Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
File:                     78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft (raw, json)
Hash identifier:          MGRncVDR1sjFOxBE38uuoVYVyoiybCpQnopTgoqLtbk=
Subject key identifier:   57:DC:BC:82:F8:EA:FC:2E:1D:36:88:30:37:38:7F:AE:63:59:2C:D2
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       2BF194C827B375A3CC94A51C7E694FBBDB86C6ED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
Manifest number:          0111
Signing time:             Fri 24 Jul 2026 05:10:24 +0000
Manifest this update:     Fri 24 Jul 2026 05:05:24 +0000
Manifest next update:     Sat 25 Jul 2026 07:46:24 +0000
Files and hashes:         1: AS135061.roa (hash: Eke/xCAEh/FQ6ioVK3gA1tfY0sbCo6gk7Co59VTjPxA=)
                          2: AS10206.roa (hash: MwQKlViCcT7jO1Ny0MR34yNXUdcM+8YzcJ82W3X7RTI=)
                          3: AS133119.roa (hash: UwOt5tr2s7AJyQIvzsx549pVsgIpDht61NuHGXjQm18=)
                          4: AS136958.roa (hash: bO6uRLPGKDb5G5NHguosrRNfcKh5HJvfSnNuUsL9w+c=)
                          5: AS137539.roa (hash: hgbPsIvw/d1FiopIGd9dsMQ/f/0+FCTUyZgg2C0Ykg4=)
                          6: AS138421.roa (hash: JtKEVLMlZAkQEIF6yFuW7eYH15be2tmLAUjy2AiA2Uo=)
                          7: AS9929.roa (hash: cLWOmIex9rYBfMOfLsGGmzGcSCreElvoDxmC5Sz8Vnw=)
                          8: AS17621.roa (hash: +S9yzE5SedN/6PzzHzifcAOrOx50eSUBrR2s+1+IdDQ=)
                          9: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl (hash: c+QCm22CCI97tGw1rbXiGedMc2mlIcJBuOzRAjZadvU=)
                          10: AS139007.roa (hash: YiJ6BkElfnNZ700uQApYitDZq50ty+TSesXDCL+6OEE=)
                          11: AS17622.roa (hash: IRTv5o4GJ1aBPIJIgzqhS0zc5fefTRhHWie6X5l6q6U=)
                          12: AS140979.roa (hash: 3ZaH20GCcLuBW4CZhfJkyavct0/76doMmkuQUvPtUOA=)
                          13: AS152120.roa (hash: Qbns3jTpPiZ4HvTvydl/LN6gM52cFh04J88DXulOgjc=)
                          14: AS4837.roa (hash: DxH/zqWUSoDUCZ3UFy4Yk98posHagr6zBefAKMjq/k4=)
                          15: AS140707.roa (hash: QGY68alUvxudDfvgKo0dIVPwgS9RrQLPSx5VEu/UuYI=)
                          16: AS140886.roa (hash: WUaoZKu7K4H2AeGcE1P71u/YcQk8t3wFdKe7sIqIROQ=)
                          17: AS17623.roa (hash: z6g5MCOUrEssoy1uJfKEk94+LrQeJ2+bymHuIDB9xxE=)
                          18: AS4808.roa (hash: kqByL1Zclk4Qwl77KzCp9upUtOuASsLyyK2yfuSlb18=)
                          19: AS140726.roa (hash: MIgxiULTvVVadp+gZl4VW6D66lpaYjtRNrDTyZCRqsk=)
                          20: AS140716.roa (hash: GS7v0EcdG/AXCHc0iFo17HUzaeWlVx3LY/f80n+5gVA=)
                          21: AS17816.roa (hash: RsDNLOmfkgVHh9MdDSB3ZlNqksclimN8vCearasAb5Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f1:94:c8:27:b3:75:a3:cc:94:a5:1c:7e:69:4f:bb:db:86:c6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Jul 24 05:05:24 2026 GMT
            Not After : Jul 25 07:46:24 2026 GMT
        Subject: CN=57DCBC82F8EAFC2E1D36883037387FAE63592CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:e2:37:dd:d9:d0:a3:b4:2a:39:bc:b5:20:
                    36:8b:b8:86:c2:d1:7f:da:40:2b:f6:75:c7:93:ee:
                    96:07:6c:44:5c:91:55:4a:b4:92:0f:a8:97:73:ab:
                    38:d5:97:94:6b:97:70:38:a1:d9:83:14:ec:16:fe:
                    a7:a6:c6:9d:07:c3:93:2d:5d:dc:84:fb:47:37:35:
                    54:9a:a3:0a:ee:54:cc:5c:ae:3c:41:f7:7f:d6:d2:
                    b0:48:3f:b5:66:59:3f:40:3f:3b:64:b9:af:85:bc:
                    d6:df:a1:25:de:e7:a9:b8:7e:61:ac:8f:40:02:7b:
                    ba:e0:8f:f8:f2:96:83:0b:4b:5d:dc:e2:e3:51:2d:
                    5e:fd:38:6e:06:0c:03:d9:a7:c1:60:fc:fb:b1:e6:
                    c5:e8:ed:c7:14:63:a2:3f:d4:8f:2d:4e:b6:11:0c:
                    1e:73:04:10:20:9b:7b:a4:fc:d1:0d:9f:94:f5:0c:
                    a2:9f:78:08:5c:2b:3b:47:74:ea:94:b3:38:9b:78:
                    2b:71:06:93:4b:52:1d:c2:5f:83:2c:be:bb:a2:63:
                    21:0c:8d:92:86:35:02:70:d0:38:55:be:71:15:94:
                    3e:d3:7f:9d:5d:5b:45:98:5f:38:a0:37:7e:bb:46:
                    d3:85:60:ae:9f:f9:0d:f1:ed:80:61:03:91:59:a7:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:BC:82:F8:EA:FC:2E:1D:36:88:30:37:38:7F:AE:63:59:2C:D2
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:37:04:87:c6:e0:13:9d:56:4f:da:45:a9:9c:d5:e0:54:98:
         8a:e6:ad:a3:6a:eb:7b:ee:85:9c:3e:22:cf:16:6d:cc:87:5a:
         67:d3:fb:af:80:36:0c:06:b0:98:78:57:ad:85:03:c4:1f:0e:
         e0:4b:ee:14:80:e9:c2:c8:84:84:5e:b8:88:14:75:1b:d4:bb:
         b1:f6:13:2f:fb:9a:dd:f1:cc:43:4e:b3:ca:a3:b8:15:b5:01:
         29:36:93:18:60:b2:95:eb:fb:7c:cd:4f:15:56:36:77:42:56:
         de:5a:ec:5f:b3:65:5b:35:3a:c0:b7:15:55:d1:e0:42:6c:ce:
         8c:c7:a4:ac:7b:b7:c0:2f:d5:17:3a:ad:69:00:82:dc:54:47:
         56:7c:8c:58:e5:bd:86:f8:ad:71:7d:af:23:57:b6:a0:e0:15:
         22:c1:37:c9:1b:4a:57:2d:f3:1e:e3:0f:6a:44:e6:cc:16:01:
         c5:de:fc:d1:57:6c:77:b4:e9:e1:ba:ff:e9:06:24:e2:bc:8a:
         84:53:1c:de:90:aa:e8:09:b7:4a:66:97:e0:9c:11:b2:e1:6a:
         7d:a7:72:8a:de:be:21:64:3e:31:74:6b:24:5c:2f:12:24:b8:
         00:d2:03:64:0a:45:95:40:9f:4c:df:35:2f:68:38:b6:a1:e8:
         45:06:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:47 2026 by rpki-client