Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
File:                     7BE06B4744FCF211D039415BB8B17941EC767358.mft (raw, json)
Hash identifier:          wTrSVqYqrOgEYzTMKs50kyBaDMnbQ6s86i5RMx4Ht3Q=
Subject key identifier:   87:60:E5:0A:EB:30:6E:B2:A9:69:E8:AA:4E:F4:DF:0B:F3:E2:DF:39
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Certificate issuer:       /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial:       17E3FF2F74726A782EBC6F29E33190856806DD44
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
Manifest number:          A4
Signing time:             Thu 21 May 2026 06:16:09 +0000
Manifest this update:     Thu 21 May 2026 06:11:09 +0000
Manifest next update:     Fri 22 May 2026 08:39:09 +0000
Files and hashes:         1: 3130332e35362e382e302f32322d3234203d3e203331393732.roa (hash: FHTPFoH2p1WQKqeLUlFAhY5qGC41zjRS2iciHjdAGmM=)
                          2: 3130332e3230372e34382e302f32322d3234203d3e20313332333639.roa (hash: yMIYMF+CsHtOYjaSsKKLUtyj/5okkx3bcHmXehZrohk=)
                          3: 3231302e31362e3130342e302f32322d3234203d3e20313332333639.roa (hash: rNo0c/4cUFdHH7fBQOgxxaqnu/zsGxka8B6PzfO9DZk=)
                          4: 3231302e31362e3130342e302f32322d3234203d3e203331393732.roa (hash: n36YMn4WDTafoLTVEBPiggAd2KgjoY7IjA/tNLI51qk=)
                          5: 34352e3132372e3231362e302f32322d3234203d3e20313332333639.roa (hash: itMokTGxwSWWJTnoUOrsbnDHxxrgvRgcTta07z0tGug=)
                          6: 34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa (hash: Pg8t0dpy+alNQ7GNJZSlH3B+oaIcPpb23mHndUI5HFM=)
                          7: 3130332e3139362e3230342e302f32322d3234203d3e20313332333639.roa (hash: MGSi22TL/Oeas781w/pWLL2Lhy55kBcyFcyS9bZmKrU=)
                          8: 3130332e35362e382e302f32322d3234203d3e20313332333639.roa (hash: 1UbFmkBnIEslSbaPwrvIbgEDhVzttSrJVZztHNfsw9s=)
                          9: 34352e3132372e3231362e302f32322d3234203d3e203331393732.roa (hash: P9UKOQsuxFs3xLZFpS5NqIKWNqCbgxr7EOJE3zoL3Cs=)
                          10: 7BE06B4744FCF211D039415BB8B17941EC767358.crl (hash: LA8TYkjEM+3oKsS7py0mTqTVX/oY5RpzgHcpknl+iy0=)
                          11: 3130332e3230372e34382e302f32322d3234203d3e203331393732.roa (hash: RAWAjTIR71oOj5iAC3ZDU0cvytEncyEsxBAXvUDb8Sg=)
                          12: 3130332e3139362e3230342e302f32322d3234203d3e203331393732.roa (hash: 1SYz2xalBlvikn5RSADcXqA29mpZMpd81/52YZpjWmg=)
                          13: 34352e3131352e3232382e302f32322d3234203d3e203331393732.roa (hash: AaO+tyC9M3MuUqgo9VYx7I1zEmKXUItDpbRLEplpDsM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 07:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e3:ff:2f:74:72:6a:78:2e:bc:6f:29:e3:31:90:85:68:06:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
        Validity
            Not Before: May 21 06:11:09 2026 GMT
            Not After : May 22 08:39:09 2026 GMT
        Subject: CN=8760E50AEB306EB2A969E8AA4EF4DF0BF3E2DF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:5d:79:41:7e:e7:e8:ec:7d:74:85:7e:eb:
                    51:bc:54:87:70:45:b3:9b:1d:88:ce:73:1a:4a:8d:
                    8e:a7:58:ec:f2:b0:b5:06:61:6e:cd:ef:77:2b:48:
                    70:99:03:10:9a:4a:b7:bd:24:62:a3:8c:b7:21:28:
                    01:e6:4e:15:e0:c0:38:27:5a:50:f4:27:db:7b:32:
                    37:86:62:52:2d:0b:7f:de:ae:9e:7e:55:e3:a2:fd:
                    79:d3:4e:1e:78:81:a0:30:e5:e4:d9:ec:af:3f:16:
