Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
File:                     E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json)
Hash identifier:          yPS6lSsyswUJKjzTB/a49s1dVaVg3BulRaeyPCapoKk=
Subject key identifier:   A2:D2:A0:B4:AF:AF:35:F5:27:BC:B9:B6:CE:56:B6:76:0A:76:80:91
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       126C5DEE0EBFC2F7A17F3D25896BF8552CD4808E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
Manifest number:          FC
Signing time:             Tue 14 Jul 2026 03:50:20 +0000
Manifest this update:     Tue 14 Jul 2026 03:45:20 +0000
Manifest next update:     Wed 15 Jul 2026 06:58:20 +0000
Files and hashes:         1: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (hash: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=)
                          2: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=)
                          3: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=)
                          4: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (hash: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=)
                          5: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: Rcg3FqR0ECSZmxYryDb502CHmwsFBC09xeu+s80cdxs=)
                          6: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=)
                          7: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (hash: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=)
                          8: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (hash: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=)
                          9: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (hash: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=)
                          10: 3230322e3136352e3230382e302f32312d3231203d3e20313332323033.roa (hash: dEG+kQvtarrj1C4NWnBPL9AHHKm7rT38VFsC+e+j+CI=)
                          11: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=)
                          12: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 06:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6c:5d:ee:0e:bf:c2:f7:a1:7f:3d:25:89:6b:f8:55:2c:d4:80:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Jul 14 03:45:20 2026 GMT
            Not After : Jul 15 06:58:20 2026 GMT
        Subject: CN=A2D2A0B4AFAF35F527BCB9B6CE56B6760A768091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:17:6a:6b:aa:f2:7e:04:20:59:6a:20:dd:
                    93:ba:12:1f:88:e4:b1:94:49:67:51:2b:43:80:0b:
                    ba:9d:7d:d9:be:e7:2c:b1:f3:e3:37:d2:56:9d:40:
                    86:a2:09:3f:cb:23:54:f5:f1:41:cc:9d:fb:ab:ea:
                    d7:1d:a7:42:17:6a:16:db:a7:fe:28:df:56:3e:f5:
                    fa:9c:6c:21:cc:0d:8d:d2:97:3e:e9:4f:02:de:9c:
                    ff:4b:dc:01:3c:d1:12:c6:44:14:6c:c3:ba:7f:52:
                    2d:01:4f:22:52:92:10:20:fe:56:a1:4b:d1:5b:d7:
                    9d:13:06:90:3f:e9:1a:3a:5e:12:92:c7:f2:05:63:
                    11:07:59:04:82:60:06:bc:ce:3b:17:06:ce:44:0f:
                    d4:3b:89:17:72:ed:3e:f2:8a:de:1c:28:56:80:82:
                    37:98:97:10:55:24:f2:c0:f8:fb:24:70:56:8e:7c:
                    9b:53:2b:99:59:35:07:01:ff:5a:8c:8d:bd:0a:11:
                    9a:61:b2:7b:47:42:ce:9b:bb:ad:b3:d6:a8:8d:9d:
                    37:07:7e:10:fc:5f:03:99:a6:21:90:2a:49:0e:8b:
                    d7:e2:56:7f:69:f5:fc:59:47:d8:8c:fe:7b:87:a7:
                    5e:36:8c:40:d9:79:f8:c2:72:bb:62:69:2d:b6:08:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:A0:B4:AF:AF:35:F5:27:BC:B9:B6:CE:56:B6:76:0A:76:80:91
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:e9:41:bb:41:0e:ef:57:79:53:a1:45:06:22:fa:fa:25:36:
         8c:67:e1:80:2e:38:00:45:82:05:50:21:65:7b:eb:0f:c1:0f:
         5c:3f:97:34:29:b1:9b:44:d1:1c:2c:0a:35:12:1a:94:39:ef:
         c7:cf:86:02:85:9f:d4:07:9d:74:72:9e:b4:80:cf:21:c1:13:
         c8:ca:aa:61:67:ca:f1:32:95:1e:5a:5f:15:3a:10:4c:38:61:
         58:c9:18:38:75:d2:ac:bf:f9:84:2b:ba:03:98:1c:69:6c:29:
         a9:ad:1f:98:15:90:ac:30:4f:dd:1d:01:90:81:3b:7d:6d:9a:
         e9:dd:13:75:7d:7e:b1:e6:77:97:d9:f5:ff:f9:7e:9f:af:9b:
         64:cb:62:f2:c8:5c:b7:ed:70:71:d8:7f:bf:66:ad:cb:eb:b6:
         d4:78:df:c3:46:e5:6c:33:27:82:f8:fa:51:31:e0:51:06:ce:
         f6:b9:5e:43:da:99:54:d7:c7:e8:ed:7b:64:44:ed:71:f2:d0:
         97:b2:05:94:70:e4:1c:52:ff:c9:44:00:9c:41:00:19:fd:83:
         77:a8:f2:e1:7f:00:f9:f7:27:23:cc:7c:9b:4a:a5:94:67:29:
         f0:99:99:9e:07:22:11:c5:22:96:20:39:e3:42:c9:ce:67:27:
         9e:d0:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:17:23 2026 by rpki-client