Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
File:                     F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json)
Hash identifier:          MvIIebmYGcX4icnxt8F7FV1TVe9uzJIiPffE9Z7jvkA=
Subject key identifier:   3A:AE:14:95:8F:78:0C:C9:E1:AB:BC:60:04:B2:18:1E:70:A1:93:49
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Certificate issuer:       /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial:       757FFFC26F253F97D92BD4800D66008E397805BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
Manifest number:          7F
Signing time:             Thu 23 Jul 2026 23:09:48 +0000
Manifest this update:     Thu 23 Jul 2026 23:04:48 +0000
Manifest next update:     Sat 25 Jul 2026 01:30:48 +0000
Files and hashes:         1: 34332e3234312e3138302e302f32322d3232203d3e203538353432.roa (hash: Rn7Hf2921Dc5UYgYrqbetrAyxHkG4VSopTyreGn+WM0=)
                          2: 3130332e3233332e342e302f32322d3232203d3e203538353432.roa (hash: yUlphJlkuTSXzbxuiNjSCxRtLT2/lWkCZPIq0oU9I+A=)
                          3: 3130332e3233332e342e302f32322d3232203d3e2034383337.roa (hash: jzL4NyHKET0uOb1qzgeUXQdh1sHLteXwDrGX2TWrytY=)
                          4: 3130332e3233332e342e302f32322d3232203d3e203338303139.roa (hash: G3uzsK+ftbNUs4VTtZx4TroDdTxpDx+jmVLFQkNfjTo=)
                          5: 34332e3234312e3138302e302f32322d3232203d3e203338303139.roa (hash: zoSIijyIzxMHIyqM6fuIarjhtGW5rdAeJUWmqZfTCYQ=)
                          6: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: JkIcNLaRKYpOH2XoixYFLz99ri7/MQaEG6uW/4QaKEg=)
                          7: 34332e3234312e3138302e302f32322d3232203d3e2034383337.roa (hash: HKZbwobn+gowp0+1ObLCg/VAVmOykGsCqjAowrBRE0A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:ff:c2:6f:25:3f:97:d9:2b:d4:80:0d:66:00:8e:39:78:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
        Validity
            Not Before: Jul 23 23:04:48 2026 GMT
            Not After : Jul 25 01:30:48 2026 GMT
        Subject: CN=3AAE14958F780CC9E1ABBC6004B2181E70A19349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:e8:6e:64:65:1d:1a:cc:ba:1c:b9:a1:d0:
                    a7:34:44:e6:37:86:b6:19:cb:4a:fe:25:c6:04:bc:
                    0f:27:fc:fe:39:7e:82:98:19:31:e6:b6:e4:ae:9c:
                    f1:50:b2:2a:4f:0c:bd:8e:23:cf:6c:a1:aa:60:d9:
                    94:a0:5e:ae:22:39:83:b0:76:db:e5:1d:3d:62:95:
                    7c:8e:93:4e:45:f2:98:8a:69:eb:58:cf:fb:9b:96:
                    26:c2:4d:1a:be:c7:3d:24:68:bd:0d:d3:9d:9d:75:
                    5e:eb:ac:dc:26:fb:27:d8:59:81:d3:67:16:14:48:
                    94:8c:f8:76:f0:f1:a6:03:0a:97:34:38:c4:42:d0:
                    97:12:4e:df:1c:75:62:77:a7:bd:4a:d3:1e:3a:52:
                    41:de:5a:01:8a:a5:e1:3b:5c:af:64:33:33:76:39:
                    81:e7:51:aa:d9:ec:84:14:6b:80:fa:ff:96:b9:06:
