Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File:                     7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier:          vIutVxeZ+fZScxrHCkUET6kfsPWUGlxzm2/RHBYoWEg=
Subject key identifier:   3E:A6:25:92:66:6D:F1:91:1C:1D:DE:FA:FC:FF:CF:27:69:06:A2:7F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       640118A6B36B6D340446D1EB33EC01A3EB78E831
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number:          011C
Signing time:             Thu 20 Aug 2026 12:02:00 +0000
Manifest this update:     Thu 20 Aug 2026 11:57:00 +0000
Manifest next update:     Fri 21 Aug 2026 12:56:00 +0000
Files and hashes:         1: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
                          2: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
                          3: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
                          4: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
                          5: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
                          6: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
                          7: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
                          8: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
                          9: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: r8GVXwq6vLB5l4ayuor0j70Rr/OQvTZf5QVcF/tkT5c=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 12:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:01:18:a6:b3:6b:6d:34:04:46:d1:eb:33:ec:01:a3:eb:78:e8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Aug 20 11:57:00 2026 GMT
            Not After : Aug 21 12:56:00 2026 GMT
        Subject: CN=3EA62592666DF1911C1DDEFAFCFFCF276906A27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:a8:c4:79:52:ed:56:e1:ac:97:57:4c:38:
                    91:41:ac:24:b9:2c:bc:b9:73:bf:fa:cf:dd:ee:97:
                    b8:61:87:f5:96:31:f6:fe:54:71:77:ad:fa:13:a1:
                    a6:7a:3a:18:02:d2:88:a0:00:86:93:23:19:d7:8c:
                    3d:fc:da:1a:e2:7f:15:bf:8f:59:ed:85:68:e1:c1:
                    d5:7a:75:2f:27:0b:d6:10:64:de:00:9b:48:1a:0d:
                    b1:67:2f:15:72:3d:9f:2f:2e:ad:f7:51:3e:43:9e:
                    3f:58:b9:e4:ef:01:a3:e7:03:12:85:2b:bc:94:eb:
                    e4:f2:f0:94:4b:d3:05:48:f5:70:72:66:41:6e:32:
                    72:96:8f:86:56:57:de:a2:0a:ea:00:03:09:51:4b:
                    2d:ea:27:8a:d0:20:00:59:67:ea:2b:1f:81:d1:a3:
                    52:dc:71:5f:7f:ea:6a:f8:06:e5:be:2f:2d:ff:a3:
                    ec:d6:e1:fa:ce:ca:d5:70:f2:8a:8a:78:58:e1:57:
                    aa:e9:a4:8b:83:81:bb:c6:f5:f4:4f:9d:96:59:f0:
                    cf:e8:74:07:aa:e5:ab:92:ad:a2:2f:f1:22:fb:a1:
                    ce:67:b2:3b:44:5e:d9:e7:df:e1:25:a3:30:bc:0a:
                    17:40:95:db:15:80:05:d7:2f:33:71:66:25:51:d7:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A6:25:92:66:6D:F1:91:1C:1D:DE:FA:FC:FF:CF:27:69:06:A2:7F
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:71:7f:4c:89:7e:8c:bd:20:e3:0e:47:5c:15:25:67:5f:91:
         53:fc:1f:58:e8:43:a1:44:2e:80:e3:10:56:39:06:8f:4c:4a:
         2a:f8:d0:72:34:8b:03:29:60:7e:2d:7e:16:80:82:8f:5f:4c:
         cd:7f:b8:65:87:5e:e6:fa:6c:a9:c4:df:18:30:f9:f1:f0:bd:
         db:1e:7a:29:f0:34:59:18:f6:a8:d9:1c:75:e3:22:74:32:28:
         98:2a:68:88:d8:7a:cd:a0:60:c9:f4:d5:4e:27:b5:c0:69:66:
         5d:a8:40:65:d2:a7:fc:2c:4e:70:7b:6c:e2:63:73:3e:09:31:
         87:19:af:aa:7d:b4:4b:16:f3:3e:1f:46:13:45:05:f8:76:ea:
         d1:25:d5:8b:24:bc:a8:90:b9:4a:4a:6a:67:c6:5e:0a:76:90:
         a8:3a:78:7a:0b:1d:1b:2f:18:19:41:82:eb:51:48:1a:35:b1:
         c0:41:26:7f:7e:7c:2b:a6:7a:cf:23:dd:3b:ea:38:17:43:f9:
         9b:4d:ba:14:74:c9:22:17:f4:2b:5c:fd:f3:a5:17:e7:e7:e2:
         0f:d1:71:1b:a9:0c:b7:1b:4f:dc:96:16:c9:b9:81:ab:fb:59:
         af:80:6f:78:06:71:56:ff:06:6b:1b:9b:0e:03:d8:13:46:91:
         63:8c:31:55
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZAEYprNrbTQERtHrM+wBo+t46DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjA4MjAxMTU3MDBaFw0yNjA4MjExMjU2MDBaMDMxMTAvBgNV
BAMTKDNFQTYyNTkyNjY2REYxOTExQzFEREVGQUZDRkZDRjI3NjkwNkEyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbajEeVLtVuGsl1dMOJFBrCS5
LLy5c7/6z93ul7hhh/WWMfb+VHF3rfoToaZ6OhgC0oigAIaTIxnXjD382hrifxW/
j1nthWjhwdV6dS8nC9YQZN4Am0gaDbFnLxVyPZ8vLq33UT5Dnj9YueTvAaPnAxKF
K7yU6+Ty8JRL0wVI9XByZkFuMnKWj4ZWV96iCuoAAwlRSy3qJ4rQIABZZ+orH4HR
o1LccV9/6mr4BuW+Ly3/o+zW4frOytVw8oqKeFjhV6rppIuDgbvG9fRPnZZZ8M/o
dAeq5auSraIv8SL7oc5nsjtEXtnn3+ElozC8ChdAldsVgAXXLzNxZiVR1y5hAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUPqYlkmZt8ZEcHd76/P/PJ2kGon8wHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw
REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnF/TIl+jL0g
4w5HXBUlZ1+RU/wfWOhDoUQugOMQVjkGj0xKKvjQcjSLAylgfi1+FoCCj19MzX+4
ZYde5vpsqcTfGDD58fC92x56KfA0WRj2qNkcdeMidDIomCpoiNh6zaBgyfTVTie1
wGlmXahAZdKn/CxOcHts4mNzPgkxhxmvqn20SxbzPh9GE0UF+Hbq0SXViyS8qJC5
SkpqZ8ZeCnaQqDp4egsdGy8YGUGC61FIGjWxwEEmf358K6Z6zyPdO+o4F0P5m026
FHTJIhf0K1z986UX5+fiD9FxG6kMtxtP3JYWybmBq/tZr4BveAZxVv8GaxubDgPY
E0aRY4wxVQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 05:13:48 2026 by rpki-client