Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
File:                     721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json)
Hash identifier:          52c/Ug7FJRSKc8HZrOWe1ADDcnSUE2yRX5+Gw4t/fXQ=
Subject key identifier:   A8:C3:72:71:7C:DE:85:57:94:6C:66:D0:D4:7F:EE:B4:9E:47:11:B8
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Certificate issuer:       /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial:       52EEB3F784D2220FD05CD5772C7AA17135D234E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
Manifest number:          35
Signing time:             Thu 23 Jul 2026 17:16:27 +0000
Manifest this update:     Thu 23 Jul 2026 17:11:27 +0000
Manifest next update:     Fri 24 Jul 2026 19:52:27 +0000
Files and hashes:         1: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=)
                          2: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=)
                          3: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=)
                          4: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=)
                          5: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=)
                          6: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=)
                          7: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=)
                          8: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: s03EKiR2CtQFKyMbCjnOLPO/V5JP8Q/ojPKtJN/uJ5g=)
                          9: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ee:b3:f7:84:d2:22:0f:d0:5c:d5:77:2c:7a:a1:71:35:d2:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Validity
            Not Before: Jul 23 17:11:27 2026 GMT
            Not After : Jul 24 19:52:27 2026 GMT
        Subject: CN=A8C372717CDE8557946C66D0D47FEEB49E4711B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:98:8c:28:06:9c:04:a4:4a:79:12:4b:b8:
                    12:e9:6a:14:18:c9:45:b1:73:73:75:a6:22:1f:bd:
                    eb:85:bb:f8:bb:22:f1:6c:be:21:a5:b3:fc:26:ba:
                    28:d3:d9:1e:eb:72:93:c8:98:23:ff:4c:36:6f:04:
                    df:40:67:b1:5c:3e:a5:da:e5:8c:60:b9:59:f7:de:
                    24:5f:29:03:80:50:76:8b:33:ba:34:9c:59:d8:1f:
                    3b:b6:ea:64:fb:ee:dc:04:ae:01:ae:31:c8:50:d4:
                    6a:b4:5c:6b:84:1b:75:54:5e:5f:6b:73:cf:bb:0a:
                    76:70:c9:53:ea:c5:8d:01:ad:79:b2:6d:e8:4d:90:
                    42:6b:8e:54:0c:aa:cc:72:35:e2:e7:27:c7:71:c3:
                    44:ae:61:89:f4:82:56:cc:f6:c8:35:7f:a1:84:1f:
                    32:64:48:cb:22:bc:63:c5:7f:1a:72:b9:54:7c:5b:
                    8d:d5:dc:29:ba:63:ee:60:f2:9f:9d:92:15:a1:02:
                    bb:ba:cb:ae:ff:a7:6f:8e:52:6c:97:a5:6d:2e:e3:
                    d0:a0:9f:25:95:51:ba:80:6c:fa:62:21:79:5d:63:
                    9c:58:7f:56:33:71:3f:6a:27:99:d9:9d:4d:fe:c6:
                    d1:6d:dc:9d:81:85:fd:3b:bb:e1:df:61:af:94:ed:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:72:71:7C:DE:85:57:94:6C:66:D0:D4:7F:EE:B4:9E:47:11:B8
            X509v3 Authority Key Identifier:
                keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5b:be:a7:86:2a:7b:c7:56:4e:23:16:2b:ed:49:ff:c1:df:
         fd:f5:84:4e:5f:b9:74:e7:46:15:b1:a5:95:00:5d:6c:50:90:
         50:88:01:d8:32:5c:8f:07:20:f4:ee:d6:ad:2d:8e:c2:ae:10:
         0c:b1:9a:64:be:60:5f:b2:a1:4a:d8:f4:1f:4a:21:07:ed:fc:
         8a:68:84:94:c2:76:27:6f:42:4f:25:90:a8:bb:18:fb:7b:df:
         14:38:9c:0f:c5:6d:b9:54:5c:a7:c4:69:20:ed:d4:5a:95:79:
         c9:e4:77:9c:62:80:e7:de:31:8e:60:e4:35:5d:ee:d4:45:69:
         28:c6:86:78:68:59:b6:f9:9c:d6:c0:1d:f8:d8:ce:87:52:da:
         62:c5:7c:06:c5:08:b8:54:e4:cb:3e:70:ac:05:f5:d6:58:e1:
         4c:ef:29:27:cd:cf:7c:a2:53:c9:78:10:06:5a:cf:44:37:ad:
         63:55:98:3e:74:fe:14:04:53:bf:ca:24:7f:bd:cf:51:fa:d5:
         6d:b3:36:12:a5:52:72:92:e7:56:9a:c3:6d:53:c0:36:47:d4:
         35:83:05:20:7d:74:43:e8:a5:9c:8b:6c:d5:d6:81:b2:4e:00:
         ff:92:92:55:7c:b3:82:89:77:27:40:df:0a:43:bd:5e:60:22:
         95:b5:c7:25
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUu6z94TSIg/QXNV3LHqhcTXSNOgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG
NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDcyMzE3MTEyN1oX
DTI2MDcyNDE5NTIyN1owMzExMC8GA1UEAxMoQThDMzcyNzE3Q0RFODU1Nzk0NkM2
NkQwRDQ3RkVFQjQ5RTQ3MTFCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwUmIwoBpwEpEp5Eku4EulqFBjJRbFzc3WmIh+964W7+Lsi8Wy+IaWz/Ca6
KNPZHutyk8iYI/9MNm8E30BnsVw+pdrljGC5WffeJF8pA4BQdoszujScWdgfO7bq
ZPvu3ASuAa4xyFDUarRca4QbdVReX2tzz7sKdnDJU+rFjQGtebJt6E2QQmuOVAyq
zHI14ucnx3HDRK5hifSCVsz2yDV/oYQfMmRIyyK8Y8V/GnK5VHxbjdXcKbpj7mDy
n52SFaECu7rLrv+nb45SbJelbS7j0KCfJZVRuoBs+mIheV1jnFh/VjNxP2onmdmd
Tf7G0W3cnYGF/Tu74d9hr5TtBhsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSow3Jx
fN6FV5RsZtDUf+60nkcRuDAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I
mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2
Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf
dXFiWndleklsUHpCaV9meUprLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy
MTY1NTMxMy8wLzcyMUMzNjY3N0Y1OUZFRUE5QjY3MDdCMzIyNTNGMzA2MkZERkM4
OTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQCzW76nhip7x1ZOIxYr7Un/wd/99YROX7l050YVsaWVAF1s
UJBQiAHYMlyPByD07tatLY7CrhAMsZpkvmBfsqFK2PQfSiEH7fyKaISUwnYnb0JP
JZCouxj7e98UOJwPxW25VFynxGkg7dRalXnJ5HecYoDn3jGOYOQ1Xe7URWkoxoZ4
aFm2+ZzWwB342M6HUtpixXwGxQi4VOTLPnCsBfXWWOFM7yknzc98olPJeBAGWs9E
N61jVZg+dP4UBFO/yiR/vc9R+tVtszYSpVJykudWmsNtU8A2R9Q1gwUgfXRD6KWc
i2zV1oGyTgD/kpJVfLOCiXcnQN8KQ71eYCKVtccl
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:09 2026 by rpki-client