Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
File:                     30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft (raw, json)
Hash identifier:          +lv5ih2e9+gS3VHa0Y6Fdo0gPQgKmnPx4pwqgCIyxZ4=
Subject key identifier:   60:C4:DD:AE:6B:F6:68:2B:D8:9A:03:06:A7:7E:91:EF:55:FC:09:36
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Certificate issuer:       /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial:       34370C4FA55F06B807F39A1E43CAD68AA9852CF8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
Manifest number:          66
Signing time:             Fri 24 Jul 2026 00:04:54 +0000
Manifest this update:     Thu 23 Jul 2026 23:59:54 +0000
Manifest next update:     Sat 25 Jul 2026 01:38:54 +0000
Files and hashes:         1: 34332e3235342e32362e302f32332d3233203d3e2034383437.roa (hash: jeJkLvIYDEf7KsBjTjP0Muz7wutFiTENkO7VbCNpnp4=)
                          2: 30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl (hash: gOlMueZV3In+AHzvM/1SgT9kRqFuj2BLHlD2sEEFuYQ=)
                          3: 3130332e3235342e36382e302f32342d3234203d3e2034383437.roa (hash: zPWgyyF1Mrz5OFEF3JqQzSab+M9J8QVcEpUZrn16NyU=)
                          4: 3130332e3235342e36382e302f32322d3232203d3e2034383437.roa (hash: aZ/0G1bg8whxvsp31vQsWHhAvgkdQ5XTg3GUqH++CNM=)
                          5: 34332e3235342e32362e302f32342d3234203d3e2034383437.roa (hash: leQK+grHmHX+nKo+1gHEIEc2DgIqJnwwWJjDTD+bBIk=)
                          6: 3130332e3235342e36382e302f32332d3233203d3e2034383437.roa (hash: b1EVn7R7/USI6UFqMLTUH9674Mh9xwEDoREczBT6nZM=)
                          7: 323430333a346138303a3a2f33322d3332203d3e2030.roa (hash: E+y7ZP4/IkfHf0gPRAUW7GMFf81wT+enHmqcRbcYENg=)
                          8: 3130332e3235342e36392e302f32342d3234203d3e2034383437.roa (hash: 7F88lFm6DD6Qmur/MExkO+X2jVnHVUUR5x0VicHrQgE=)
                          9: 34332e3235342e32372e302f32342d3234203d3e2034383437.roa (hash: TE4NaF/eF/qrYTsjwyjQmQNGwcNtHiBiLxwFl1yleq0=)
                          10: 3130332e3235342e37302e302f32342d3234203d3e2034383437.roa (hash: FNZmyanxz07Qqhgjs5JxEU8wVZNOlunehBdVCp6eaeg=)
                          11: 3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (hash: Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=)
                          12: 34332e3235342e32352e302f32342d3234203d3e2034383437.roa (hash: Ovzt74NkNXMJ6/m3biB7d43E0CMu7+X75tSS41U+dss=)
                          13: 34332e3232392e3138342e302f32342d3234203d3e2034383437.roa (hash: BIKbDGmrj7dmztRm9eLK7stBUpN/RIDdxkIj1Z0oloc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:37:0c:4f:a5:5f:06:b8:07:f3:9a:1e:43:ca:d6:8a:a9:85:2c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
        Validity
            Not Before: Jul 23 23:59:54 2026 GMT
            Not After : Jul 25 01:38:54 2026 GMT
        Subject: CN=60C4DDAE6BF6682BD89A0306A77E91EF55FC0936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:c0:63:d5:d3:79:6d:32:e7:eb:83:6b:91:
                    2d:a7:4c:07:48:54:e7:00:f6:51:a9:50:ac:3b:e4:
                    cc:cb:40:1d:8d:0c:31:bc:b0:fa:03:15:68:96:2f:
                    58:81:6b:f1:74:f1:42:e0:ea:b8:27:40:81:22:07:
                    01:4e:1e:41:9d:98:3d:b9:d0:b0:ee:80:5a:aa:ee:
                    57:e6:4e:41:35:3b:9a:eb:40:03:55:6c:3f:3b:91:
