Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File:                     1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier:          dZhQN50X6/AVGNr/Yr7TVZmWP2uHoCqc/AMM8kntIvA=
Subject key identifier:   7C:A6:E8:F1:8A:42:F4:38:3A:E0:19:E0:D1:2F:0C:0C:26:65:FC:33
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer:       /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial:       7036F42E9E9ED00307C38E9595FFFD95E4896CFD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number:          6D
Signing time:             Fri 24 Jul 2026 01:20:00 +0000
Manifest this update:     Fri 24 Jul 2026 01:15:00 +0000
Manifest next update:     Sat 25 Jul 2026 04:46:00 +0000
Files and hashes:         1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: mVTPT3UGW+ynx78/guIBVTaxfCa9azt5rpolqblDLEo=)
                          2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:36:f4:2e:9e:9e:d0:03:07:c3:8e:95:95:ff:fd:95:e4:89:6c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
        Validity
            Not Before: Jul 24 01:15:00 2026 GMT
            Not After : Jul 25 04:46:00 2026 GMT
        Subject: CN=7CA6E8F18A42F4383AE019E0D12F0C0C2665FC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:45:5c:7f:f7:6a:df:c1:9f:30:56:6f:c8:
                    dc:09:35:e4:fe:4e:02:bf:ff:48:92:65:cb:19:41:
                    b3:df:06:cd:70:c1:e5:54:22:a8:ab:c3:20:ae:af:
                    af:40:86:12:49:96:21:89:32:df:f9:ca:94:a5:57:
                    d0:cf:44:bd:d5:83:54:50:7e:e6:a2:85:a9:80:33:
                    51:56:db:08:b9:b1:95:fb:58:b3:76:37:c0:8e:ef:
                    31:cc:f6:5b:71:9c:4b:0a:3a:26:22:90:88:f5:80:
                    e5:fb:ab:02:73:90:a2:eb:2d:55:3e:f4:1b:a8:a0:
                    e0:2d:6a:64:ab:2a:49:a9:bf:73:7a:20:a5:89:47:
                    28:ae:81:b7:26:60:3e:79:23:85:05:7a:10:15:01:
                    73:31:22:50:b4:04:ff:f2:ab:1e:9b:23:e7:a0:0a:
                    6d:ec:38:7e:ac:fc:0a:d2:e3:3e:1a:40:2e:4f:ec:
                    24:fb:bd:cc:43:8c:48:c0:4c:c1:93:a7:45:5d:9e:
                    7d:1a:1d:cd:59:1d:d1:a5:10:fc:c3:82:bd:f7:d0:
                    24:85:bc:2a:7a:99:b3:59:56:b0:32:69:10:fc:0d:
                    4d:6b:f5:c0:ac:5b:80:47:16:09:9c:5c:48:ac:f3:
                    00:21:a0:7e:4a:6f:da:38:f8:c9:97:3e:9f:85:a0:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:E8:F1:8A:42:F4:38:3A:E0:19:E0:D1:2F:0C:0C:26:65:FC:33
            X509v3 Authority Key Identifier:
                keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:ab:09:74:e2:c3:51:53:9c:76:3d:69:99:4b:78:b1:b9:
         d4:b7:f9:d7:38:cd:cd:a6:9e:5b:7a:67:bb:ac:52:48:63:79:
         5d:38:fb:05:e3:aa:9f:eb:f8:40:6a:e9:d5:ff:b3:fc:ae:2c:
         50:88:ad:79:48:e7:a0:fe:35:86:55:b2:22:d6:5f:36:17:32:
         88:88:fd:fa:62:3f:44:13:4b:95:62:01:0a:db:89:6d:cc:a3:
         b7:71:ac:73:67:a0:5d:44:47:22:d7:1c:e4:7e:ed:e7:11:75:
         9f:97:27:c7:8d:c0:b5:2c:55:f3:77:1e:a8:92:51:91:55:fb:
         4d:75:ed:3a:6d:f4:ad:ae:93:4d:30:38:44:1b:5b:83:26:6a:
         8f:42:61:ef:f0:33:f8:e8:1a:7e:ac:0a:ec:90:36:47:66:ab:
         a3:af:ad:60:26:d9:42:3e:1d:21:3d:6a:45:be:3b:39:6e:3a:
         25:d2:95:c3:9a:16:2d:51:52:36:83:0a:49:11:33:fd:5f:e9:
         9b:af:83:a4:79:01:ce:5c:a9:11:27:52:00:2e:17:74:8e:3b:
         da:4d:c5:58:03:5e:bc:ad:e7:9e:cc:f5:54:a3:30:a6:8f:f7:
         9e:9c:09:a6:8a:f3:d5:c8:ea:43:3b:b6:0b:03:2c:c8:0e:5b:
         3b:7e:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:19 2026 by rpki-client