Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
File:                     39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json)
Hash identifier:          zk12wAoQbOF9x5VR7KIA4rK2zHw5ZsKJeaQN6LdvGto=
Subject key identifier:   21:E4:6E:4C:E3:C1:F2:AE:52:B9:62:D2:84:97:7B:90:1D:6D:75:29
Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
Certificate issuer:       /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Certificate serial:       17079DCE14682EFA0527E1EFF6CD72B6121CE79A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
Manifest number:          EC
Signing time:             Tue 14 Jul 2026 10:16:03 +0000
Manifest this update:     Tue 14 Jul 2026 10:11:03 +0000
Manifest next update:     Wed 15 Jul 2026 11:37:03 +0000
Files and hashes:         1: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: RJe2jDw4b+Du2bTaNC5Dy/t7tAiUQIoW4MR4iU95XmU=)
                          2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=)
                          3: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=)
                          4: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 11:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:07:9d:ce:14:68:2e:fa:05:27:e1:ef:f6:cd:72:b6:12:1c:e7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
        Validity
            Not Before: Jul 14 10:11:03 2026 GMT
            Not After : Jul 15 11:37:03 2026 GMT
        Subject: CN=21E46E4CE3C1F2AE52B962D284977B901D6D7529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:c9:46:66:d2:51:e4:7b:03:31:5d:29:cb:
                    d6:91:17:a3:fa:2f:e0:5a:df:79:79:17:ff:3c:d1:
                    8e:74:77:a8:6b:9a:96:0d:81:87:13:a4:2e:fa:0f:
                    12:44:5d:61:8f:5f:1d:81:ba:ad:f5:e4:cf:b1:9f:
                    d5:b5:a6:19:e9:af:4e:15:cb:fb:85:35:be:5f:aa:
                    fa:25:15:40:d4:42:95:fe:dc:4e:1d:52:5c:b4:3b:
                    ff:b8:db:91:15:a9:55:d4:5d:89:bd:64:b1:d3:51:
                    49:26:40:33:1a:bc:98:25:f1:fb:a9:fc:66:e1:ea:
                    72:95:e4:70:22:d2:52:91:e3:f1:fb:71:17:85:ea:
                    ff:2b:98:5f:17:55:da:70:50:d2:fd:ed:c3:20:20:
                    2e:f7:a7:22:df:74:bb:25:eb:fd:00:15:0f:e7:c6:
                    e5:8e:34:ab:bb:5b:29:c6:51:07:a6:61:b1:bf:74:
                    65:25:e8:5c:87:32:b5:45:64:a4:cf:7f:69:18:0b:
                    c5:1b:9f:de:45:cc:83:75:d5:bb:32:46:79:80:b6:
                    0e:f7:57:4b:f9:e8:7e:81:dd:7d:12:a0:91:f5:2f:
                    de:d1:54:54:f4:2e:b9:71:61:02:86:49:6f:5b:14:
                    15:eb:4d:72:ad:9a:87:2e:3b:46:0f:9d:b1:27:7e:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:6E:4C:E3:C1:F2:AE:52:B9:62:D2:84:97:7B:90:1D:6D:75:29
            X509v3 Authority Key Identifier:
                keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:78:50:a6:42:8f:9d:f9:94:5f:f5:f7:91:53:45:70:db:
         c1:0f:99:52:4e:9b:7e:16:0c:bb:2b:13:f5:29:18:bd:e7:c1:
         48:63:78:67:5c:b3:94:ad:81:a7:a0:ae:61:50:73:c8:78:6e:
         6e:7a:8f:ef:7d:33:56:4f:5f:0d:bd:78:37:86:b0:f6:95:ec:
         3d:a6:6b:79:90:90:2f:5b:cd:0f:8e:22:3a:f5:d2:0d:27:c8:
         cc:dd:72:42:3f:14:6d:db:a3:a0:6b:ae:e4:fc:e3:21:9c:45:
         ad:99:27:42:5a:55:2b:74:18:a6:8d:11:fa:16:49:88:aa:0b:
         ac:0c:87:41:7a:5d:42:e8:d4:42:d1:d9:d9:6c:62:6d:e4:bb:
         15:3e:2b:6f:50:1a:a5:a9:4a:cc:04:ec:6a:77:12:b7:a3:a2:
         cb:80:30:10:f6:f1:7d:b3:0c:f1:b3:ce:3e:80:f8:09:91:f4:
         58:fc:f7:57:d5:7b:57:32:e0:a6:90:5a:fa:e7:4e:f5:18:ec:
         c7:6b:8a:22:ed:1b:0c:46:01:02:cb:07:0c:5f:f0:0b:ff:00:
         6d:27:a1:b7:2b:2d:af:53:6a:8d:ee:12:cb:d6:ce:4f:14:59:
         ba:3a:c6:9f:4d:e1:d7:75:eb:6f:4b:e3:ed:49:ec:b6:8f:02:
         37:8d:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:03:59 2026 by rpki-client