Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
File:                     7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft (raw, json)
Hash identifier:          fu8+0dRxQ41TIZu3zWH+mPLlyv7sbEcWYjqOg8wN63g=
Subject key identifier:   A2:70:AD:4F:8F:26:FB:5D:70:80:CC:92:D2:03:F4:B7:A2:26:31:DF
Authority key identifier: 7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D
Certificate issuer:       /CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D
Certificate serial:       18E2ADD2C86BA1BFD6A12A81695E80970D0FBD11
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
Manifest number:          3A
Signing time:             Thu 23 Jul 2026 23:54:52 +0000
Manifest this update:     Thu 23 Jul 2026 23:49:52 +0000
Manifest next update:     Sat 25 Jul 2026 02:58:52 +0000
Files and hashes:         1: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl (hash: uBJhHH+fQsxV5FUky6vMZ83L4OjGC6YzIRrCC+fd/+4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e2:ad:d2:c8:6b:a1:bf:d6:a1:2a:81:69:5e:80:97:0d:0f:bd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D
        Validity
            Not Before: Jul 23 23:49:52 2026 GMT
            Not After : Jul 25 02:58:52 2026 GMT
        Subject: CN=A270AD4F8F26FB5D7080CC92D203F4B7A22631DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:d3:a6:b2:ab:39:37:83:33:43:ec:e6:98:
                    aa:10:6c:07:7a:02:fc:27:b8:6a:80:24:22:f0:1a:
                    b7:ed:a1:c1:42:23:1f:08:0f:a7:be:e1:20:5c:91:
                    25:0c:41:44:ed:76:a9:8e:ff:7c:6b:b0:d9:7f:91:
                    b4:8d:f0:57:99:83:b0:30:97:45:b5:92:84:df:0f:
                    28:45:0a:ff:08:77:34:4c:ad:b4:4a:4c:85:eb:fd:
                    bb:f7:09:e8:5a:d6:64:e8:ed:03:31:04:7d:c2:a4:
                    3a:e0:43:5c:61:38:83:eb:ac:ae:63:22:aa:10:21:
                    0b:83:1e:1e:f7:81:77:d0:25:5d:1c:65:d4:2c:da:
                    07:22:ee:66:75:c0:de:6b:9e:ed:e1:27:a2:22:84:
                    dd:80:fb:53:2a:8b:8f:39:34:0d:23:77:67:20:0d:
                    e9:83:ee:de:86:a5:0a:b3:34:8f:f7:f2:24:77:1f:
                    36:39:2b:fe:13:05:ba:c7:a3:db:71:27:d6:43:cb:
                    b1:93:94:39:95:2e:bc:55:56:54:64:fb:cc:dc:b3:
                    17:ca:11:ec:dd:df:5c:02:09:9e:a7:13:1b:a6:6d:
                    d9:84:5c:fa:05:5a:44:90:e9:b1:17:c5:ef:a7:20:
                    ef:02:2e:0d:e3:46:7d:da:94:5f:6b:01:af:2b:e8:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:AD:4F:8F:26:FB:5D:70:80:CC:92:D2:03:F4:B7:A2:26:31:DF
            X509v3 Authority Key Identifier:
                keyid:7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:db:a8:78:32:0b:7b:2b:16:eb:d4:98:3b:fb:6a:d5:e1:
         9c:50:3f:5d:9b:f4:38:d1:31:86:ad:bb:1c:52:2a:ba:b7:c5:
         14:fe:7b:83:f4:93:8d:e1:f5:91:35:33:b3:85:8a:70:2d:90:
         93:2f:d0:21:12:29:97:35:48:46:6b:81:83:d7:35:a7:ca:41:
         6e:11:c0:b2:22:77:f5:51:9f:72:20:64:2e:50:17:3a:6e:71:
         90:c9:05:a7:be:94:5d:22:7a:e1:db:b6:9a:44:1d:00:24:cd:
         e8:34:bc:7a:2f:50:a0:f3:56:c2:52:a6:e7:ee:84:12:42:00:
         b3:89:0b:8f:fe:07:94:87:ef:f8:8f:40:47:c6:e3:d9:53:f0:
         c3:a0:5e:b3:9d:20:01:c1:d9:7a:a7:b4:fc:a9:61:08:05:6d:
         67:1e:2f:2f:4e:48:18:0e:62:72:69:c2:88:dd:f2:91:0e:66:
         db:83:4d:36:19:df:e1:dc:8e:f1:ef:4e:2f:56:09:7a:e1:0d:
         83:13:d4:04:69:b7:f8:2a:ba:34:71:8e:c1:4e:0a:cd:04:67:
         74:4d:8d:91:96:a0:ee:72:21:ed:ff:cc:2e:a1:d4:88:2f:94:
         6b:4e:dd:6d:ef:01:73:b5:13:e9:c4:c6:30:bc:73:56:ab:d3:
         7f:8c:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:57 2026 by rpki-client