Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
File:                     BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json)
Hash identifier:          pOwwZT58ePuPlpFWEyVfrivROCP7EA/dhWMfNt9Kpek=
Subject key identifier:   95:8C:36:BA:B7:66:AD:72:B6:6C:D0:85:0D:A0:A5:41:D0:52:A6:18
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Certificate issuer:       /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial:       2FC4FE5131782ABBC02BBFB7197FF5E547FBA459
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
Manifest number:          EB
Signing time:             Tue 14 Jul 2026 04:30:26 +0000
Manifest this update:     Tue 14 Jul 2026 04:25:26 +0000
Manifest next update:     Wed 15 Jul 2026 04:44:26 +0000
Files and hashes:         1: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=)
                          2: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=)
                          3: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=)
                          4: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=)
                          5: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: Wvy8olkyFEktbKvGwJZF4UcpU9LPHeczARNJdGzEyfc=)
                          6: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:fe:51:31:78:2a:bb:c0:2b:bf:b7:19:7f:f5:e5:47:fb:a4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
        Validity
            Not Before: Jul 14 04:25:26 2026 GMT
            Not After : Jul 15 04:44:26 2026 GMT
        Subject: CN=958C36BAB766AD72B66CD0850DA0A541D052A618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:ab:82:94:30:2c:69:42:11:bc:ac:37:76:
                    14:74:66:b2:ea:e2:73:a9:53:34:3f:46:2b:bf:aa:
                    90:02:62:a7:f5:48:e4:25:fd:e4:44:69:53:6c:8f:
                    81:ef:dc:74:a6:e1:6e:09:c1:9e:56:6a:71:e1:47:
                    e8:2e:90:66:5e:c7:f9:1b:bc:9e:ba:49:0a:b9:80:
                    69:f1:fd:59:c3:82:4f:d8:11:a3:fd:48:63:5c:0d:
                    a5:a3:88:1b:e1:65:09:96:2e:29:95:0a:3c:0d:4c:
                    27:62:ec:3c:dd:b9:75:bf:45:57:da:8f:38:da:71:
                    f6:41:75:5b:eb:08:1d:ae:11:5d:96:e7:9b:42:15:
                    82:01:03:82:57:e2:e7:17:5f:27:ef:12:d2:a5:08:
                    4d:bc:13:ed:b7:80:8c:e5:03:6b:20:19:4f:de:a1:
                    71:26:93:a2:d7:57:ad:26:03:7d:58:4c:2c:63:d1:
                    fd:47:42:b0:d5:74:22:a4:13:f1:5a:39:5f:36:e2:
                    b7:e9:7c:1a:bd:c6:c3:30:09:22:5b:92:45:a2:4b:
                    43:31:1e:7b:0c:3a:07:7a:e5:42:af:5b:9b:86:3f:
                    bc:76:ef:07:5f:f1:ac:07:63:f6:c1:15:0d:5b:b5:
                    7f:18:a3:35:21:e5:d6:8c:3f:99:be:ed:d4:ff:f2:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:36:BA:B7:66:AD:72:B6:6C:D0:85:0D:A0:A5:41:D0:52:A6:18
            X509v3 Authority Key Identifier:
                keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:c1:44:e5:33:6e:df:9f:ad:b0:45:f1:1a:31:9b:5f:99:
         2c:4b:2e:f8:03:99:a2:7a:04:8f:ed:76:70:89:7e:ca:80:7b:
         09:2c:e9:bd:13:ab:df:e2:ae:0c:4b:1f:6c:ba:fd:95:6d:19:
         d0:01:2b:a9:13:d8:ff:b4:e8:d9:08:1e:4b:21:02:f8:1a:dd:
         30:72:c6:ce:37:2e:3a:10:70:77:16:34:b8:f8:04:91:e7:c4:
         cb:a6:c1:ae:16:8c:42:b3:b2:6c:2b:3d:bf:92:eb:c6:56:7b:
         32:ef:50:42:db:70:c3:f4:79:44:c5:11:33:cd:67:75:76:9a:
         83:e6:e5:ce:71:02:89:44:39:c8:9e:8d:f1:45:91:26:e8:06:
         a4:f6:25:5c:35:a5:ff:60:1e:1c:38:9f:cd:f4:e4:df:d4:07:
         76:15:f9:60:23:21:b7:8d:c1:14:ce:2c:62:a7:3d:12:7f:3a:
         50:1f:7a:7d:b9:86:cd:ff:2d:2e:f8:1b:5b:fe:15:9b:24:a8:
         5a:3b:25:72:74:95:4b:d6:40:e4:ac:14:09:4a:73:93:c8:32:
         2d:41:f3:1e:a1:f7:63:b5:b9:e4:1a:2c:cd:59:a3:b8:a4:6f:
         7e:ec:6b:fa:54:ff:8c:96:95:7b:f8:f6:de:0e:a9:d9:85:25:
         5a:91:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:52 2026 by rpki-client