Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          JGEhxxeCG2CDLCSAVj2rakhxn3Rs9UrBBdweCmz95uQ=
Subject key identifier:   42:50:7A:A5:8A:F3:85:51:BD:66:9B:0C:16:BF:15:3B:75:6A:37:F6
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       7C7A7719CB04B88BAFCD3E4BFA612EBAF56EC2C5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          FC
Signing time:             Mon 27 Jul 2026 02:53:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:48:13 +0000
Manifest next update:     Tue 28 Jul 2026 05:28:13 +0000
Files and hashes:         1: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          2: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
                          3: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: zuGhomPEElrjGWmk6pi7asP2URDInBgEwUS4YLVJRSI=)
                          4: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          5: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          6: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          7: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          8: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          9: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          10: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          11: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          12: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7a:77:19:cb:04:b8:8b:af:cd:3e:4b:fa:61:2e:ba:f5:6e:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jul 27 02:48:13 2026 GMT
            Not After : Jul 28 05:28:13 2026 GMT
        Subject: CN=42507AA58AF38551BD669B0C16BF153B756A37F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:6f:b8:98:d5:8e:e8:66:72:ae:51:fa:57:
                    b9:bd:63:55:0b:fe:a7:46:60:1c:6f:24:7b:dc:52:
                    cb:56:45:c9:39:3e:ff:cd:00:06:2d:6d:7d:c4:a5:
                    41:eb:b8:91:7f:5d:b1:cf:dc:df:7d:d6:99:16:1a:
                    30:4c:76:e5:d3:2c:3f:95:37:af:75:95:df:04:51:
                    14:c7:22:f7:47:c7:97:17:2f:d1:20:61:cc:46:3c:
                    de:d0:c6:a1:14:bd:35:03:aa:ac:7d:da:b3:f5:19:
                    e5:ba:ba:62:ad:62:14:ab:af:4e:fb:b9:c7:1f:c5:
                    75:61:80:54:55:ef:d1:d4:b5:16:4d:d8:cd:8c:f5:
                    05:7d:e7:5d:41:11:79:cc:35:dd:10:98:14:58:40:
                    cf:23:e1:d8:f1:26:9c:25:40:b9:9b:bf:6e:ab:47:
                    12:53:86:49:31:90:b6:e9:9c:86:b6:a3:35:51:ce:
                    57:2f:7d:5e:7e:44:b2:75:0c:b1:a1:30:8b:76:4c:
                    be:51:9b:64:0b:a7:70:5d:3f:c7:1d:08:58:15:af:
                    38:bb:80:58:73:52:73:7a:96:f5:c3:6e:07:f2:30:
                    40:cc:fc:3e:e5:31:61:e3:1f:6f:f8:b4:d1:95:f0:
                    24:a8:45:48:18:7d:7b:03:9e:30:e1:92:cf:ef:41:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:7A:A5:8A:F3:85:51:BD:66:9B:0C:16:BF:15:3B:75:6A:37:F6
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:2a:90:98:82:86:4c:f2:1f:20:e9:b5:26:f1:c8:09:d5:
         fe:03:8b:51:21:6d:7e:87:a7:2a:bf:7c:cc:b9:b8:fe:6f:4a:
         70:a2:04:47:b5:79:2b:bf:62:1e:29:2d:3f:73:7f:d2:e5:86:
         2a:4e:27:d2:b3:c0:0d:a8:37:d3:d4:65:1a:19:71:80:3a:4e:
         0c:ee:fd:d3:d8:92:31:c1:f2:56:1c:fa:59:1e:f9:3a:2f:cd:
         be:b2:45:7a:74:3b:b7:cc:ff:6d:5e:f1:f0:af:19:4a:c5:7d:
         1a:78:3a:a3:ac:1f:a6:7b:b8:5f:5d:99:8d:94:fc:e4:e3:b9:
         c5:58:1a:25:23:72:0f:a2:53:7b:a0:a7:02:10:3f:e7:b3:f7:
         9b:5a:9e:47:46:bc:57:2a:40:c3:81:a7:2c:2d:6d:b6:a0:99:
         3a:40:75:10:b7:45:20:bd:ca:6e:e5:7e:18:7f:ec:b8:e8:81:
         2e:e7:db:37:5c:4f:4d:a4:24:c5:5c:2e:a6:7b:7c:99:c7:2e:
         2a:62:1d:6f:d8:73:3c:c3:2d:b1:ed:19:5b:3a:fd:83:78:4c:
         f6:18:d0:d7:4b:32:21:63:4f:24:0c:c6:62:09:18:51:96:95:
         84:6a:cc:eb:d9:f6:3e:2f:c9:bf:89:6c:cf:2c:78:91:bf:32:
         0f:af:2d:2b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfHp3GcsEuIuvzT5L+mEuuvVuwsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3
M0JGNUZCRjAeFw0yNjA3MjcwMjQ4MTNaFw0yNjA3MjgwNTI4MTNaMDMxMTAvBgNV
BAMTKDQyNTA3QUE1OEFGMzg1NTFCRDY2OUIwQzE2QkYxNTNCNzU2QTM3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMG+4mNWO6GZyrlH6V7m9Y1UL
/qdGYBxvJHvcUstWRck5Pv/NAAYtbX3EpUHruJF/XbHP3N991pkWGjBMduXTLD+V
N691ld8EURTHIvdHx5cXL9EgYcxGPN7QxqEUvTUDqqx92rP1GeW6umKtYhSrr077
uccfxXVhgFRV79HUtRZN2M2M9QV9511BEXnMNd0QmBRYQM8j4djxJpwlQLmbv26r
RxJThkkxkLbpnIa2ozVRzlcvfV5+RLJ1DLGhMIt2TL5Rm2QLp3BdP8cdCFgVrzi7
gFhzUnN6lvXDbgfyMEDM/D7lMWHjH2/4tNGV8CSoRUgYfXsDnjDhks/vQWcJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUQlB6pYrzhVG9ZpsMFr8VO3VqN/YwHwYDVR0j
BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2
MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD
RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtP4qkJiChkzy
HyDptSbxyAnV/gOLUSFtfoenKr98zLm4/m9KcKIER7V5K79iHiktP3N/0uWGKk4n
0rPADag309RlGhlxgDpODO7909iSMcHyVhz6WR75Oi/NvrJFenQ7t8z/bV7x8K8Z
SsV9Gng6o6wfpnu4X12ZjZT85OO5xVgaJSNyD6JTe6CnAhA/57P3m1qeR0a8VypA
w4GnLC1ttqCZOkB1ELdFIL3KbuV+GH/suOiBLufbN1xPTaQkxVwupnt8mccuKmId
b9hzPMMtse0ZWzr9g3hM9hjQ10syIWNPJAzGYgkYUZaVhGrM69n2Pi/Jv4lszyx4
kb8yD68tKw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:17 2026 by rpki-client