Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
File:                     526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json)
Hash identifier:          Qcfr20B46jaWSCETH/8HQG2+3uJYCYTdft39WTyzDRI=
Subject key identifier:   B1:85:B5:9A:EC:2E:FF:23:ED:5D:CA:51:DE:52:E1:8D:24:BE:D4:6F
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Certificate issuer:       /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial:       25151959906176E98A200A6FF2C143039E8D5FC1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
Manifest number:          8F
Signing time:             Tue 28 Jul 2026 07:16:13 +0000
Manifest this update:     Tue 28 Jul 2026 07:11:13 +0000
Manifest next update:     Wed 29 Jul 2026 09:49:13 +0000
Files and hashes:         1: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=)
                          2: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=)
                          3: 34332e3233392e3132302e302f32322d3232203d3e2034383337.roa (hash: +pyEGxsxJlmP0xnipvGwK3GS+xyc85YePa3acnQ6Uic=)
                          4: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=)
                          5: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=)
                          6: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=)
                          7: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: nrtcK6JwM37xxI7wY3DUY1L6cZUhkPc0ZrcCvPt3Sw8=)
                          8: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=)
                          9: 3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa (hash: tuXYqVmE6ECVrR2hePGUfUEvZDi/5Mnaky6gOdgaZss=)
                          10: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=)
                          11: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=)
                          12: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 09:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:15:19:59:90:61:76:e9:8a:20:0a:6f:f2:c1:43:03:9e:8d:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
        Validity
            Not Before: Jul 28 07:11:13 2026 GMT
            Not After : Jul 29 09:49:13 2026 GMT
        Subject: CN=B185B59AEC2EFF23ED5DCA51DE52E18D24BED46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:b9:f0:cf:1a:49:da:37:a8:71:e8:b4:8d:
                    85:07:f1:2b:29:7d:69:a5:cd:3e:1b:34:7b:43:8d:
                    72:0e:5e:11:20:95:2b:5f:da:9d:02:42:0f:c7:ab:
                    f5:c7:03:03:7b:fb:25:c2:b9:cf:8e:a7:a4:72:9c:
                    54:2b:3a:1f:0d:a1:59:74:5d:e2:5f:7b:46:63:9b:
                    19:1e:6d:f2:6d:b5:3d:4d:7f:95:7d:80:ae:26:b6:
                    f1:f5:61:a8:17:55:4f:a5:c2:af:18:f8:ff:ee:b2:
                    c7:92:c9:fa:1b:0d:26:40:b1:6b:cb:0f:30:58:04:
                    3e:71:78:db:3b:29:34:ee:fc:0b:ed:37:a8:4c:35:
                    a5:54:0c:b7:1b:f9:51:cb:a4:0c:9d:b3:64:5a:07:
                    9b:7a:66:b9:5f:5c:18:8c:ce:91:d7:7b:67:3c:16:
                    43:76:b3:ca:97:3a:df:20:57:09:df:54:f1:f6:0b:
                    fd:da:c2:e1:2a:db:5a:45:c5:d7:39:a2:15:01:04:
                    7b:96:a1:e6:f5:7e:79:d2:66:49:86:87:d4:51:d7:
                    e8:ee:c8:ef:49:c9:11:37:ff:55:5a:52:5d:0c:23:
                    34:97:51:98:00:f5:97:1b:53:78:71:bd:23:24:8b:
                    30:7b:07:bf:5f:bc:dd:4c:e9:1d:72:a4:02:41:0f:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:B5:9A:EC:2E:FF:23:ED:5D:CA:51:DE:52:E1:8D:24:BE:D4:6F
            X509v3 Authority Key Identifier:
                keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d6:76:9c:c8:34:4b:de:4a:64:2c:d9:f9:01:cf:c4:c3:a9:
         83:f5:09:91:66:6c:31:23:c6:d2:c5:88:20:20:61:d5:72:02:
         a4:cf:fa:89:74:ae:77:2d:2b:b5:9e:45:33:e7:1a:61:54:22:
         7f:a8:89:bd:50:ce:43:32:52:04:a1:cf:6b:db:f6:30:9a:4e:
         3e:47:3f:e6:3e:8d:76:bf:13:a2:5e:e1:b4:e7:78:09:ad:96:
         cf:2a:99:9f:e4:ab:1e:f8:a3:1a:65:ca:1c:71:71:15:03:bb:
         3f:82:62:6f:25:8b:48:47:08:8d:39:de:0a:61:72:8e:b7:e7:
         0a:8c:c0:d1:91:21:b8:1d:3e:58:e5:83:f6:dd:5a:74:1c:87:
         bf:da:91:af:bd:97:a4:4d:eb:57:a9:4c:18:6d:48:47:b9:a7:
         4a:ae:ee:07:b4:06:f5:9b:86:1f:12:4c:6e:92:09:3d:3c:48:
         be:96:94:c8:e8:50:be:2a:85:02:2e:89:0b:a9:72:05:fe:a3:
         60:72:1f:62:7d:a5:ab:e6:a8:42:26:95:6c:41:32:53:e3:8d:
         28:c2:75:71:2e:8e:45:d2:a9:46:69:a8:9b:38:91:a7:df:e2:
         10:4c:45:3d:2f:3a:1b:27:3c:95:59:8f:1e:11:d5:31:2c:2c:
         e5:70:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:00 2026 by rpki-client