Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
File:                     95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json)
Hash identifier:          L7C54yW3my8DCDadQxIjbgSTRXGdB81aoJVErgnmywc=
Subject key identifier:   BE:3C:21:A4:E4:8A:C0:7B:ED:F7:FF:4A:81:16:44:2A:BA:09:57:5E
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Certificate issuer:       /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial:       2449286B1B0C4D5CFAA5692BE9AF23AE53FD999C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
Manifest number:          74
Signing time:             Fri 24 Jul 2026 02:05:06 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:05 +0000
Manifest next update:     Sat 25 Jul 2026 05:49:05 +0000
Files and hashes:         1: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=)
                          2: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=)
                          3: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: OcLUVkK1ukoPdPFpARUb6ey9Bp9j635WVnzjvlwjXCk=)
                          4: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=)
                          5: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=)
                          6: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=)
                          7: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=)
                          8: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=)
                          9: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:49:28:6b:1b:0c:4d:5c:fa:a5:69:2b:e9:af:23:ae:53:fd:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
        Validity
            Not Before: Jul 24 02:00:05 2026 GMT
            Not After : Jul 25 05:49:05 2026 GMT
        Subject: CN=BE3C21A4E48AC07BEDF7FF4A8116442ABA09575E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:6f:4c:2f:f5:08:7b:23:fb:97:65:10:52:
                    5c:ed:58:c1:cd:65:a7:5b:e6:2a:f5:0a:75:1c:22:
                    20:6e:aa:e7:c7:f5:fb:08:ea:de:8f:64:c4:34:df:
                    0a:08:5b:27:89:f8:db:b4:8a:86:45:14:2b:57:0c:
                    71:f3:b8:40:de:c7:7b:a1:df:8e:d1:20:dd:9a:5f:
                    e3:4a:79:3e:d0:13:68:05:c4:87:c0:df:bf:93:bd:
                    8a:d4:09:eb:6c:7c:74:d7:65:e4:a5:44:06:1a:45:
                    21:44:c8:86:4f:e2:07:2a:8f:4e:50:5b:ac:17:c7:
                    23:aa:30:9d:82:1b:b4:98:9b:0a:6a:96:fb:63:a0:
                    d0:85:98:f5:a0:9d:2c:95:14:12:cd:f1:03:d8:37:
                    91:ee:78:5e:d8:5f:7f:eb:ec:ab:54:bc:5b:51:76:
                    a4:d7:5a:af:ac:1e:04:6a:3f:c2:26:6e:62:d2:e4:
                    a6:2a:ea:26:be:75:60:a4:3b:05:4c:ca:2d:aa:ec:
                    d0:54:ab:3c:c5:83:8c:49:06:d4:54:f5:78:f3:eb:
                    86:92:64:e8:13:90:9f:ce:7b:1f:21:0b:5c:c7:e1:
                    d4:d4:4b:5f:f3:70:4e:53:3a:cd:6d:c2:ef:d4:1a:
                    aa:ab:ec:21:1c:dd:83:f0:d0:bd:63:66:cc:97:60:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:21:A4:E4:8A:C0:7B:ED:F7:FF:4A:81:16:44:2A:BA:09:57:5E
            X509v3 Authority Key Identifier:
                keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:ad:db:67:89:e2:bb:7b:22:cb:6f:c3:67:5c:90:5a:c4:
         20:7f:10:12:c6:76:a1:b0:bc:67:5f:3e:7d:a8:22:6f:bb:e3:
         8e:1d:49:14:db:ee:f4:58:18:c8:9f:e8:d5:71:bd:5f:94:4e:
         f9:3f:22:a8:98:85:91:33:10:09:2a:90:5f:39:1b:a2:e5:22:
         4c:aa:80:61:19:c3:5a:af:94:2d:78:03:f4:b0:ce:1d:15:1b:
         b5:2d:a4:87:93:95:46:55:df:0b:7b:c7:15:28:ed:e5:b7:6f:
         04:eb:83:ff:2e:ee:6d:df:6e:98:05:a8:5e:7b:5b:01:42:09:
         45:f4:b7:e6:e1:0e:61:2e:35:eb:df:c1:f2:6e:f4:41:ec:67:
         cf:50:d9:22:39:0d:56:ea:82:ea:54:75:1a:99:25:1e:f3:66:
         36:3f:47:05:f1:ee:2c:67:08:57:e1:18:4d:11:80:d3:14:49:
         14:9b:3e:40:a4:cd:73:16:21:15:8b:f6:3e:8e:d6:6b:9e:16:
         3a:82:9d:bc:e1:51:bd:78:ff:e3:57:b9:f1:4f:7d:05:ba:00:
         b1:3b:9f:6a:bc:04:5a:0e:f6:51:39:67:50:92:f1:67:d2:43:
         a3:22:47:be:0e:0d:3f:17:cc:7f:11:65:ae:10:55:ea:6b:c6:
         f2:3d:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:31 2026 by rpki-client