Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
File:                     D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json)
Hash identifier:          Fkte/Njl7vZwTBNCPH/n3o4fm05zkr9cr2gMQTHIP5U=
Subject key identifier:   7E:DB:20:A8:04:49:4B:7E:DE:56:B2:CF:6D:27:6A:B2:DE:20:0D:9C
Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82
Certificate issuer:       /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
Certificate serial:       5CDE79929A6075BD4ABCB7E8E3E991215EE90065
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
Manifest number:          7D
Signing time:             Tue 14 Jul 2026 16:46:42 +0000
Manifest this update:     Tue 14 Jul 2026 16:41:42 +0000
Manifest next update:     Wed 15 Jul 2026 17:04:42 +0000
Files and hashes:         1: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: rO7Haxe40zafwvBSf71tE9810m8sqjTGGqYADHGvdrA=)
                          2: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=)
                          3: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=)
                          4: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=)
                          5: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 17:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:79:92:9a:60:75:bd:4a:bc:b7:e8:e3:e9:91:21:5e:e9:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
        Validity
            Not Before: Jul 14 16:41:42 2026 GMT
            Not After : Jul 15 17:04:42 2026 GMT
        Subject: CN=7EDB20A804494B7EDE56B2CF6D276AB2DE200D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:ac:da:e3:78:8b:69:f9:96:7c:78:b0:34:
                    42:8f:57:96:b3:42:00:44:8b:f0:11:6e:68:56:35:
                    91:94:37:74:c8:58:42:61:29:4c:f3:68:1e:94:2b:
                    d0:24:0d:16:1f:c0:26:db:73:9f:13:71:84:36:54:
                    56:45:a7:7d:db:ee:fc:83:ef:f9:45:47:f8:e2:9d:
                    2c:f8:10:36:5a:bd:7a:ba:4c:b6:71:82:46:8c:a1:
                    e2:70:39:00:c3:24:a9:73:69:55:3f:8e:00:41:5f:
                    90:d5:88:d9:ac:b9:13:e9:fc:33:0a:19:85:9d:80:
                    28:c2:01:75:9f:6b:1d:7b:58:5b:78:82:3e:a4:27:
                    50:69:f7:bb:24:d3:0d:8b:7c:38:1a:be:2c:bf:79:
                    71:5f:8b:95:b2:74:5f:24:26:79:ce:d8:cd:b8:75:
                    41:c4:9c:5d:e0:5e:9e:b8:41:4f:97:24:09:c0:7a:
                    14:50:6c:70:8d:3b:28:f3:fe:6f:40:94:b9:0d:be:
                    03:fa:a1:e4:89:f7:cf:72:cd:ac:47:1d:a1:d0:ce:
                    c5:4d:40:bb:a3:97:8a:8a:20:2e:b9:9b:18:cd:7e:
                    a2:73:8f:e2:a9:c4:b4:72:a3:3f:83:d8:e9:ba:60:
                    56:53:81:97:27:1f:8f:ca:58:e2:f0:d0:97:88:0c:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:20:A8:04:49:4B:7E:DE:56:B2:CF:6D:27:6A:B2:DE:20:0D:9C
            X509v3 Authority Key Identifier:
                keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:34:e2:37:43:7b:fd:b7:2f:45:5d:86:45:96:e5:a8:64:7b:
         17:75:0a:5c:12:00:2a:9a:30:8e:ea:53:0e:b1:fd:ed:af:d2:
         df:a3:90:d1:61:53:93:ad:82:f3:d6:48:a8:40:64:d4:2c:34:
         7d:92:2e:9a:ca:be:e8:f9:ed:1c:c6:6e:66:64:bf:90:c6:b9:
         cb:fd:84:f6:53:e2:3f:1f:62:fc:47:4a:29:4c:0b:e4:c1:68:
         9d:8c:dd:dd:e2:e2:e9:76:f9:c2:50:d5:ed:ac:f7:44:aa:6d:
         f2:a4:39:0d:21:e4:8c:75:0d:86:00:31:ab:db:56:40:5b:54:
         d1:5d:ee:d5:b3:f7:50:45:8c:b2:61:1f:f8:ea:19:d7:57:c7:
         a2:d8:31:20:1e:4d:3e:99:2e:fc:05:a1:fb:db:56:4f:b0:52:
         25:76:ad:32:e2:7b:25:54:8c:73:5c:d9:be:70:20:c0:eb:54:
         b1:49:c7:87:62:51:32:f2:c3:05:c5:07:4f:2e:71:db:52:1f:
         b8:19:33:27:89:04:70:3c:eb:b9:da:be:16:5c:20:cd:e2:c2:
         74:25:05:53:96:9b:38:dc:c0:c3:33:0f:c0:56:b8:9e:2e:bd:
         68:cd:8e:70:7b:fa:08:89:1c:33:8b:75:ca:40:de:3c:49:7d:
         dd:7f:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:06 2026 by rpki-client