Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
File:                     7BE06B4744FCF211D039415BB8B17941EC767358.mft (raw, json)
Hash identifier:          kKdSD0tHfFeg75DWlZsAYsH71vLxweTZJ1/MBzytDuA=
Subject key identifier:   97:42:D8:30:B6:4F:A6:D4:8D:0C:A0:C7:D6:92:86:99:35:0B:8B:C4
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Certificate issuer:       /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial:       2FB2AFC3A1F2585E469623E1C78A7002F3AB450E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
Manifest number:          0120
Signing time:             Sat 22 Aug 2026 06:26:43 +0000
Manifest this update:     Sat 22 Aug 2026 06:21:43 +0000
Manifest next update:     Sun 23 Aug 2026 08:41:43 +0000
Files and hashes:         1: 34352e3132372e3231362e302f32322d3234203d3e203331393732.roa (hash: P9UKOQsuxFs3xLZFpS5NqIKWNqCbgxr7EOJE3zoL3Cs=)
                          2: 3130332e35362e382e302f32322d3234203d3e20313332333639.roa (hash: 1UbFmkBnIEslSbaPwrvIbgEDhVzttSrJVZztHNfsw9s=)
                          3: 3231302e31362e3130342e302f32322d3234203d3e20313332333639.roa (hash: rNo0c/4cUFdHH7fBQOgxxaqnu/zsGxka8B6PzfO9DZk=)
                          4: 34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa (hash: Pg8t0dpy+alNQ7GNJZSlH3B+oaIcPpb23mHndUI5HFM=)
                          5: 34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa (hash: itMokTGxwSWWJTnoUOrsbnDHxxrgvRgcTta07z0tGug=)
                          6: 7BE06B4744FCF211D039415BB8B17941EC767358.crl (hash: IYeL2UBtnRmJWnyHOUZIPYU1TVWlagSWNuz7X9vMy/M=)
                          7: 3130332e3230372e34382e302f32322d3234203d3e20313332333639.roa (hash: yMIYMF+CsHtOYjaSsKKLUtyj/5okkx3bcHmXehZrohk=)
                          8: 3231302e31362e3130342e302f32322d3234203d3e203331393732.roa (hash: n36YMn4WDTafoLTVEBPiggAd2KgjoY7IjA/tNLI51qk=)
                          9: 3130332e3230372e34382e302f32322d3234203d3e203331393732.roa (hash: RAWAjTIR71oOj5iAC3ZDU0cvytEncyEsxBAXvUDb8Sg=)
                          10: 3130332e3139362e3230342e302f32322d3234203d3e203331393732.roa (hash: 1SYz2xalBlvikn5RSADcXqA29mpZMpd81/52YZpjWmg=)
                          11: 3130332e35362e382e302f32322d3234203d3e203331393732.roa (hash: FHTPFoH2p1WQKqeLUlFAhY5qGC41zjRS2iciHjdAGmM=)
                          12: 3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa (hash: MGSi22TL/Oeas781w/pWLL2Lhy55kBcyFcyS9bZmKrU=)
                          13: 34352e3131352e3232382e302f32322d3234203d3e203331393732.roa (hash: AaO+tyC9M3MuUqgo9VYx7I1zEmKXUItDpbRLEplpDsM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 08:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b2:af:c3:a1:f2:58:5e:46:96:23:e1:c7:8a:70:02:f3:ab:45:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
        Validity
            Not Before: Aug 22 06:21:43 2026 GMT
            Not After : Aug 23 08:41:43 2026 GMT
        Subject: CN=9742D830B64FA6D48D0CA0C7D6928699350B8BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:23:e7:67:69:de:0e:d1:28:a3:4e:f6:66:
                    e5:6f:99:22:08:f2:ea:71:6b:89:c1:63:9a:6a:ac:
                    f3:8c:bb:5a:a3:4e:e3:76:80:b0:77:fb:3c:76:79:
                    63:08:0b:80:00:71:3a:8a:de:b8:a9:22:7a:30:78:
                    ae:af:90:96:16:58:13:88:5d:0f:c4:b4:c2:e6:13:
                    98:33:49:5b:06:b7:c0:f1:8b:cc:ed:8e:89:b0:5e:
                    c7:22:c8:e3:ae:ca:92:de:de:b3:29:e0:b0:29:cf:
                    21:ec:59:50:0d:67:af:bf:03:df:b3:25:8e:32:0b:
                    43:1e:c7:d9:f9:d3:ff:85:1d:3c:f7:4c:cf:c8:e8:
                    7b:bc:de:5e:be:f2:ce:23:8c:49:09:a0:e7:ed:5f:
                    ab:c4:f1:3c:41:94:1c:c0:c3:59:22:27:f0:4b:fc:
                    64:76:a8:dd:9f:b0:df:97:04:c9:ca:9e:13:ca:9b:
                    eb:2e:2b:14:20:68:2d:96:52:1d:56:78:06:b2:53:
                    45:6d:21:2c:c6:83:93:7d:a9:8e:3f:83:a2:f8:fa:
                    3d:ce:dd:e1:dd:5d:e5:b0:ec:2e:d0:7c:8d:9d:be:
                    f7:35:10:2e:dd:f0:2e:e3:98:a9:b9:e2:e5:63:31:
                    52:a9:89:30:b1:79:95:e0:86:88:1f:22:e2:a6:1a:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:42:D8:30:B6:4F:A6:D4:8D:0C:A0:C7:D6:92:86:99:35:0B:8B:C4
            X509v3 Authority Key Identifier:
                keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:fa:9f:2c:88:50:f4:27:b9:dc:57:b8:c6:bb:2a:2f:c4:1e:
         b4:c4:3c:dd:00:ab:43:85:6e:31:e3:43:3b:77:06:ef:6a:c1:
         32:27:a3:8c:77:5a:42:3a:73:aa:a5:d4:a1:22:a8:b4:85:9d:
         09:0c:b5:ef:a4:9a:54:39:30:b1:b9:15:b5:7b:45:de:1b:b9:
         d6:32:9b:4b:af:0d:70:5e:41:5f:59:70:86:05:ed:7c:fb:56:
         28:5d:53:74:04:15:29:3a:df:e5:7a:27:69:fc:40:5c:76:49:
         ac:ad:f3:0e:93:9a:80:a5:53:e8:20:31:0a:89:41:9c:e2:27:
         91:32:00:04:0e:74:b4:e4:80:39:ec:31:11:cf:48:e1:fa:75:
         b0:d6:bb:a7:a3:b2:21:ae:48:51:27:d0:93:bf:b8:b8:6e:bd:
         60:cb:33:03:b3:f3:82:91:0c:ae:d9:fe:40:7f:7d:19:33:30:
         3a:80:7f:a5:42:e7:83:8d:42:13:00:1b:48:9c:29:3e:bc:21:
         94:84:6c:d8:c9:76:2a:0c:c9:de:8e:73:8d:66:23:7a:d6:d5:
         f9:a8:58:41:70:31:9d:3d:fb:ff:52:1b:be:fa:3f:5e:21:9e:
         c0:e5:ca:26:da:ac:b2:fb:fc:51:66:e6:55:4d:f9:7a:ac:82:
         d4:6e:46:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:12:11 2026 by rpki-client