Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File:                     B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier:          sa9LcyjlIHERXk6oIu3YpLkLqq2waNZAXPZ0mYC8cqU=
Subject key identifier:   63:41:F7:A5:08:17:FF:F1:7E:AB:3A:18:F8:2B:A8:FF:50:54:50:B1
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer:       /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial:       439240B91F2BC90537C4751F67FE58DE9EC0D400
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number:          EF
Signing time:             Tue 14 Jul 2026 08:45:52 +0000
Manifest this update:     Tue 14 Jul 2026 08:40:52 +0000
Manifest next update:     Wed 15 Jul 2026 09:49:52 +0000
Files and hashes:         1: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
                          2: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: v+DrhQkMQ7KXyANahbCtp+YzjIp+Q44sFuP8sJoBf0M=)
                          3: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:40:b9:1f:2b:c9:05:37:c4:75:1f:67:fe:58:de:9e:c0:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
        Validity
            Not Before: Jul 14 08:40:52 2026 GMT
            Not After : Jul 15 09:49:52 2026 GMT
        Subject: CN=6341F7A50817FFF17EAB3A18F82BA8FF505450B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:db:bd:be:8c:30:a3:5e:9a:b0:40:7e:2c:
                    62:3e:3d:b8:af:21:0f:c7:6b:e2:e7:7c:a5:f3:9d:
                    dc:9e:2c:aa:88:45:da:a9:5f:d6:95:7f:08:26:64:
                    4c:31:6f:81:b5:66:d5:73:c7:6f:c5:62:80:ee:92:
                    23:fd:12:a1:eb:3d:16:71:75:1d:94:bd:fb:47:f3:
                    8c:8b:6b:f0:96:72:50:4d:fc:52:10:b5:31:a8:ce:
                    56:da:94:47:9d:07:d5:81:36:a7:55:6e:1c:19:7c:
                    1f:89:af:04:64:3f:0e:fa:58:33:d4:d6:f3:cc:2b:
                    8d:9c:e8:5c:4a:aa:f2:7f:b3:3d:56:5f:99:81:bf:
                    ab:f0:70:20:24:7e:cd:2d:e2:6b:c3:d1:e8:28:f6:
                    ff:11:64:1f:1d:2c:d5:25:b8:d3:81:d2:e7:8b:6f:
                    16:aa:4f:b7:91:77:5d:62:f9:d2:22:60:cb:3b:c7:
                    f9:4f:57:73:b7:07:f8:38:34:76:c0:a4:d0:b9:e4:
                    37:82:31:52:ef:da:f6:d5:2b:cd:4c:ba:d7:b2:a9:
                    52:55:46:bb:5b:99:66:3a:02:e4:3f:80:c4:c1:d4:
                    fe:6b:9b:97:06:ec:37:f2:e2:06:13:b6:bd:03:b0:
                    d1:9e:50:65:e9:22:d3:d6:dc:54:e9:4f:ee:9f:c9:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:F7:A5:08:17:FF:F1:7E:AB:3A:18:F8:2B:A8:FF:50:54:50:B1
            X509v3 Authority Key Identifier:
                keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:aa:d7:d8:f4:38:53:23:0d:f7:4f:78:f4:ad:26:d0:b9:
         ce:4d:73:9e:d9:09:ea:31:76:3a:73:02:98:28:45:b6:8b:90:
         de:7a:9d:3e:66:d6:ce:f1:18:53:72:15:5f:12:46:c0:04:86:
         60:e8:97:17:52:ff:bb:e7:a6:7f:50:49:05:b2:77:23:d4:57:
         40:cd:d7:dc:23:81:e0:e8:e0:8f:72:9e:c9:0c:4b:55:31:64:
         ee:14:fc:a3:39:94:43:1b:8f:4b:05:d7:40:f0:ae:f0:a8:dd:
         88:ed:01:86:5e:c4:64:98:33:73:7b:b9:db:8e:2e:2a:c2:c0:
         c5:b9:7c:92:09:e2:66:c1:e8:b6:28:b1:b9:a0:71:05:93:be:
         ec:8f:1d:91:9c:9b:c3:04:13:d0:78:b7:da:41:f8:c5:09:f6:
         bc:06:aa:ca:cb:df:d7:e7:66:d8:e9:35:67:d4:fc:dc:75:48:
         d1:12:36:13:23:48:2a:3c:b8:69:75:35:89:e0:1a:50:06:e1:
         4a:c1:62:f8:9b:6b:93:09:79:7d:2e:8c:6c:b0:35:a0:af:c1:
         b9:a3:de:f3:6b:8b:23:3e:e1:34:d0:49:be:54:fb:0c:5a:c6:
         d4:c3:6f:4b:50:11:c5:9e:40:9d:2c:0b:ac:4e:d4:71:4a:58:
         cd:06:2e:4d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQ5JAuR8ryQU3xHUfZ/5Y3p7A1AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1
NjhCMDBEODAeFw0yNjA3MTQwODQwNTJaFw0yNjA3MTUwOTQ5NTJaMDMxMTAvBgNV
BAMTKDYzNDFGN0E1MDgxN0ZGRjE3RUFCM0ExOEY4MkJBOEZGNTA1NDUwQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCittu9vowwo16asEB+LGI+Pbiv
IQ/Ha+LnfKXzndyeLKqIRdqpX9aVfwgmZEwxb4G1ZtVzx2/FYoDukiP9EqHrPRZx
dR2UvftH84yLa/CWclBN/FIQtTGozlbalEedB9WBNqdVbhwZfB+JrwRkPw76WDPU
1vPMK42c6FxKqvJ/sz1WX5mBv6vwcCAkfs0t4mvD0ego9v8RZB8dLNUluNOB0ueL
bxaqT7eRd11i+dIiYMs7x/lPV3O3B/g4NHbApNC55DeCMVLv2vbVK81MuteyqVJV
RrtbmWY6AuQ/gMTB1P5rm5cG7Dfy4gYTtr0DsNGeUGXpItPW3FTpT+6fyR8HAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUY0H3pQgX//F+qzoY+Cuo/1BUULEwHwYDVR0j
BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND
MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw
QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGuq19j0OFMj
DfdPePStJtC5zk1zntkJ6jF2OnMCmChFtouQ3nqdPmbWzvEYU3IVXxJGwASGYOiX
F1L/u+emf1BJBbJ3I9RXQM3X3COB4Ojgj3KeyQxLVTFk7hT8ozmUQxuPSwXXQPCu
8KjdiO0Bhl7EZJgzc3u5244uKsLAxbl8kgniZsHotiixuaBxBZO+7I8dkZybwwQT
0Hi32kH4xQn2vAaqysvf1+dm2Ok1Z9T83HVI0RI2EyNIKjy4aXU1ieAaUAbhSsFi
+Jtrkwl5fS6MbLA1oK/BuaPe82uLIz7hNNBJvlT7DFrG1MNvS1ARxZ5AnSwLrE7U
cUpYzQYuTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:04 2026 by rpki-client