Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
File:                     18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json)
Hash identifier:          o2l84A4m8yQewctXE4FaSJiilexVkseO4Rmp7wEyhzc=
Subject key identifier:   F1:0C:FD:74:59:AC:A3:BC:C8:C2:77:10:94:1B:79:78:09:C7:22:21
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       79864E1959B5D9177DE1881D403C399F0C87FA3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
Manifest number:          0132
Signing time:             Tue 04 Aug 2026 00:48:44 +0000
Manifest this update:     Tue 04 Aug 2026 00:43:44 +0000
Manifest next update:     Wed 05 Aug 2026 03:15:44 +0000
Files and hashes:         1: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=)
                          2: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=)
                          3: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=)
                          4: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=)
                          5: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=)
                          6: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=)
                          7: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=)
                          8: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=)
                          9: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=)
                          10: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=)
                          11: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: KIZKSyCimC7f8ZxBhphbKNXbgOuQD74Yt+tf4rit9G0=)
                          12: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=)
                          13: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=)
                          14: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=)
                          15: 3131322e37332e302e302f31362d3234203d3e20383132.roa (hash: tYscABtRwtPv1T75IvZcAbgSjPV2ioiPR2oC8gBYJxU=)
                          16: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=)
                          17: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=)
                          18: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=)
                          19: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=)
                          20: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=)
                          21: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:86:4e:19:59:b5:d9:17:7d:e1:88:1d:40:3c:39:9f:0c:87:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Aug  4 00:43:44 2026 GMT
            Not After : Aug  5 03:15:44 2026 GMT
        Subject: CN=F10CFD7459ACA3BCC8C27710941B797809C72221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:d4:89:d6:cc:32:ef:bf:4f:f1:89:94:ad:
                    56:e3:d8:e5:54:31:d4:b3:61:da:84:74:79:fd:d1:
                    7f:02:8c:d8:07:bc:c9:be:2d:7a:36:08:2b:cc:25:
                    f8:90:c3:95:d1:93:92:26:7f:5d:f0:b4:18:e9:90:
                    0b:66:8e:91:93:c2:7d:fb:26:e0:78:93:a5:8d:4d:
                    32:f4:b7:7f:0a:c3:a4:c6:ae:42:d0:b3:51:21:f5:
                    94:5d:3d:a3:4b:93:ea:fa:e4:16:75:14:46:12:2b:
                    e8:d4:86:82:57:7c:49:43:3f:6f:a6:99:a9:4f:e3:
                    23:47:d8:50:3f:df:fb:08:f4:48:2e:a8:3a:00:be:
                    d2:8d:0e:92:1b:25:65:c0:09:91:62:c3:9b:e7:18:
                    46:e0:c7:a3:73:35:fc:ce:7b:99:c7:93:a8:30:d9:
                    3a:f1:73:9d:95:5c:f7:7b:f9:e2:f5:6d:9d:ed:51:
                    f0:95:a5:00:94:9c:74:dc:32:e0:d1:09:f0:0a:d5:
                    e1:b8:73:47:d8:a8:b7:99:d6:10:e4:56:bb:be:16:
                    c1:70:41:80:6e:c7:32:3c:8c:48:5a:e7:3f:fa:97:
                    c2:15:9d:e5:29:f6:f2:a7:62:df:6b:5d:b0:6d:66:
                    4b:e5:29:08:6e:81:9d:c7:ed:55:74:01:5d:59:a1:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:FD:74:59:AC:A3:BC:C8:C2:77:10:94:1B:79:78:09:C7:22:21
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bb:39:30:8b:ee:7e:30:90:78:a5:d6:4a:84:36:61:49:cb:
         30:06:86:dc:7f:cd:7b:df:8b:b5:c1:e3:87:19:ca:f2:84:2f:
         5b:b8:39:d3:72:bf:cf:d3:07:de:72:11:5f:5b:a5:40:12:20:
         7f:9e:c6:cc:42:6f:6e:7c:cb:d7:d8:4f:e2:c2:49:5d:61:98:
         47:6a:61:ba:5a:f4:02:7d:35:ff:8d:a9:30:22:8f:88:d5:76:
         84:29:bd:85:37:0c:7c:08:6a:9a:86:94:ff:6a:e5:f9:c6:c2:
         bd:d9:c1:a1:03:7b:a6:a1:83:bd:aa:cd:30:4c:b6:23:17:74:
         16:d1:cc:b3:0e:75:0c:95:25:94:fc:60:8c:58:a6:4e:e1:54:
         8c:9e:55:b1:dd:48:29:f4:da:93:aa:47:ff:ba:b8:90:b9:79:
         8a:7b:d1:a4:92:6a:e8:d8:f5:ef:52:50:72:fe:e8:74:0a:c7:
         97:9c:a6:95:d4:5c:24:aa:cd:70:44:5f:fc:5c:9b:42:e5:34:
         45:cc:0f:d0:f8:bc:2f:7c:5c:dd:ea:c5:cc:ae:00:e7:7a:f4:
         73:a2:06:4e:99:a7:b6:cc:01:cd:cc:94:81:4e:52:ad:e3:3e:
         3b:8e:3b:b6:bc:53:ad:88:af:b2:2d:b8:4e:b6:de:fb:a3:7e:
         1e:63:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:28 2026 by rpki-client