Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
File:                     7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft (raw, json)
Hash identifier:          FlT4rhuiTB1XawAJJwQYMV+WvfkkRoYm+JSzDT9DRpE=
Subject key identifier:   3C:04:07:DA:F7:9C:A9:83:FB:8E:07:2A:C0:75:E1:AE:4A:A0:0F:4D
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Certificate issuer:       /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial:       64749561253047C8D6261A54453AEF5DDCD87049
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
Manifest number:          F3
Signing time:             Tue 21 Jul 2026 15:33:58 +0000
Manifest this update:     Tue 21 Jul 2026 15:28:58 +0000
Manifest next update:     Wed 22 Jul 2026 16:52:58 +0000
Files and hashes:         1: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (hash: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8=)
                          2: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (hash: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk=)
                          3: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (hash: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU=)
                          4: 34302e37322e302e302f31372d3332203d3e203538353933.roa (hash: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho=)
                          5: 34302e37322e3235352e302f32342d3332203d3e203538353933.roa (hash: N+EpGWN+5eD7X8BPdHo0VUuyK/mruZfTCEv7P/4k7IA=)
                          6: 34302e37332e302e302f31372d3332203d3e203538353933.roa (hash: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs=)
                          7: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (hash: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4=)
                          8: 3133392e3231372e302e302f31362d3332203d3e203538353933.roa (hash: TjfWShvYyMSe5iUDgDmO2D0KmAjdpi9YE3JeWe6558M=)
                          9: 34302e37322e302e302f31352d3332203d3e203538353933.roa (hash: GZdXu8wxwSiGKPAoovUfq55Hmtnm5G22A4eA9cJCeZ8=)
                          10: 35322e3133302e31362e302f32302d3332203d3e203538353933.roa (hash: 9fmayBtgmtjpp4jzOoesECemG0iPag+LmUb3f7R4naw=)
                          11: 35322e3133302e3139322e302f31382d3332203d3e203538353933.roa (hash: dzApubPVeFSkZdW4H5zf0mOm6a9a8hNkGDjx4j4dslE=)
                          12: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (hash: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg=)
                          13: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl (hash: P5XnJPbrBGA6UE12Sfe8J3iHz0FxD7MvNrIFwMsOJUA=)
                          14: 34302e37332e39392e302f32342d3332203d3e203538353933.roa (hash: 7R7fDqZf/5+3oxpf17LppS6FttEpLPqj/SRHzmBlL90=)
                          15: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (hash: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I=)
                          16: 34302e37322e302e302f31362d3332203d3e203538353933.roa (hash: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w=)
                          17: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (hash: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c=)
                          18: 34302e37322e3132382e302f31372d3332203d3e203538353933.roa (hash: p/W3urv9s6Mh0sKXJJNeu9I+tgf84ncaa3h8zoru8OE=)
                          19: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (hash: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno=)
                          20: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (hash: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo=)
                          21: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (hash: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c=)
                          22: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (hash: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=)
