Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
File:                     1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json)
Hash identifier:          H4AJFp3njJvv4HcLIkgiY9WezYkNJQY+dARrvODelnk=
Subject key identifier:   D5:C0:08:3D:94:93:36:C1:BA:BC:E4:5C:8E:F6:66:C8:7F:A9:5F:6C
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       1CC44DF311963FEA2227652D6272175FB48C246F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
Manifest number:          01DE
Signing time:             Tue 21 Jul 2026 21:04:40 +0000
Manifest this update:     Tue 21 Jul 2026 20:59:40 +0000
Manifest next update:     Wed 22 Jul 2026 21:26:40 +0000
Files and hashes:         1: AS24373.roa (hash: lHZo1qqYvvZtMBDB0UDEySpVRejGte3tz9NgBR7e3to=)
                          2: AS394881.roa (hash: uNlkd6JnCXliDu3t+qzOd5BwmcVsibO2dilTIlXUcXQ=)
                          3: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=)
                          4: AS4812.roa (hash: uR8+jvbPWxX/gya7yb2Z9YMAFb2ToXh5oJ8ZtPWHAUc=)
                          5: AS59083.roa (hash: Z100p9HOjk+mF7crq0CZJnUV/XfjIQj7eGvkpYgi6Kk=)
                          6: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: e8RQ+nGCch4YumpwsXxNupVTk86SH/hMC0A2+8JSqIs=)
                          7: AS17621.roa (hash: zRljjb52XHiNdSxfLLqrAwWf7soP3ZXOA6q8cDNDNRw=)
                          8: AS139259.roa (hash: xYaDcFVM2Y/8RZa9QIohRwpFU7DW5BfYeUk92/go1D4=)
                          9: AS4515.roa (hash: OTIETi3MG/xKB3HyilCE0M6KVDY7+mj0yGCzFMfXUnY=)
                          10: AS59803.roa (hash: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=)
                          11: AS0.roa (hash: MGE1I5nLgi2EXKW8NuMkkJLFt6UGuB4YuKT8zQml0/c=)
                          12: AS138527.roa (hash: ONSMAuOvbH7RfIxQwPsXri8s6XRjzCo6/RpUxAMRBBM=)
                          13: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=)
                          14: AS25743.roa (hash: 62wm3hjrKSTAMQ4s0HfcJZmR7Dw8rHd9Oq7Gl2Vg8Dw=)
                          15: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=)
                          16: AS13444.roa (hash: +X0olCc0xu0SyWwtuBjNMSx1pfUPwP7AiRpJF4RbydU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 21:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c4:4d:f3:11:96:3f:ea:22:27:65:2d:62:72:17:5f:b4:8c:24:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Jul 21 20:59:40 2026 GMT
            Not After : Jul 22 21:26:40 2026 GMT
        Subject: CN=D5C0083D949336C1BABCE45C8EF666C87FA95F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:fd:48:27:43:42:2a:af:76:0d:c5:b9:4e:
                    25:24:e0:78:3e:97:30:4e:36:96:cb:62:cc:3f:d9:
                    ff:97:61:47:c5:16:29:06:ad:c6:1e:6a:d6:76:30:
                    27:d3:9d:d6:30:35:19:48:b0:ce:60:9f:23:0d:ce:
                    74:7d:2b:3c:b6:1d:d8:df:be:7d:d9:c9:72:76:9d:
                    ac:9a:a6:75:1a:2b:3c:4f:c9:83:90:cb:46:fe:b4:
                    b2:d9:75:22:ae:23:f3:6c:59:99:62:2c:4c:02:34:
                    cd:39:3e:30:ec:c4:bd:3b:bf:e8:eb:5e:0d:97:1a:
                    74:22:a2:7c:0d:b5:81:c6:f3:02:dd:9d:38:85:e9:
                    46:a0:c7:43:4b:9a:16:e8:d8:5e:3e:5e:f0:b8:c4:
                    75:3a:90:c4:f7:ce:4a:59:43:94:f4:ba:d2:d9:54:
                    6d:f2:8b:52:71:e1:45:b6:35:e6:bf:9c:c9:14:9e:
                    ac:f4:6a:ef:86:e1:d6:57:81:03:04:80:cb:b2:71:
                    d3:3e:5f:52:91:f3:27:37:25:be:45:05:80:0a:59:
                    a3:67:7c:fb:7a:7c:9d:0e:44:cd:a1:49:a1:4e:b6:
                    69:87:e4:8f:2b:d8:b6:66:17:54:1e:b3:cf:97:2f:
                    3c:11:10:f4:df:1c:ec:d1:50:d8:79:5e:f5:ec:41:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C0:08:3D:94:93:36:C1:BA:BC:E4:5C:8E:F6:66:C8:7F:A9:5F:6C
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:5d:34:03:83:97:12:67:a2:39:30:89:0d:40:b8:fe:4b:
         ca:c5:f2:02:7c:18:4b:bf:95:a3:38:ba:03:d8:28:51:57:5d:
         fd:50:8a:17:0b:24:7c:ed:93:65:df:e2:7c:9f:42:9b:bc:87:
         79:45:9d:56:86:e2:0a:1a:c0:31:5a:d2:23:79:72:26:06:8f:
         80:87:ee:99:93:e0:d0:5d:6e:3c:7d:f2:0e:72:d2:70:d7:e7:
         64:23:86:2c:81:5c:fd:fd:d5:b7:c3:bc:14:b0:f3:a8:f9:b0:
         bb:4e:85:83:aa:64:3a:97:ec:1a:ed:04:a9:8f:a0:7e:77:7e:
         39:2d:40:23:d3:ab:ac:48:60:9a:dd:fb:8a:f1:4d:09:fe:42:
         65:bf:f2:24:9d:75:c8:49:32:50:cc:18:f2:54:45:7e:cd:97:
         25:da:fd:7b:5e:c6:05:07:77:a0:00:bd:73:a4:e1:63:a3:cc:
         8c:54:5d:5f:ae:ce:67:be:51:af:97:a9:82:8c:33:8d:fe:9f:
         2a:b2:3b:10:27:58:8b:f8:ac:16:20:1d:8a:7d:34:29:62:bb:
         1a:0f:27:9c:19:cf:53:f4:4a:ac:e6:b8:64:b9:a0:55:71:67:
         46:f6:e6:85:d9:2e:c6:38:d1:34:0e:d5:d3:7c:72:19:58:5d:
         61:6d:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:06 2026 by rpki-client