                    50:cc:35:66:ff:55:b5:58:05:77:0e:b2:e1:bf:71:
                    d4:e4:70:db:0d:28:b8:0f:af:ba:cf:a7:53:17:ce:
                    d0:a7:d5:9e:43:95:32:7c:f1:7b:ee:3f:43:1c:3f:
                    a5:fe:5e:94:7f:87:96:61:55:66:6d:a9:f4:9d:2f:
                    f1:5f:ac:1b:95:16:99:bd:a3:a4:50:3b:32:db:9d:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:14:95:8F:78:0C:C9:E1:AB:BC:60:04:B2:18:1E:70:A1:93:49
            X509v3 Authority Key Identifier:
                keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:91:2f:ee:9c:4b:b7:5c:87:bb:b3:8a:d1:26:9a:0e:e1:1e:
         ab:74:a2:df:d9:e6:75:2f:96:f8:34:27:cc:1d:5c:4b:9d:55:
         cf:47:b8:44:9b:d9:e5:8f:1d:23:ac:87:05:3d:f7:7c:97:ad:
         d0:c1:ef:78:bc:e3:71:7b:aa:a9:86:bb:ca:30:46:90:8f:dc:
         31:36:98:c6:ee:dd:51:96:df:74:ae:83:40:5f:b1:f6:27:e1:
         7a:bd:e5:8b:1b:c7:20:13:89:7b:7e:04:b3:74:34:ca:c6:4d:
         1a:60:09:f5:ad:a2:85:bf:b7:e8:f3:84:d2:d8:f1:93:bf:e5:
         a1:bd:9f:6f:9b:80:e1:12:0e:54:98:ec:65:2b:04:88:af:e0:
         88:86:03:7e:7f:1b:57:bb:1e:dd:19:0d:93:25:5a:80:ed:74:
         5c:8a:90:6f:20:0f:ce:2a:d2:76:72:1b:a0:62:4c:57:ea:0b:
         23:cf:48:47:b8:2f:8e:81:f4:14:4c:9e:a3:87:50:4c:a9:58:
         60:0b:ce:18:77:be:b8:4c:15:5f:a7:b3:d6:dd:c8:2a:64:13:
         41:56:67:b0:fd:8f:5b:37:a8:54:a6:b1:8f:12:e4:8c:cf:6d:
         11:5b:aa:56:a4:75:d5:69:fc:39:b4:6b:6f:b3:a5:57:1f:71:
         5b:c1:fe:6c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUdX//wm8lP5fZK9SADWYAjjl4Bb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz
QjEwNUNEODAeFw0yNjA3MjMyMzA0NDhaFw0yNjA3MjUwMTMwNDhaMDMxMTAvBgNV
BAMTKDNBQUUxNDk1OEY3ODBDQzlFMUFCQkM2MDA0QjIxODFFNzBBMTkzNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApOhuZGUdGsy6HLmh0Kc0ROY3
hrYZy0r+JcYEvA8n/P45foKYGTHmtuSunPFQsipPDL2OI89soapg2ZSgXq4iOYOw
dtvlHT1ilXyOk05F8piKaetYz/ublibCTRq+xz0kaL0N052ddV7rrNwm+yfYWYHT
ZxYUSJSM+Hbw8aYDCpc0OMRC0JcSTt8cdWJ3p71K0x46UkHeWgGKpeE7XK9kMzN2
OYHnUarZ7IQUa4D6/5a5BlDMNWb/VbVYBXcOsuG/cdTkcNsNKLgPr7rPp1MXztCn
1Z5DlTJ88XvuP0McP6X+XpR/h5ZhVWZtqfSdL/FfrBuVFpm9o6RQOzLbnVRjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUOq4UlY94DMnhq7xgBLIYHnChk0kwHwYDVR0j
BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG
RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk5Nzg1MTUzMjQ4NjI0NjcvMC9GOTE2RDcxQ0YyOEE3
RkMzMEU3MDVGRTExNDc2RkY0NzNCMTA1Q0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpEv7pxLt1yH
u7OK0SaaDuEeq3Si39nmdS+W+DQnzB1cS51Vz0e4RJvZ5Y8dI6yHBT33fJet0MHv
eLzjcXuqqYa7yjBGkI/cMTaYxu7dUZbfdK6DQF+x9ifher3lixvHIBOJe34Es3Q0
ysZNGmAJ9a2ihb+36POE0tjxk7/lob2fb5uA4RIOVJjsZSsEiK/giIYDfn8bV7se
3RkNkyVagO10XIqQbyAPzirSdnIboGJMV+oLI89IR7gvjoH0FEyeo4dQTKlYYAvO
GHe+uEwVX6ez1t3IKmQTQVZnsP2PWzeoVKaxjxLkjM9tEVuqVqR11Wn8ObRrb7Ol
Vx9xW8H+bA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:19 2026 by rpki-client