                          23: 35322e3133302e36342e302f31392d3332203d3e203538353933.roa (hash: OprOlplssuamN3h94BT0AnEzNk6BvCRELQ3ohphCM00=)
                          24: 3133392e3231372e3132382e302f31372d3332203d3e203538353933.roa (hash: gyaQRSP2K4Ar7mRLlvlWZj3SxsO0p/6gafUPCndYi6E=)
                          25: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (hash: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8=)
                          26: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (hash: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8=)
                          27: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (hash: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k=)
                          28: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (hash: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg=)
                          29: 34302e37332e3132382e302f31372d3332203d3e203538353933.roa (hash: CiPHFGZqvfKg4LSjdZddwLwpgrGQUYVCQQV/0MxCEaY=)
                          30: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (hash: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=)
                          31: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (hash: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 16:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:95:61:25:30:47:c8:d6:26:1a:54:45:3a:ef:5d:dc:d8:70:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
        Validity
            Not Before: Jul 21 15:28:58 2026 GMT
            Not After : Jul 22 16:52:58 2026 GMT
        Subject: CN=3C0407DAF79CA983FB8E072AC075E1AE4AA00F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:46:32:46:7f:62:23:bb:b7:8f:41:3d:bd:
                    1c:67:73:c5:90:57:60:9a:2f:49:37:cc:84:16:29:
                    bd:82:5c:a7:cd:3b:bb:97:98:5a:72:51:86:dc:bb:
                    79:e6:5f:44:46:6e:f4:df:f5:8b:5f:72:0c:5c:be:
                    f5:d3:fa:8c:ad:ae:8e:5d:9d:14:86:29:6f:03:d3:
                    ac:59:4c:6b:41:a3:7c:58:fb:64:1d:d3:36:d9:11:
                    d2:f4:e6:46:e7:cf:f8:8c:ca:69:e5:aa:83:80:b0:
                    9b:ca:4e:67:ba:50:c5:8f:b7:94:4e:0c:d1:0b:27:
                    cb:3d:0f:41:d7:f2:8a:8e:d3:be:09:50:13:a6:a3:
                    24:3a:32:02:65:37:49:8e:1e:e3:d9:65:f6:3d:8f:
                    b5:d7:c6:22:e7:13:13:ae:30:db:4f:cd:2e:7b:b3:
                    ab:bf:4a:9a:85:c3:8a:17:54:fe:e4:d9:f9:c0:06:
                    6e:ba:5d:6b:d3:fd:5b:de:79:49:cb:b9:39:ad:29:
                    53:60:17:7a:f8:44:38:57:04:39:44:04:af:8e:0a:
                    66:a0:cf:7f:0b:c7:ed:e2:78:81:91:0f:31:05:03:
                    50:6a:cf:4f:4c:cd:b7:93:23:94:68:af:dd:97:76:
                    ca:48:b4:99:e8:fc:9c:84:78:6e:56:8c:c0:de:ed:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:07:DA:F7:9C:A9:83:FB:8E:07:2A:C0:75:E1:AE:4A:A0:0F:4D
            X509v3 Authority Key Identifier:
                keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:ce:36:5d:6f:5e:19:8b:2d:00:b2:34:5b:07:b7:7f:b2:
         3f:ba:ce:4b:fa:c2:05:b5:f2:16:89:53:66:26:f6:99:96:11:
         39:2e:c5:ea:2a:9b:ea:8b:31:dc:36:3c:4d:4e:f9:5b:f2:13:
         31:2c:d5:a8:eb:78:db:b8:15:eb:b7:d8:05:ee:29:8f:15:f9:
         a4:dc:93:25:d9:f4:12:01:2e:ca:5d:b4:9f:68:5b:e8:da:26:
         de:98:15:93:b6:90:a7:38:30:a1:7d:10:56:e3:c3:d2:16:9e:
         7e:b2:2f:12:6e:8b:38:b5:d2:1e:2b:98:49:80:26:da:22:6c:
         3c:f2:e7:5e:33:e7:3a:77:ef:d2:88:15:08:be:da:63:05:33:
         93:b4:7c:64:8f:7c:40:eb:e1:b1:2c:2e:ae:72:ae:f6:b0:a4:
         62:4f:25:4b:9c:fc:b0:09:18:38:e0:f9:b2:81:8e:49:aa:9c:
         fc:43:88:b3:b8:de:9b:42:f5:01:26:fe:b1:bd:31:b5:c0:7c:
         cb:49:65:a2:46:b7:ae:40:78:65:4f:0d:b8:38:49:3b:ef:4a:
         c2:4b:d2:f0:0f:74:3d:8f:8d:82:32:b1:d8:97:3c:88:05:ad:
         aa:cf:ed:d8:74:fc:94:35:f7:60:a5:5a:66:9d:10:c0:fd:fe:
         3a:50:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:55 2026 by rpki-client