Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          A9rAzXFzRSAdB1X8N1wW1gJpptuvVDr8cfYiTqY9TEk=
Subject key identifier:   1A:7A:6F:8C:C7:B2:1C:18:18:45:0E:6C:CE:1C:3C:57:73:D9:15:B3
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       2A203EA1677EA4DB77B8CD74C2C090B1816B491D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          EE
Signing time:             Tue 14 Jul 2026 16:11:37 +0000
Manifest this update:     Tue 14 Jul 2026 16:06:37 +0000
Manifest next update:     Wed 15 Jul 2026 19:48:37 +0000
Files and hashes:         1: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
                          2: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
                          3: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
                          4: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
                          5: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
                          6: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
                          7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
                          8: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: PavlvAMnAxhI3tujkW+IL8Wzbz8ptcJabNgD9xCCs2w=)
                          9: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
                          10: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:20:3e:a1:67:7e:a4:db:77:b8:cd:74:c2:c0:90:b1:81:6b:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Jul 14 16:06:37 2026 GMT
            Not After : Jul 15 19:48:37 2026 GMT
        Subject: CN=1A7A6F8CC7B21C1818450E6CCE1C3C5773D915B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:68:51:29:d6:0d:9d:b1:c6:b8:7e:ce:d7:
                    8b:19:30:83:43:24:cd:c1:d2:e8:1a:37:9d:43:56:
                    69:e4:87:5f:ad:81:28:d4:6c:5c:ba:ec:bf:e0:37:
                    4e:d7:c8:b8:32:99:84:b7:4e:ae:f1:df:78:95:75:
                    1f:83:52:70:7f:e5:ab:cb:52:17:04:96:fb:41:4e:
                    05:e5:5e:2b:26:dc:df:cd:b1:aa:76:9e:54:df:d5:
                    9f:a0:7c:93:9f:9c:a9:e5:b2:0a:83:c0:de:e7:f5:
                    b0:42:c1:6a:15:31:64:7c:2c:6e:c8:0b:09:20:f7:
                    2f:e2:8f:2a:43:f8:3f:a9:79:2f:c6:10:4e:d6:d4:
                    0e:93:96:f1:ec:25:b8:c7:c1:4d:db:fb:eb:19:41:
                    6d:f5:ce:51:2e:2b:5f:af:2c:0d:cf:9b:d9:94:aa:
                    1b:1b:5a:2e:f9:e5:90:ac:7b:95:67:cc:ad:0e:84:
                    74:6a:9a:31:0f:90:96:62:a7:a8:2f:c4:85:81:eb:
                    c0:cb:46:29:9e:f2:3b:98:7e:1d:79:0f:85:3a:87:
                    c2:d2:e8:e1:2d:10:e7:68:8f:0c:67:90:48:dd:39:
                    c3:c1:bc:60:d7:25:d9:81:6f:10:15:4b:a7:64:77:
                    e3:6e:d1:d7:00:50:52:11:02:32:b9:ff:04:c7:5c:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:6F:8C:C7:B2:1C:18:18:45:0E:6C:CE:1C:3C:57:73:D9:15:B3
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ee:13:be:39:57:52:a0:5b:3e:b3:70:c2:2a:c0:b9:43:fb:
         39:bb:b7:c5:3d:57:dc:02:28:eb:ca:a2:30:59:4e:fa:ce:72:
         b3:9e:21:b0:9b:05:4f:f4:f7:ca:18:8e:87:9a:0b:cf:42:fa:
         ba:4c:41:1a:5f:1d:a0:3f:d9:3e:60:42:78:2c:00:d5:0c:57:
         6a:72:8c:d3:09:5d:8b:32:25:94:25:e7:52:31:a1:73:b8:3b:
         a4:f7:6c:19:6e:e2:34:0c:33:8c:dc:8c:6b:57:77:24:75:69:
         d1:58:86:cc:91:d4:d6:13:ce:7e:db:b0:4f:4d:06:e0:05:63:
         f1:44:97:5b:1f:e6:8d:7d:e4:7e:2c:1a:63:95:83:39:cf:8a:
         5f:ff:20:be:06:56:50:95:3f:40:4a:18:cb:5d:be:fb:d0:78:
         4b:e9:79:59:6b:b1:47:bf:d6:57:a0:c3:fe:3c:eb:2b:37:55:
         77:f9:1b:0e:1d:7d:00:93:21:2d:1f:ad:46:7a:66:d3:fc:2b:
         b5:4b:4c:99:cb:ba:cd:6f:b5:d2:98:e0:b1:9b:c2:9e:6a:b1:
         d3:7b:57:23:08:26:5b:5a:42:0c:5f:b4:4d:e0:e3:15:77:94:
         a0:52:7a:d4:ba:9d:f8:69:c4:d4:2d:9e:29:86:77:9e:f1:60:
         c5:70:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:58:10 2026 by rpki-client