Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          Ozzf20+arc6sAL5JbcKWdwo7b0Q6PZ5PDnqnJF2we8I=
Subject key identifier:   68:8F:60:63:A9:D3:9D:48:E4:EB:7B:7D:30:83:C2:D0:BE:D7:EE:92
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       1FE01766737596AE7BD5977C85F978F268EDBD6C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          EB
Signing time:             Tue 14 Jul 2026 10:51:07 +0000
Manifest this update:     Tue 14 Jul 2026 10:46:07 +0000
Manifest next update:     Wed 15 Jul 2026 13:26:07 +0000
Files and hashes:         1: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          2: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          3: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: gULdpsTZOwOD5X/O70Q2esJT9LGXV/TIACMfbCUFstI=)
                          4: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
                          5: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          6: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          7: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          8: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          9: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          10: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
                          11: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          12: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          13: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
                          14: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          15: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 13:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e0:17:66:73:75:96:ae:7b:d5:97:7c:85:f9:78:f2:68:ed:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Jul 14 10:46:07 2026 GMT
            Not After : Jul 15 13:26:07 2026 GMT
        Subject: CN=688F6063A9D39D48E4EB7B7D3083C2D0BED7EE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:5b:23:ab:86:e9:2e:a4:54:91:28:e9:60:
                    8c:3f:14:01:b7:f2:e2:0b:49:2c:7b:fa:4f:c6:4c:
                    90:a1:a1:8e:ee:2d:d5:aa:74:7f:77:18:17:b0:d7:
                    30:17:04:50:0a:71:60:e4:e8:0c:c0:23:81:c7:49:
                    ac:47:20:db:75:3b:16:75:a1:1a:77:13:f6:e2:f8:
                    78:c1:6d:dc:e6:0c:35:8a:f4:1b:df:fe:ce:0b:7d:
                    4e:6e:10:b2:d0:c6:77:2a:0c:f5:c7:76:af:b3:14:
                    fa:ab:a1:32:d0:4c:40:1e:9b:01:0e:d8:8a:7e:b4:
                    2b:73:a4:4f:76:61:1e:ab:7a:c3:2b:7b:26:78:07:
                    d8:5d:52:6d:bf:9d:f3:a7:72:ac:7d:48:2f:dc:10:
                    d9:be:53:92:c4:a8:9e:db:0b:e2:b2:d3:5a:8d:d8:
                    b4:4e:41:c3:1f:72:84:e1:4f:70:b9:dd:64:d2:2a:
                    3b:76:db:a2:a5:8e:ae:ce:4c:53:34:de:dc:dc:86:
                    b3:e9:dc:18:b1:c8:08:d6:d6:1e:dc:90:7b:cd:44:
                    f2:96:0a:9d:cd:c9:01:bc:d6:44:19:f1:dc:47:4f:
                    79:b9:98:20:ec:34:22:65:0e:37:d3:23:2f:46:e8:
                    dc:d6:11:88:b4:46:da:5e:98:95:90:cb:c3:4e:c5:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8F:60:63:A9:D3:9D:48:E4:EB:7B:7D:30:83:C2:D0:BE:D7:EE:92
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:01:0c:b0:9d:60:4b:8c:29:47:8d:19:13:ab:c0:44:ba:
         52:ff:cc:b5:e0:25:4e:47:2d:92:5a:e4:ac:5c:84:73:0c:c3:
         fd:fa:1c:f8:52:16:82:37:ea:1f:fd:03:e0:b5:d9:e7:3a:93:
         90:c7:bc:ae:6b:ec:c6:b2:86:28:c1:51:bb:ff:54:6b:de:5a:
         d0:51:ef:74:88:8a:64:78:48:76:c7:13:07:a0:50:d0:de:63:
         af:e7:c1:2e:78:5d:91:14:3d:8a:cd:4b:73:ef:89:f9:a8:6d:
         a3:fe:ec:06:6f:6e:01:06:22:68:b9:73:0c:24:cb:7e:7f:d7:
         28:5e:8b:ce:59:74:52:05:67:cd:1d:bc:79:ad:93:11:02:d9:
         9c:57:88:48:40:39:91:fa:68:be:6a:3c:22:5f:c3:18:60:18:
         40:71:73:71:8f:60:36:52:f4:5f:cc:36:69:9b:a4:ad:6a:07:
         f8:ee:4e:a2:ff:31:15:9e:f0:6d:83:e9:10:e5:54:6e:32:ab:
         c5:8b:46:a6:b5:39:0c:ec:a6:79:86:2e:da:77:10:ec:31:2c:
         0a:1d:6b:fc:6e:42:2d:a1:99:f9:55:be:83:5d:86:82:eb:92:
         51:d7:45:ae:78:9c:58:7a:ec:8d:4b:bd:4b:8a:55:aa:1e:c0:
         d6:7c:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:32 2026 by rpki-client