                    ad:4b:ab:1b:96:71:94:d0:c8:c0:3f:fa:f4:9f:ca:
                    87:c1:ba:7f:31:4b:15:9d:c1:6b:f1:b2:97:1d:d7:
                    78:1a:64:2e:eb:c0:9e:1d:b5:3d:08:db:b7:30:75:
                    5a:ec:4d:f1:de:70:ed:c2:a4:64:be:1e:ce:bf:57:
                    75:0f:d6:cb:6e:54:39:68:ec:dc:66:5a:6b:d5:40:
                    f5:fb:c7:27:e7:16:d6:49:62:23:e6:6a:62:dc:34:
                    b1:16:16:c8:2f:d9:d4:de:cc:a2:ec:e2:46:9b:ea:
                    c5:2f:dd:cb:84:73:b8:9f:2a:0f:39:c4:5d:64:3c:
                    b9:4e:f6:4b:65:8e:53:6a:d4:93:35:b1:1b:19:89:
                    38:ae:5e:3c:23:4e:e9:87:c3:42:32:af:c8:31:3e:
                    b9:89:70:52:a0:1c:01:67:be:34:bb:0e:a3:9c:d5:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:DD:AE:6B:F6:68:2B:D8:9A:03:06:A7:7E:91:EF:55:FC:09:36
            X509v3 Authority Key Identifier:
                keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:b4:16:04:31:29:c7:00:40:0c:c2:b7:a4:48:d1:86:69:
         e8:d4:b0:7b:45:bc:01:7d:81:94:51:e4:d3:6a:f1:01:48:41:
         ef:20:07:ee:30:69:78:0a:ba:f5:3f:0c:96:54:5f:47:05:73:
         66:7a:34:65:db:5f:72:9d:c5:b0:7a:a3:06:c6:16:9d:e2:67:
         98:c4:87:89:6f:53:7d:f2:b2:f7:af:01:3f:31:d8:ff:bb:96:
         f2:bd:f7:e4:71:d5:15:4c:22:ab:88:30:1e:f6:2b:63:cd:32:
         2f:0d:7c:e5:31:6e:f5:c5:f8:eb:2b:cc:bc:22:ab:69:a1:1a:
         87:89:3b:f1:de:8f:f1:15:87:a1:a0:c1:55:93:5e:0b:bf:14:
         33:ea:17:41:61:85:df:aa:e0:e9:cb:7b:78:22:c0:10:c0:7f:
         9a:c0:7f:15:ff:71:7e:51:a6:64:53:bc:e2:13:23:59:80:fa:
         e2:70:ba:4f:48:91:08:e1:ec:23:06:87:16:c4:fb:ea:c5:d3:
         33:97:de:4c:f9:5d:44:62:dd:1b:21:fb:0d:4c:55:27:69:d5:
         79:30:a6:15:bd:fe:0d:91:6c:30:d8:56:7a:de:33:c2:23:19:
         e3:c5:6f:f6:d8:d9:c5:60:ef:33:d8:2e:c1:40:26:4f:0e:9f:
         e8:fe:a2:f3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNDcMT6VfBrgH85oeQ8rWiqmFLPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw
NTE4RjUwNzAeFw0yNjA3MjMyMzU5NTRaFw0yNjA3MjUwMTM4NTRaMDMxMTAvBgNV
BAMTKDYwQzREREFFNkJGNjY4MkJEODlBMDMwNkE3N0U5MUVGNTVGQzA5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTmMBj1dN5bTLn64NrkS2nTAdI
VOcA9lGpUKw75MzLQB2NDDG8sPoDFWiWL1iBa/F08ULg6rgnQIEiBwFOHkGdmD25
0LDugFqq7lfmTkE1O5rrQANVbD87ka1LqxuWcZTQyMA/+vSfyofBun8xSxWdwWvx
spcd13gaZC7rwJ4dtT0I27cwdVrsTfHecO3CpGS+Hs6/V3UP1stuVDlo7NxmWmvV
QPX7xyfnFtZJYiPmamLcNLEWFsgv2dTezKLs4kab6sUv3cuEc7ifKg85xF1kPLlO
9ktljlNq1JM1sRsZiTiuXjwjTumHw0Iyr8gxPrmJcFKgHAFnvjS7DqOc1YknAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUYMTdrmv2aCvYmgMGp36R71X8CTYwHwYDVR0j
BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF
NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUzNzU5MzAzMjg1NDczNDEvMC8zMEJGREU0OENBQjlE
REQ1RTI3NUE3MjQxRkY3RTRFNDA1MThGNTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8W0FgQxKccA
QAzCt6RI0YZp6NSwe0W8AX2BlFHk02rxAUhB7yAH7jBpeAq69T8MllRfRwVzZno0
Zdtfcp3FsHqjBsYWneJnmMSHiW9TffKy968BPzHY/7uW8r335HHVFUwiq4gwHvYr
Y80yLw185TFu9cX46yvMvCKraaEah4k78d6P8RWHoaDBVZNeC78UM+oXQWGF36rg
6ct7eCLAEMB/msB/Ff9xflGmZFO84hMjWYD64nC6T0iRCOHsIwaHFsT76sXTM5fe
TPldRGLdGyH7DUxVJ2nVeTCmFb3+DZFsMNhWet4zwiMZ48Vv9tjZxWDvM9guwUAm
Tw6f6P6i8w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:51 2026 by rpki-client