AF:3E:94:6D:FC:E3:63:C0:05:BF:49:C7:04:EA:C6:91
            X509v3 Authority Key Identifier:
                keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:37:27:ce:c2:98:97:62:9e:14:00:d5:fd:fe:ac:6c:45:
         b5:f7:4d:d9:86:8b:24:f2:a8:95:bb:a9:bf:9a:18:df:ab:90:
         81:f0:8c:2f:ed:bb:05:9e:a2:4a:d4:ca:5a:c0:ff:43:36:cc:
         54:29:5d:20:54:ae:9e:5d:ee:3f:30:8a:d5:f6:5e:f8:ab:0b:
         25:f2:4f:1c:0c:bc:2b:25:59:ec:57:cc:b0:3c:58:1f:d1:70:
         0a:01:67:64:92:d9:19:2d:46:d5:29:6e:5d:0c:67:49:d5:b1:
         1f:de:96:14:00:b5:b8:60:85:ef:a3:36:71:4d:b6:8a:f3:d5:
         dc:93:f7:fa:00:56:ae:c9:b9:5e:75:49:d0:92:19:91:d1:03:
         5e:c0:ab:31:05:1f:84:20:52:5f:4f:9b:d5:dc:af:f3:3a:bd:
         5c:b7:5a:6a:89:8e:e7:64:e2:ba:52:f7:42:0c:06:ac:cb:1a:
         ba:00:0c:44:e4:19:65:fe:74:11:d9:ed:25:67:a4:43:60:58:
         17:02:67:9c:fd:6f:20:09:47:84:5c:26:91:67:4c:38:39:fb:
         19:52:33:a0:dd:81:68:af:eb:35:62:59:59:27:00:22:2c:1f:
         7f:a9:b2:58:0a:f1:e8:1b:c5:4b:a9:68:cf:02:11:8e:84:e6:
         75:70:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:42 2026 by rpki-client