Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
File:                     BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json)
Hash identifier:          u1ZZBZNuKhIJ4kAYlNJdgqTWJqk5jXcv0Qgv5CA9R4s=
Subject key identifier:   BD:4B:74:F9:F4:1E:48:A3:9F:D5:4B:F3:A2:AB:E6:92:5D:C2:6F:BF
Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59
Certificate issuer:       /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459
Certificate serial:       1BC8FACEF2F3410411469D481E2058E10E06D80E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
Manifest number:          7E
Signing time:             Fri 17 Jul 2026 16:51:21 +0000
Manifest this update:     Fri 17 Jul 2026 16:46:21 +0000
Manifest next update:     Sat 18 Jul 2026 16:54:21 +0000
Files and hashes:         1: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: Rv1Hf8wA/IghJIujAzlqU1Yrk6NsPnetspcEQhIYBzA=)
                          2: AS7497.roa (hash: j57rZSZiJ0J8Rj4UciwSQrvA4GxhmFZ+b+nBd2VG6aA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 16:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c8:fa:ce:f2:f3:41:04:11:46:9d:48:1e:20:58:e1:0e:06:d8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459
        Validity
            Not Before: Jul 17 16:46:21 2026 GMT
            Not After : Jul 18 16:54:21 2026 GMT
        Subject: CN=BD4B74F9F41E48A39FD54BF3A2ABE6925DC26FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:b8:05:04:b8:05:1d:d9:49:32:77:a5:da:
                    91:4a:83:9d:ff:5c:b7:30:66:ea:a0:ae:7a:ec:7b:
                    f6:44:10:b0:b0:7e:b4:d1:56:39:df:7d:90:d4:9d:
                    90:ea:f3:c5:89:db:a0:0c:6e:e6:78:30:c6:62:e7:
                    ae:ae:dd:a3:49:8a:67:db:27:df:3e:da:be:99:d4:
                    66:04:d1:c3:8f:b9:cd:79:fc:e0:cf:ae:44:0a:94:
                    93:95:2f:79:13:9c:6c:ab:5b:6c:47:af:7e:31:5e:
                    0d:98:b2:b4:45:7e:fe:9f:c9:3d:31:86:fa:75:32:
                    ec:a0:3e:44:37:f4:86:ee:fe:76:a2:3b:8d:b9:02:
                    d0:c9:9d:bb:54:23:e2:4c:78:27:0b:84:39:28:a9:
                    32:fe:b9:5a:e0:da:3e:8c:9e:79:2c:f6:4c:87:68:
                    89:10:a0:ea:31:a1:48:19:ce:5c:3d:9e:51:fb:e0:
                    a4:7b:34:c7:19:bc:18:68:20:97:90:c2:0b:9a:d7:
                    23:11:10:6a:ae:3e:0c:14:ef:f7:1e:a3:3d:c4:a4:
                    6a:a1:c5:90:95:a6:1a:a3:d7:f3:c7:a4:b0:08:3c:
                    88:9e:c3:ce:ce:bf:f1:ae:cf:b2:1d:0d:f3:78:e6:
                    7a:20:76:e0:96:66:cd:84:5b:6a:7a:55:b7:9e:2a:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:74:F9:F4:1E:48:A3:9F:D5:4B:F3:A2:AB:E6:92:5D:C2:6F:BF
            X509v3 Authority Key Identifier:
                keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:60:6c:cf:22:ae:c7:a7:88:b5:46:d8:5c:55:ad:6a:30:e3:
         7b:9a:48:86:2e:e4:28:80:70:44:df:34:65:a5:18:8e:ac:b9:
         90:52:47:1d:f5:d2:78:6a:53:ed:ab:21:3d:d4:f7:fa:c3:af:
         f9:81:c6:72:6a:55:e9:97:33:e6:1d:01:a2:11:ed:9b:df:8c:
         c5:e3:5a:64:f6:d5:12:23:3e:45:07:1b:fc:7b:b2:c6:ad:46:
         8b:6d:0b:7d:35:b5:f3:72:22:c7:3c:37:ac:0a:10:d3:41:61:
         42:3e:3a:4d:a9:ea:53:ad:86:a0:1d:4f:fb:57:b5:87:93:27:
         fb:c1:74:b2:38:76:f3:e8:a9:7a:a2:0d:84:8c:a8:f8:4b:b6:
         45:49:87:6b:e8:66:3b:c1:7f:80:ff:07:db:19:0d:eb:06:c3:
         28:61:65:68:bb:0f:5c:b5:71:d6:05:4d:07:db:66:cd:dc:b6:
         9e:d0:59:28:2b:23:d5:a8:c1:39:ff:78:18:a1:de:28:9e:77:
         5f:57:e1:a1:b8:90:b7:21:c8:85:c7:55:f8:19:74:de:29:1f:
         f3:8a:e4:2c:d9:38:66:09:c2:4b:08:36:3c:33:28:39:72:17:
         8d:8c:d4:4c:a0:12:10:fe:93:43:53:db:10:7a:bf:36:91:8a:
         79:33:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:09 2026 by rpki-client