Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File:                     158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier:          8/Uu/eKP2PeyWSe+wt6H5aahcUpchnScS1QVok0aK+E=
Subject key identifier:   DF:C2:66:30:12:4C:2B:89:2D:4C:C3:5C:A1:F6:4F:4B:72:2F:3D:58
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       157A6CD3E31AEC171FA537D6DDDD8A353F4AFF7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number:          7C
Signing time:             Thu 23 Jul 2026 20:24:27 +0000
Manifest this update:     Thu 23 Jul 2026 20:19:27 +0000
Manifest next update:     Fri 24 Jul 2026 22:26:27 +0000
Files and hashes:         1: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
                          2: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
                          3: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
                          4: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
                          5: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
                          6: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
                          7: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
                          8: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
                          9: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
                          10: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
                          11: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
                          12: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: c67dar/uWi7WkkIxlr/fhw5Zum8+ZTSJfUjHbZGK8Qw=)
                          13: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
                          14: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:6c:d3:e3:1a:ec:17:1f:a5:37:d6:dd:dd:8a:35:3f:4a:ff:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Jul 23 20:19:27 2026 GMT
            Not After : Jul 24 22:26:27 2026 GMT
        Subject: CN=DFC26630124C2B892D4CC35CA1F64F4B722F3D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:d3:1e:8a:6e:2f:a1:10:fb:8c:b3:5d:c1:
                    1a:a2:eb:7f:0e:fb:77:e6:ec:29:1a:29:17:b2:f4:
                    78:f8:7d:32:21:ec:87:50:4c:a0:df:14:24:60:3a:
                    f3:13:dc:11:b0:d3:59:7c:b5:10:12:c4:87:d7:f8:
                    8d:25:16:f6:25:b1:96:c1:59:bb:08:15:83:af:c4:
                    1f:61:a6:c2:94:c6:df:7e:23:d6:ea:45:c7:ed:ff:
                    0d:d4:f7:f3:99:dd:a4:29:e3:f1:a4:62:bf:6c:d5:
                    2f:75:1b:d7:5e:7a:28:9b:45:1a:92:d7:6c:18:ff:
                    d9:4d:88:9f:3f:46:fb:89:a5:54:ba:8c:9b:55:1f:
                    39:11:d8:f9:0e:00:56:08:57:bd:a4:96:96:e9:d3:
                    e7:61:ec:84:68:d3:23:ac:b4:d5:e5:28:16:91:7a:
                    15:b3:d7:89:2a:0f:65:9e:c8:da:b9:db:13:0d:9f:
                    37:6e:28:a2:e6:f9:89:0a:bf:a2:32:ec:00:bb:2e:
                    8c:3d:91:4e:13:49:39:23:a6:33:ec:7e:4b:49:11:
                    c3:58:e5:51:8d:56:f2:75:f2:a1:c3:81:ba:35:b6:
                    58:82:e8:56:43:69:ff:01:98:3e:0d:d6:4a:40:2f:
                    4a:28:71:ad:4d:b3:41:b7:b1:e5:d8:c2:bf:fb:17:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:66:30:12:4C:2B:89:2D:4C:C3:5C:A1:F6:4F:4B:72:2F:3D:58
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:26:40:32:cd:59:ba:76:1a:bb:21:cc:0d:93:c7:68:f3:
         42:c6:5c:77:5d:bd:8c:f5:79:2b:03:e8:cf:35:ba:41:0c:89:
         be:8b:98:75:ef:8f:94:f4:7a:77:aa:f4:d4:6e:ac:b3:87:1f:
         4e:a3:b6:f2:2d:5f:f2:03:d5:4e:97:37:0d:8e:4d:8a:2f:de:
         90:82:19:e1:ca:f9:77:84:6d:7f:2b:ec:99:02:3d:43:12:17:
         7f:ae:d3:8a:18:61:a0:f0:48:7c:4b:13:7f:91:01:a5:db:1c:
         bd:87:57:c2:30:99:9c:be:72:38:55:c6:11:3b:95:07:b3:14:
         d4:95:11:84:28:8c:58:b7:12:86:1e:af:2f:f0:b0:40:df:d9:
         3a:05:ba:ca:af:32:d4:1b:71:56:17:8b:38:92:1b:0e:84:f5:
         87:5d:74:7f:ff:33:58:cb:6e:97:e6:03:2b:40:a0:bf:1f:cf:
         2a:3d:7a:9c:0f:76:30:e9:58:9e:bb:7c:5d:ff:d3:c6:4f:c3:
         bc:ac:ea:8e:c5:24:44:d5:8c:d8:26:58:e0:77:c0:58:27:0b:
         3c:c1:1b:07:b5:17:76:9b:af:53:88:54:65:1d:f4:ed:3f:84:
         d0:a6:71:e6:3d:16:29:5e:2a:d6:e4:9b:8f:e6:3e:f4:b5:0e:
         56:40:83:a2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFXps0+Ma7BcfpTfW3d2KNT9K/3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5
OTA4RTYwRjAeFw0yNjA3MjMyMDE5MjdaFw0yNjA3MjQyMjI2MjdaMDMxMTAvBgNV
BAMTKERGQzI2NjMwMTI0QzJCODkyRDRDQzM1Q0ExRjY0RjRCNzIyRjNENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoNMeim4voRD7jLNdwRqi638O
+3fm7CkaKRey9Hj4fTIh7IdQTKDfFCRgOvMT3BGw01l8tRASxIfX+I0lFvYlsZbB
WbsIFYOvxB9hpsKUxt9+I9bqRcft/w3U9/OZ3aQp4/GkYr9s1S91G9deeiibRRqS
12wY/9lNiJ8/RvuJpVS6jJtVHzkR2PkOAFYIV72klpbp0+dh7IRo0yOstNXlKBaR
ehWz14kqD2WeyNq52xMNnzduKKLm+YkKv6Iy7AC7Low9kU4TSTkjpjPsfktJEcNY
5VGNVvJ18qHDgbo1tliC6FZDaf8BmD4N1kpAL0ooca1Ns0G3seXYwr/7F3fJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU38JmMBJMK4ktTMNcofZPS3IvPVgwHwYDVR0j
BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD
RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTkyMTYzNjY0MTE0NDgzMjEvMC8xNThCOTVGNTVENTQ4
QjA3MkI0MkMyQzI4MjBBQ0U3RDk5MDhFNjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2wmQDLNWbp2
GrshzA2Tx2jzQsZcd129jPV5KwPozzW6QQyJvouYde+PlPR6d6r01G6ss4cfTqO2
8i1f8gPVTpc3DY5Nii/ekIIZ4cr5d4RtfyvsmQI9QxIXf67TihhhoPBIfEsTf5EB
pdscvYdXwjCZnL5yOFXGETuVB7MU1JURhCiMWLcShh6vL/CwQN/ZOgW6yq8y1Btx
VheLOJIbDoT1h110f/8zWMtul+YDK0Cgvx/PKj16nA92MOlYnrt8Xf/Txk/DvKzq
jsUkRNWM2CZY4HfAWCcLPMEbB7UXdpuvU4hUZR307T+E0KZx5j0WKV4q1uSbj+Y+
9LUOVkCDog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:22 2026 by rpki-client