Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
File:                     B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json)
Hash identifier:          vGyTuBOZlyqI2BmhvIFO4UJBnmNageDACuakn+q7W7M=
Subject key identifier:   FC:67:9C:83:CC:E2:B6:D7:ED:16:B1:E5:D8:CF:8C:95:F8:F9:05:E6
Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
Certificate issuer:       /CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Certificate serial:       3BDEBBAA8EBE54C63522AF5C7383FE34C3410974
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
Manifest number:          7C
Signing time:             Tue 14 Jul 2026 02:10:09 +0000
Manifest this update:     Tue 14 Jul 2026 02:05:09 +0000
Manifest next update:     Wed 15 Jul 2026 03:01:09 +0000
Files and hashes:         1: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=)
                          2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: 3tuzaGEz4h2wheCm71O1GdODoQesiTjggG0mZJfBXc0=)
                          3: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:de:bb:aa:8e:be:54:c6:35:22:af:5c:73:83:fe:34:c3:41:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309
        Validity
            Not Before: Jul 14 02:05:09 2026 GMT
            Not After : Jul 15 03:01:09 2026 GMT
        Subject: CN=FC679C83CCE2B6D7ED16B1E5D8CF8C95F8F905E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:f7:82:fb:af:08:76:6e:4e:9f:41:aa:d1:
                    f7:b0:7b:27:e6:8e:83:12:ec:c1:0a:8b:40:9f:85:
                    14:c9:4b:0c:96:e7:01:d0:5d:05:13:a4:bd:57:ce:
                    46:21:6f:07:6e:a3:05:b4:bd:88:96:b8:19:15:ee:
                    67:7d:b9:fb:c7:6c:27:80:11:86:b5:a9:7f:2e:0d:
                    5a:83:9e:ab:cf:b0:f2:7f:ba:50:94:66:3d:26:4b:
                    26:b4:7b:f4:f3:ed:15:0a:a8:67:40:19:76:6e:9c:
                    d8:30:d8:9a:fe:60:6f:9f:f7:25:52:32:36:d5:2c:
                    38:aa:47:7f:8d:a6:89:c5:bc:48:07:67:12:12:e0:
                    22:ad:5e:4e:39:65:1c:7e:e2:43:3e:d4:45:08:bf:
                    54:7d:fc:66:ce:60:b3:b5:29:a0:f6:52:ab:fe:e5:
                    f1:6f:b1:f1:e4:8e:3c:11:92:08:87:a3:8f:6f:b3:
                    f9:92:6d:e6:29:f9:2a:d3:c0:a4:bf:2c:60:05:e1:
                    d7:23:d8:b4:62:f1:3c:49:0a:b3:20:15:ce:bf:1b:
                    79:14:61:45:67:8a:ff:de:e4:55:48:ae:2b:a5:6f:
                    e4:2d:83:5f:b5:f3:e1:50:31:17:5a:b7:42:51:ad:
                    06:ca:13:d3:fd:3a:77:62:12:47:92:29:c2:17:6a:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:67:9C:83:CC:E2:B6:D7:ED:16:B1:E5:D8:CF:8C:95:F8:F9:05:E6
            X509v3 Authority Key Identifier:
                keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:61:5f:8d:0d:2d:ad:77:1d:e1:d6:ee:1e:b2:bd:6c:8f:
         5c:34:65:fa:68:8c:30:87:a7:e3:8e:33:45:0c:60:97:b9:91:
         bb:21:a4:ac:27:05:ae:34:59:b8:d3:d5:8c:24:94:ab:cf:bc:
         34:26:bd:16:a0:a8:13:4e:44:a2:88:90:9d:6c:06:d1:73:80:
         67:41:9f:ef:80:d6:10:2d:8a:7a:87:42:2d:ca:58:d1:4a:3d:
         0b:d7:31:9e:4c:cf:c6:7a:bb:de:9b:6e:ef:63:d8:ea:f1:0e:
         5c:cf:f4:20:04:49:e5:7c:fb:d0:5d:87:23:46:7a:3b:00:84:
         d3:46:c8:c7:7d:61:69:47:23:06:a1:a2:c4:23:e7:d6:88:35:
         d5:36:71:a8:6e:e9:ff:de:91:0d:60:3f:1b:d3:43:d1:02:7d:
         e0:9a:63:79:a1:e5:2f:ed:76:72:6a:fa:8e:32:9c:77:18:53:
         d7:4e:47:ce:7b:e8:bd:93:6a:a4:8a:e2:07:e3:95:a3:09:93:
         b4:de:b8:b8:4f:3b:cf:a9:4f:8d:a1:a3:13:96:a4:aa:da:d3:
         41:e2:d1:5f:83:f2:f6:55:91:23:9f:6e:e3:2f:1a:fb:24:31:
         9e:3e:66:09:f3:a3:9a:b5:54:41:df:41:b5:d9:b9:c4:8b:19:
         84:15:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:47 2026 by rpki-client