Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          7Cv/IBxxynVhz9/Psz8gvIEEp2kRqNYiBuA5nVZeYo0=
Subject key identifier:   07:94:12:AF:C2:56:04:4F:44:22:65:97:E6:77:1A:4F:19:61:AC:CC
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       6A3178E8487CCF7F2125864D1F25103F5D66274D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          0125
Signing time:             Mon 27 Jul 2026 13:04:05 +0000
Manifest this update:     Mon 27 Jul 2026 12:59:05 +0000
Manifest next update:     Tue 28 Jul 2026 15:17:05 +0000
Files and hashes:         1: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: cD4xkL3gXcww1GVXV9OpINBjsfjTlUJZPkLf19vubgo=)
                          2: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          3: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          4: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          5: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          6: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          7: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          8: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          9: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          10: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          11: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          12: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          13: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:31:78:e8:48:7c:cf:7f:21:25:86:4d:1f:25:10:3f:5d:66:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Jul 27 12:59:05 2026 GMT
            Not After : Jul 28 15:17:05 2026 GMT
        Subject: CN=079412AFC256044F44226597E6771A4F1961ACCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:ff:bf:61:ad:7a:35:d0:78:e1:d6:a3:7c:29:
                    b5:d7:1d:6f:91:64:46:a6:75:f8:b1:c8:33:13:c8:
                    ba:40:c2:dc:bb:33:97:eb:66:15:64:ee:e6:21:ca:
                    b1:f5:59:7c:ff:69:e4:b1:50:58:12:ad:48:4e:37:
                    f9:62:e4:b2:41:36:00:78:ae:fa:26:dd:b9:73:de:
                    8a:9f:33:e3:2b:b4:99:13:77:8f:b8:a3:20:d7:a7:
                    be:b3:db:f2:c4:32:d7:4b:9b:36:86:87:c4:84:96:
                    ae:c7:6a:9e:95:9d:a6:4e:90:b0:00:06:8a:67:90:
                    c4:56:55:6e:30:e7:1f:00:4d:93:e7:30:5a:83:36:
                    61:3e:8b:d0:ea:9b:e7:b4:a4:94:74:32:c6:74:5a:
                    01:c3:55:3c:39:77:99:0a:64:16:9e:aa:14:a2:08:
                    4c:3e:0b:ac:ed:4d:63:71:2b:d2:61:05:2d:62:7c:
                    99:0e:e1:40:df:8a:36:f8:e0:25:a4:ce:ef:57:90:
                    29:98:44:f4:56:73:04:33:94:c0:5f:c2:5a:98:9e:
                    4a:a4:2a:e7:bd:25:05:7c:ba:2c:ba:88:f4:47:4c:
                    71:ba:d1:32:79:88:cc:93:9c:7c:a4:ad:89:e8:78:
                    9a:6d:ef:65:ec:ac:d3:b7:d6:83:41:39:49:a6:42:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:94:12:AF:C2:56:04:4F:44:22:65:97:E6:77:1A:4F:19:61:AC:CC
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:9b:68:57:cd:d8:1d:bc:c3:f0:ab:bf:de:22:91:c8:0e:
         63:60:3e:d2:c9:cf:7e:a1:60:62:92:50:c4:80:d5:ec:62:cb:
         03:3f:83:d7:02:27:ac:bb:58:41:46:18:c7:b8:ec:12:ec:e3:
         3d:92:32:12:b1:de:93:e6:54:02:75:af:db:6d:91:9e:7a:de:
         b9:28:b3:99:c8:e0:53:d3:3b:30:3a:e6:89:9d:7f:c0:98:5b:
         3d:3c:38:4c:c6:35:60:9f:8b:44:22:73:64:a4:df:8d:09:ce:
         6c:df:0c:8d:dd:a1:62:96:b2:e6:4c:1d:c9:4e:3b:cd:8b:f4:
         82:56:f4:dd:ac:2e:5f:96:3a:42:05:83:56:b2:31:53:86:0b:
         39:d4:28:a1:ff:a2:6d:76:74:f0:f1:0e:93:ed:8f:31:4f:89:
         d0:f0:05:ab:12:91:b4:93:f1:bf:3c:c6:6a:2b:89:84:b4:d6:
         02:89:2b:33:63:80:19:36:f5:f8:e9:e4:ee:b3:31:83:ac:92:
         f2:8c:7e:fb:37:ec:c1:21:5e:e3:39:9d:bd:8a:ca:b8:45:02:
         e2:2d:67:bf:0c:9e:21:cb:09:f7:77:d9:9f:27:7e:fe:a1:1f:
         59:07:17:26:38:c2:89:38:ea:32:46:49:3a:e3:ef:15:c5:53:
         39:d4:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:53:12 2026 by rpki-client