Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
File:                     7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json)
Hash identifier:          kM8oZc1wtRVvvkJ7RGY+1FBL/GjKVohPvaK8ahGWjYU=
Subject key identifier:   82:46:D7:C1:F9:DA:89:CA:63:7E:B7:A0:B5:50:22:E5:2E:A7:98:DF
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Certificate issuer:       /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial:       2BFD448F5F5CF18BDA81284F74AC21E3A1343746
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
Manifest number:          67
Signing time:             Sun 05 Apr 2026 20:13:56 +0000
Manifest this update:     Sun 05 Apr 2026 20:08:56 +0000
Manifest next update:     Tue 07 Apr 2026 00:06:56 +0000
Files and hashes:         1: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: +uWVv1SYwbjRg9YK9WoaAL2cCwXJTiSowqRRoRiFFgU=)
                          2: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=)
                          3: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=)
                          4: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 11:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:44:8f:5f:5c:f1:8b:da:81:28:4f:74:ac:21:e3:a1:34:37:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
        Validity
            Not Before: Apr  5 20:08:56 2026 GMT
            Not After : Apr  7 00:06:56 2026 GMT
        Subject: CN=8246D7C1F9DA89CA637EB7A0B55022E52EA798DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:a0:c4:89:9e:25:9c:7c:41:c2:dc:10:c6:
                    cd:8c:83:1f:12:ae:2a:c2:1e:ab:04:3d:ba:a5:14:
                    2e:eb:f2:94:28:fc:60:28:42:d7:ae:1c:d6:77:9e:
                    72:b3:4a:d6:f2:28:42:b8:4a:9e:70:70:29:9c:ff:
                    88:b0:b8:6e:f9:5c:eb:36:46:7a:5c:cb:bb:0f:a7:
                    16:67:61:99:e5:91:e4:cc:44:92:70:19:69:f5:df:
                    27:0d:30:f4:f1:96:10:a5:ee:35:67:cd:d4:65:65:
                    2f:04:c0:24:52:4a:3f:32:9c:38:5d:13:13:6a:f5:
                    46:ee:80:9a:df:cf:7b:3c:49:83:22:b7:69:cc:40:
                    56:73:7d:76:4b:c8:c0:07:f2:eb:a9:73:c3:99:6b:
                    5a:0c:40:83:5d:2d:91:8e:0c:75:5c:6a:1d:6d:96:
                    c6:cc:68:6a:e1:ae:57:8e:83:b2:c5:89:28:af:0b:
                    0a:c7:73:cb:cc:27:e8:f6:db:af:69:8d:f0:92:ce:
                    80:ca:eb:b9:8f:65:c9:73:ac:fe:08:86:d7:8d:6f:
                    d9:f6:c1:45:50:f5:0c:37:d1:9b:7f:74:2b:34:ac:
                    60:f1:5d:c9:37:c2:4a:20:22:c6:03:f1:67:ef:85:
                    5a:49:54:92:ad:8a:55:9a:2a:b2:51:41:99:61:e2:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:D7:C1:F9:DA:89:CA:63:7E:B7:A0:B5:50:22:E5:2E:A7:98:DF
            X509v3 Authority Key Identifier:
                keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:d5:4b:a7:07:5b:4e:ae:89:7e:9d:c3:fa:de:53:6d:01:
         8b:78:46:bb:31:95:77:cd:52:50:6b:fd:31:0c:0e:e3:80:22:
         ab:a3:2b:34:cc:b2:18:5f:2b:cb:2b:e7:7f:34:29:33:9a:a5:
         85:be:32:6b:44:e9:fd:5e:6f:b7:30:eb:a9:f1:6f:70:c8:a2:
         15:04:07:51:9b:64:76:4b:48:cc:85:49:b3:40:18:76:40:4e:
         9a:d3:03:4c:ad:97:68:0d:e1:39:1d:3e:ee:55:2d:62:58:a3:
         d1:da:36:f2:58:82:9c:27:fa:e1:ce:c2:c2:9a:14:45:41:9d:
         52:3e:cb:1a:66:33:e2:c5:d3:96:bc:8a:ed:cc:49:e0:34:ed:
         32:63:c6:86:bc:40:20:a3:cb:11:c2:ef:10:5e:fc:fe:15:0c:
         21:47:24:af:52:fd:77:24:ea:b2:4b:8e:b6:98:c1:0e:52:68:
         55:8f:1f:23:9b:16:47:03:9e:aa:2a:54:d6:30:62:1c:33:87:
         2e:9c:2e:4d:04:59:49:6f:84:e2:b9:3f:3b:06:d2:81:78:0b:
         8f:b5:e8:1c:e3:db:ed:01:d0:e7:81:ea:a3:cc:40:f4:6b:7e:
         00:62:43:77:54:fb:92:43:c8:bb:da:7a:6a:22:58:89:5f:1d:
         ac:34:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:17:01 2026 by rpki-client