                    e0:36:20:10:82:30:92:28:31:bc:22:12:20:f7:d2:
                    17:15:ad:c7:64:63:63:b7:a2:ca:80:96:c1:14:eb:
                    bc:74:11:e7:2b:fa:4b:d3:f8:80:36:fc:23:d6:4a:
                    bd:b6:79:82:d8:02:85:6c:68:50:c5:0e:2a:66:f2:
                    c5:92:38:4a:f2:0c:a6:61:17:18:a0:fd:e4:61:c2:
                    67:f9:6b:fc:3b:56:e0:fe:6b:6c:6a:f8:2a:a3:66:
                    b6:73:46:a9:d3:da:e8:7e:e3:ec:94:c6:ee:c7:50:
                    dc:2e:ec:b7:ae:18:28:6c:60:a0:41:c2:78:84:c6:
                    fd:1c:5f:9f:d8:73:da:86:eb:ee:3e:66:a3:db:b0:
                    7a:d5:e2:1c:97:2e:c9:d3:2b:a4:15:b1:4d:ba:99:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:60:E5:0A:EB:30:6E:B2:A9:69:E8:AA:4E:F4:DF:0B:F3:E2:DF:39
            X509v3 Authority Key Identifier:
                keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2e:df:ca:e8:86:36:f9:22:7b:c6:51:e1:21:8e:e0:8a:ad:
         f2:a6:c9:0d:ac:f4:42:2d:49:f1:e2:5a:ff:7a:6e:05:26:55:
         de:da:f3:ee:72:83:a1:18:d3:46:48:ec:63:c9:ae:77:5f:6e:
         2d:4b:d5:64:82:48:1a:9e:43:98:cb:d4:3f:89:76:73:0e:60:
         3b:f6:e6:1d:6c:13:2b:32:19:bc:15:8c:be:fb:fe:1c:d7:3a:
         d1:9b:0f:df:50:69:c7:99:bc:94:42:97:15:e6:52:c0:c6:ce:
         a6:b5:ba:f5:aa:7f:84:e9:6e:77:a3:a8:87:56:3f:9d:71:e3:
         c0:73:74:63:78:8e:0d:54:f6:d4:08:d9:49:29:8d:06:28:f8:
         91:c0:91:40:63:1e:89:13:ce:a4:74:a4:92:b8:6c:e9:fb:f3:
         d1:d3:14:54:28:4a:4f:e0:6a:d7:43:a7:74:8f:81:4d:98:0c:
         53:18:ce:0a:7d:0c:b2:6f:d4:a8:49:45:01:7c:40:55:d0:ef:
         2f:56:b5:8a:ac:c2:e7:d1:57:37:00:0c:3c:14:11:95:ca:7c:
         d1:63:ba:ae:fa:ef:f0:bd:24:ec:1b:00:d1:08:d9:83:8a:aa:
         d4:39:9e:ce:2f:37:bf:47:9c:bc:af:19:ea:7b:fa:64:82:66:
         b6:d3:59:23
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUF+P/L3RyanguvG8p4zGQhWgG3UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFMDZCNDc0NEZDRjIxMUQwMzk0MTVCQjhCMTc5NDFF
Qzc2NzM1ODAeFw0yNjA1MjEwNjExMDlaFw0yNjA1MjIwODM5MDlaMDMxMTAvBgNV
BAMTKDg3NjBFNTBBRUIzMDZFQjJBOTY5RThBQTRFRjRERjBCRjNFMkRGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdV15QX7n6Ox9dIV+61G8VIdw
RbObHYjOcxpKjY6nWOzysLUGYW7N73crSHCZAxCaSre9JGKjjLchKAHmThXgwDgn
WlD0J9t7MjeGYlItC3/erp5+VeOi/XnTTh54gaAw5eTZ7K8/FuA2IBCCMJIoMbwi
EiD30hcVrcdkY2O3osqAlsEU67x0Eecr+kvT+IA2/CPWSr22eYLYAoVsaFDFDipm
8sWSOEryDKZhFxig/eRhwmf5a/w7VuD+a2xq+CqjZrZzRqnT2uh+4+yUxu7HUNwu
7LeuGChsYKBBwniExv0cX5/Yc9qG6+4+ZqPbsHrV4hyXLsnTK6QVsU26mfqpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUh2DlCuswbrKpaeiqTvTfC/Pi3zkwHwYDVR0j
BBgwFoAUe+BrR0T88hHQOUFbuLF5Qex2c1gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODQxOTA3NC8wLzdCRTA2QjQ3NDRGQ0YyMTFEMDM5NDE1QkI4QjE3
OTQxRUM3NjczNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0JFMDZCNDc0NEZDRjIxMUQwMzk0MTVCQjhCMTc5NDFFQzc2NzM1OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0MTkwNzQvMC83QkUwNkI0NzQ0RkNG
MjExRDAzOTQxNUJCOEIxNzk0MUVDNzY3MzU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi7fyuiGNvki
e8ZR4SGO4Iqt8qbJDaz0Qi1J8eJa/3puBSZV3trz7nKDoRjTRkjsY8mud19uLUvV
ZIJIGp5DmMvUP4l2cw5gO/bmHWwTKzIZvBWMvvv+HNc60ZsP31Bpx5m8lEKXFeZS
wMbOprW69ap/hOlud6Ooh1Y/nXHjwHN0Y3iODVT21AjZSSmNBij4kcCRQGMeiRPO
pHSkkrhs6fvz0dMUVChKT+Bq10OndI+BTZgMUxjOCn0Msm/UqElFAXxAVdDvL1a1
iqzC59FXNwAMPBQRlcp80WO6rvrv8L0k7BsA0QjZg4qq1Dmezi83v0ecvK8Z6nv6
ZIJmttNZIw==
-----END CERTIFICATE-----
Generated at Thu May 21 13:24:34 2026 by rpki-client