Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
File:                     B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json)
Hash identifier:          7VCIEHsEqxHPRfiruEHbZi4ORmY61BsujWhOZF5G+uA=
Subject key identifier:   2F:E6:45:EF:60:71:6A:5C:56:9B:E6:BC:B6:8C:F7:97:30:DA:81:62
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Certificate issuer:       /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial:       5E75FFFC8B176769D3499B9081B861DEDCFA8B43
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
Manifest number:          84
Signing time:             Fri 24 Jul 2026 04:55:23 +0000
Manifest this update:     Fri 24 Jul 2026 04:50:23 +0000
Manifest next update:     Sat 25 Jul 2026 05:22:23 +0000
Files and hashes:         1: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=)
                          2: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=)
                          3: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=)
                          4: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=)
                          5: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=)
                          6: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=)
                          7: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: mLef+D13GinhIRNGTzFUKZh7tYZUGyXTjEefFvRh5zQ=)
                          8: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=)
                          9: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=)
                          10: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=)
                          11: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:ff:fc:8b:17:67:69:d3:49:9b:90:81:b8:61:de:dc:fa:8b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
        Validity
            Not Before: Jul 24 04:50:23 2026 GMT
            Not After : Jul 25 05:22:23 2026 GMT
        Subject: CN=2FE645EF60716A5C569BE6BCB68CF79730DA8162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:17:6e:00:cd:0f:a2:e9:c8:32:01:12:fb:
                    e2:47:2b:c6:b1:07:d6:77:db:21:20:a3:f1:f8:da:
                    e1:9a:e0:cf:38:a0:e3:15:7c:92:f5:47:a2:e6:ef:
                    cf:d3:98:8c:93:d4:a0:f4:1a:93:0b:b2:a2:c9:0a:
                    2c:4c:c7:77:5a:52:06:db:30:c3:a6:7b:b1:66:f5:
                    20:eb:43:4a:77:76:bf:73:a2:b1:58:39:ff:38:79:
                    53:42:64:4d:d9:df:4c:b9:e8:23:2a:23:f2:19:b4:
                    13:3f:29:d1:d5:14:6d:f8:d4:e7:02:a7:8a:5c:93:
                    65:61:cd:d4:41:40:c6:fc:e4:90:03:e7:e7:84:bd:
                    77:86:f7:b7:93:fc:fc:9e:2b:a2:b5:93:15:95:74:
                    c4:a4:40:89:86:bc:58:e1:2c:4e:8d:1e:dc:77:33:
                    e9:13:bf:bb:d1:6b:50:5d:3c:10:ca:e4:42:21:ce:
                    90:06:08:c8:ba:7c:36:0f:c0:70:0f:4b:68:70:2a:
                    bf:8d:c2:7b:8a:23:a4:8b:3b:d0:bb:17:e8:73:3e:
                    dd:b5:3e:ac:41:f4:35:c3:67:7f:a1:f1:86:a8:b6:
                    b7:a4:ac:ae:5b:ea:e1:de:37:df:04:cf:74:15:37:
                    0d:a4:e5:58:48:d8:82:ec:b7:3b:b1:7d:bc:e1:da:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:45:EF:60:71:6A:5C:56:9B:E6:BC:B6:8C:F7:97:30:DA:81:62
            X509v3 Authority Key Identifier:
                keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:02:3e:7b:4b:c5:5d:3d:47:88:90:ed:97:f9:0f:e7:b5:
         e1:b6:f9:ea:c4:8c:9f:e6:31:5d:ac:f0:1a:3f:af:38:84:ba:
         2f:1a:83:54:87:df:66:35:47:13:7e:08:e7:cd:50:96:20:ee:
         2b:ac:c0:12:ce:29:a5:e3:18:2d:8d:03:3e:d6:a6:62:20:d1:
         46:90:2d:f7:57:e8:d2:be:d1:c2:15:ef:ef:c7:31:af:06:1f:
         f1:26:51:ff:40:c9:35:dd:12:cc:e5:d9:40:f2:6f:2e:6e:b1:
         98:a1:bf:b8:9c:d3:b2:22:84:24:d9:51:36:22:a9:cc:b8:c4:
         df:73:dc:08:95:69:4c:50:41:10:7b:b9:85:b3:35:01:9a:c8:
         ca:58:f3:7b:b0:5b:fb:b9:14:8c:00:23:8c:70:95:76:fb:70:
         f3:d1:08:75:6c:c5:ac:ec:c6:34:d7:cf:7a:a8:47:9b:12:2e:
         58:7b:ba:db:eb:5d:4c:b2:c5:af:91:45:e1:3b:c5:b7:30:89:
         9e:93:f4:61:43:f6:5d:25:c0:69:19:ea:24:12:c8:65:18:ce:
         30:e6:06:58:ac:68:60:24:24:53:b0:d8:52:fe:48:2d:45:c6:
         67:44:56:5f:e3:1b:4e:4b:68:14:28:85:94:51:06:25:54:a2:
         3b:b8:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:36 2026 by rpki-client