Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
File:                     4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json)
Hash identifier:          nNvYUuB28VAkl3cWRrRVmj5rEJkXdzMNiEZukFiEFXU=
Subject key identifier:   1F:6F:3C:79:53:EF:3B:22:FF:2C:13:65:AB:34:A9:10:CE:2C:48:21
Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92
Certificate issuer:       /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
Certificate serial:       3B0AE3BF11C801B4A2B98529914D51BC6330C5C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
Manifest number:          2F
Signing time:             Fri 24 Jul 2026 13:26:17 +0000
Manifest this update:     Fri 24 Jul 2026 13:21:17 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:17 +0000
Files and hashes:         1: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: Z1Km1H8hEKeP4YNusA2I5SwV/dhhfeqUrOM3mra2Zzw=)
                          2: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0a:e3:bf:11:c8:01:b4:a2:b9:85:29:91:4d:51:bc:63:30:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
        Validity
            Not Before: Jul 24 13:21:17 2026 GMT
            Not After : Jul 25 16:01:17 2026 GMT
        Subject: CN=1F6F3C7953EF3B22FF2C1365AB34A910CE2C4821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:4d:f1:f6:03:b5:8f:40:d9:d6:67:1b:bf:
                    37:4c:54:38:b1:b1:c7:86:d6:35:8e:c4:76:69:fc:
                    fc:fc:c0:11:17:0d:fd:e1:3a:f2:eb:36:a0:cb:c5:
                    67:2a:55:ff:1e:72:06:a1:a7:3e:6b:4f:10:ae:0b:
                    94:53:b8:ce:3c:13:e0:9b:22:7b:4b:8f:ff:bb:80:
                    e8:94:33:f3:6c:58:db:6a:1a:27:ba:1c:13:1c:02:
                    92:13:7e:0c:0d:7a:7f:1c:7f:0a:cb:6e:c9:f7:39:
                    3b:08:fb:63:e3:c9:ab:61:1c:5f:8f:26:25:53:c9:
                    ba:9b:40:d5:33:12:9e:bd:4f:c1:5e:0f:64:d8:ae:
                    5d:11:6d:a9:aa:fc:89:9f:7b:bf:40:6d:c3:de:80:
                    25:a8:d2:c4:95:d6:c3:9d:2c:f8:98:c2:c4:bf:d4:
                    36:90:7c:2b:c2:10:e4:5a:66:08:d0:e1:a9:18:1c:
                    d7:90:db:62:77:6a:96:ea:13:3c:40:8f:34:d7:88:
                    1a:04:49:e9:6b:a1:5e:0d:ac:ea:de:07:10:63:c4:
                    6e:c1:3d:96:e2:9d:2c:57:6b:a2:9c:35:fc:3f:70:
                    27:45:27:85:b3:45:2e:09:57:86:2d:1d:49:d0:ab:
                    0f:1b:90:d5:8d:d2:21:2d:26:40:c7:1a:68:4a:20:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6F:3C:79:53:EF:3B:22:FF:2C:13:65:AB:34:A9:10:CE:2C:48:21
            X509v3 Authority Key Identifier:
                keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:21:bd:88:02:88:c2:84:26:0d:fa:a1:33:e2:9c:5a:3d:84:
         90:27:2e:cd:11:04:08:ac:8d:b3:b5:82:1d:86:dc:c0:0d:04:
         fd:8c:ba:19:38:1e:c4:0c:c8:15:70:01:57:9f:cd:a5:f9:95:
         d9:f3:4c:68:df:36:ae:6e:99:18:42:58:b8:c9:6f:97:0e:f3:
         4a:0d:f2:8c:37:b7:22:33:0b:6e:6e:93:e4:7c:32:e7:99:f5:
         c3:68:8a:67:7d:90:7a:f7:ad:98:0c:db:76:80:2f:8e:65:11:
         f0:10:3a:a4:c1:ae:93:cf:71:1f:1e:7f:17:b4:68:71:4e:73:
         97:6f:4f:8c:67:6a:e6:04:16:e9:53:2e:29:45:21:d8:86:40:
         4c:e4:dc:b6:a5:1d:3a:ee:46:7c:05:a5:33:c3:8b:50:d9:81:
         5c:b6:b9:96:3f:c9:e6:ba:e7:e7:77:8d:a2:7a:d5:b1:cc:32:
         0d:02:ed:2e:a8:2f:7b:46:de:31:d5:27:64:f8:00:13:f9:31:
         d3:c4:4f:5d:8b:07:d9:ba:a6:28:e2:78:49:f8:e7:3d:a3:85:
         6f:29:1e:00:44:36:56:8b:c1:5a:f0:a4:8d:35:a7:e9:a5:5e:
         5a:c5:34:4f:3f:8a:7a:f4:f7:e5:0f:8e:8f:9c:5f:f7:7b:f5:
         85:58:4a:57
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOwrjvxHIAbSiuYUpkU1RvGMwxcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1
Q0YwODM5MjAeFw0yNjA3MjQxMzIxMTdaFw0yNjA3MjUxNjAxMTdaMDMxMTAvBgNV
BAMTKDFGNkYzQzc5NTNFRjNCMjJGRjJDMTM2NUFCMzRBOTEwQ0UyQzQ4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhU3x9gO1j0DZ1mcbvzdMVDix
sceG1jWOxHZp/Pz8wBEXDf3hOvLrNqDLxWcqVf8ecgahpz5rTxCuC5RTuM48E+Cb
IntLj/+7gOiUM/NsWNtqGie6HBMcApITfgwNen8cfwrLbsn3OTsI+2PjyathHF+P
JiVTybqbQNUzEp69T8FeD2TYrl0Rbamq/Imfe79AbcPegCWo0sSV1sOdLPiYwsS/
1DaQfCvCEORaZgjQ4akYHNeQ22J3apbqEzxAjzTXiBoESelroV4NrOreBxBjxG7B
PZbinSxXa6KcNfw/cCdFJ4WzRS4JV4YtHUnQqw8bkNWN0iEtJkDHGmhKIBbrAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUH288eVPvOyL/LBNlqzSpEM4sSCEwHwYDVR0j
BBgwFoAUT8BTVg9NHEkZT2kuEMN/Wlzwg5IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTg1Nzg0NDk3NTU2Njg2Ny8xLzRGQzA1MzU2MEY0RDFDNDkxOTRGNjkyRTEwQzM3
RjVBNUNGMDgzOTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMS80RkMwNTM1NjBGNEQx
QzQ5MTk0RjY5MkUxMEMzN0Y1QTVDRjA4MzkyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCG9iAKIwoQm
DfqhM+KcWj2EkCcuzREECKyNs7WCHYbcwA0E/Yy6GTgexAzIFXABV5/NpfmV2fNM
aN82rm6ZGEJYuMlvlw7zSg3yjDe3IjMLbm6T5Hwy55n1w2iKZ32QevetmAzbdoAv
jmUR8BA6pMGuk89xHx5/F7RocU5zl29PjGdq5gQW6VMuKUUh2IZATOTctqUdOu5G
fAWlM8OLUNmBXLa5lj/J5rrn53eNonrVscwyDQLtLqgve0beMdUnZPgAE/kx08RP
XYsH2bqmKOJ4SfjnPaOFbykeAEQ2VovBWvCkjTWn6aVeWsU0Tz+KevT35Q+Oj5xf
93v1hVhKVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:47 2026 by rpki-client