Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File:                     718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier:          RQGXZOcetMiB7LYWgxSzPIA6ez3kDrOBzAgFwEyfzds=
Subject key identifier:   24:14:A4:F6:FE:86:73:7C:90:8B:E8:4D:E2:1A:92:AF:D8:DE:02:54
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       13A63356CCA9E0A59DD031238E33C2BC19DA0EBE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number:          4E
Signing time:             Fri 24 Jul 2026 19:47:00 +0000
Manifest this update:     Fri 24 Jul 2026 19:42:00 +0000
Manifest next update:     Sat 25 Jul 2026 21:37:00 +0000
Files and hashes:         1: 3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa (hash: UARyymAfIDpy1ZPBQsVU1R3OSEyjaA0vvn5sxjgro1g=)
                          2: 3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa (hash: distAruWwJV8Z6b4BmZuBNQpPxsHf8vOHF4Agw+jkIQ=)
                          3: 3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa (hash: uUXxe2oubP/XIqFRtOFAD2eSzNFzbuk/E3yzZzNqEF4=)
                          4: 3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa (hash: K+/yFwMvpUQXTRJBHOyhdN+YxG9U4N0OdNDEOURyx8U=)
                          5: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: /JkgXMJ2AolKHeCFroPqSEfRLPHKUi8I9LOeLXA0Qmo=)
                          6: 3231392e38332e3136382e302f32342d3234203d3e20313430323933.roa (hash: MmDbQB2VRSfiaD9xAvUAY28vAVaMoO2ogK6dCHUf/Ok=)
                          7: 3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa (hash: sGrrcIk3afJ9E7DLvszkTbNTabO8r22Dvgg+QO5PoTY=)
                          8: 3231392e38332e3137322e302f32342d3234203d3e20313430323933.roa (hash: f7n/uTJ1F+r1X4JAogOTJzYfN44+M+FFMOy6g9Zroto=)
                          9: 3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa (hash: 1YX+Iyv65ITm5/5IT22wrDzCHtuFcomRyNDxfKqdzx4=)
                          10: 3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa (hash: jr7jZ0peykfNX1djP7lYR6B63OpsiY99wvS1Gas/a7o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:33:56:cc:a9:e0:a5:9d:d0:31:23:8e:33:c2:bc:19:da:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jul 24 19:42:00 2026 GMT
            Not After : Jul 25 21:37:00 2026 GMT
        Subject: CN=2414A4F6FE86737C908BE84DE21A92AFD8DE0254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:6d:88:43:d2:f5:56:da:c3:6f:5a:d7:72:
                    78:e7:ea:3a:28:75:fc:d8:21:38:78:ac:c3:70:d4:
                    51:8d:7c:69:a8:70:a7:7c:d0:4e:02:c6:88:65:c7:
                    cc:e2:71:57:86:52:f4:d9:2b:b0:d2:a1:99:4b:0f:
                    35:93:01:c4:8d:b1:a1:07:ea:9b:79:36:4c:6a:1d:
                    0b:de:e8:96:b6:9b:cb:e3:0b:39:9d:49:63:2d:12:
                    f1:a0:8d:7c:11:4c:34:68:75:11:b8:f1:5f:ce:41:
                    ec:83:7f:31:3c:1d:12:cc:f5:f9:c7:aa:d5:98:ce:
                    06:31:12:66:94:74:77:32:49:37:ac:89:f0:ac:57:
                    c9:25:27:a7:c3:a6:5c:18:61:02:d3:71:c0:62:df:
                    ec:5b:33:97:03:27:af:7c:df:03:70:35:e2:50:45:
                    67:df:57:50:6c:49:44:ba:cd:c6:1f:26:fd:b1:66:
                    55:9f:2e:ca:97:6c:6b:94:3e:c6:2f:60:fd:0c:e1:
                    c7:de:56:27:b4:ee:cd:4e:62:42:df:4d:87:6d:3d:
                    4d:c1:ca:01:d7:af:f6:b9:e1:4c:ff:b0:e9:ce:a6:
                    97:fd:af:e4:2e:a1:45:eb:ba:de:74:97:0d:dd:85:
                    15:30:12:78:6e:f8:2e:ca:ee:4f:f9:7d:7a:d3:cd:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:A4:F6:FE:86:73:7C:90:8B:E8:4D:E2:1A:92:AF:D8:DE:02:54
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:7e:d4:f6:a8:74:13:46:13:9f:fa:0d:c9:cf:83:5c:ab:
         ab:3c:a2:0f:9c:f8:c7:39:f0:20:a2:60:8e:3d:1e:7b:4c:2c:
         9f:42:c1:32:77:00:38:16:2e:f4:a9:ff:21:2e:d3:b6:7d:3d:
         3a:de:2d:37:16:f1:d8:5c:81:44:40:8d:55:24:a5:b0:bf:8e:
         7f:69:7d:ce:32:78:83:5f:91:f2:bf:a3:24:a7:33:1c:32:2a:
         48:7e:2e:15:a1:0d:f7:b0:9d:ac:78:93:35:a8:59:63:9d:e8:
         8c:ce:87:e4:ad:c7:b6:9f:28:4d:c1:c4:27:5b:93:72:0d:5b:
         d7:53:1e:17:73:47:ce:91:09:37:b2:d7:68:c2:1d:e5:a8:e5:
         45:ee:d8:30:d3:6f:bc:c1:ce:b8:73:05:a1:06:71:dc:c4:c3:
         81:48:14:51:da:33:39:fa:f3:86:6a:1c:38:24:92:6b:b7:9c:
         ac:6a:e5:3d:f1:0a:f6:9e:08:0d:ae:29:f3:50:e4:67:e8:cb:
         19:82:92:28:a4:54:e7:09:30:34:ec:e4:10:7c:6b:cb:9d:59:
         0a:4a:5b:f7:ca:a1:c5:6f:ef:bf:86:73:bc:5e:e1:02:f1:d1:
         f0:f6:78:97:41:3b:01:70:5c:bf:f9:ad:b7:c7:ef:e0:90:b8:
         e0:fc:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:25 2026 by rpki-client