Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
File:                     0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json)
Hash identifier:          Q0NIEIQwZL7foLB9xZ733j/T8qHX4chpgOtIsujGQxc=
Subject key identifier:   78:F7:9B:D6:74:9B:F5:D7:EE:5B:6B:4A:FE:8B:28:21:F6:7A:96:24
Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
Certificate issuer:       /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
Certificate serial:       6E2B7DA20176E77BC862F9DB43EA4235DF4066D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
Manifest number:          67
Signing time:             Mon 06 Jul 2026 16:22:13 +0000
Manifest this update:     Mon 06 Jul 2026 16:17:13 +0000
Manifest next update:     Tue 07 Jul 2026 19:02:13 +0000
Files and hashes:         1: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=)
                          2: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: wsgKcozTLKXi3W7jy3i8e+PP1Sgy/tCiARY7LNa/fxA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 19:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:7d:a2:01:76:e7:7b:c8:62:f9:db:43:ea:42:35:df:40:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
        Validity
            Not Before: Jul  6 16:17:13 2026 GMT
            Not After : Jul  7 19:02:13 2026 GMT
        Subject: CN=78F79BD6749BF5D7EE5B6B4AFE8B2821F67A9624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:18:1d:88:61:0b:82:d5:d7:5f:f3:95:75:
                    73:da:61:6f:a5:4d:04:cf:e7:76:19:36:df:e5:83:
                    5a:95:5d:a2:4d:fe:b4:a6:19:66:89:aa:41:0b:e5:
                    38:0e:f3:8b:15:9d:29:9f:16:6b:e8:1d:ae:55:c8:
                    ba:a3:87:89:9a:c1:3c:c9:85:c7:e0:bf:d5:7e:58:
                    03:ca:41:27:37:53:6b:80:6d:3c:d0:28:40:86:0c:
                    79:84:92:d0:d4:cc:ba:dc:62:74:64:6b:af:53:3e:
                    2b:d9:04:c6:8d:a4:c8:6a:56:f0:42:41:9f:b2:ea:
                    9c:b7:42:e6:0f:5f:e1:ba:6e:e9:d9:79:e7:10:7e:
                    36:7b:05:cd:d4:98:15:72:d8:59:b4:9e:13:8f:8d:
                    ed:06:0b:ae:2f:79:c4:ac:17:bc:f2:c4:00:0a:c2:
                    0e:14:7b:de:b0:6b:6e:b3:f1:51:bf:b3:10:b2:64:
                    2d:03:cf:d2:0b:0d:ee:e6:03:c3:e1:40:bf:6d:04:
                    ec:a6:fc:ab:36:df:a4:0e:39:3e:b4:93:ae:7c:24:
                    5d:02:b7:67:72:63:47:6b:f1:c2:2f:d4:b9:ab:92:
                    23:df:b1:fc:1b:6a:c7:c7:72:2d:e7:57:88:cb:61:
                    ec:4f:17:e6:7b:20:f7:77:10:90:d6:b4:3a:c6:f9:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:9B:D6:74:9B:F5:D7:EE:5B:6B:4A:FE:8B:28:21:F6:7A:96:24
            X509v3 Authority Key Identifier:
                keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:90:3a:ba:03:c5:f3:d5:4e:95:b7:5e:61:48:4e:86:cb:f7:
         e8:a4:a6:c2:f3:ca:79:f1:b2:dd:9c:2e:7c:e5:e3:67:e7:aa:
         61:2f:12:39:99:55:29:45:ec:f8:96:40:f0:d7:94:28:1f:7b:
         16:25:4a:f6:94:d2:96:6e:e8:1e:12:bb:95:6f:5c:f0:c5:90:
         2f:20:54:f7:b6:2d:97:76:c1:8c:8e:f7:73:76:c1:da:50:4f:
         43:b7:e7:a6:a0:19:34:50:74:e1:19:ee:be:b5:8d:37:a1:b2:
         f1:7e:27:43:1a:03:44:84:5f:65:44:f2:70:fe:3c:ff:d8:a7:
         86:01:fa:3d:47:d7:3e:51:f2:f2:9c:e9:8a:2c:c6:aa:cf:75:
         8b:05:8f:54:58:0d:86:79:44:14:6b:d7:10:2f:52:b4:85:88:
         94:51:7b:01:1e:7f:93:73:2b:1d:70:db:2b:71:50:af:1b:ae:
         db:4e:bd:8e:61:76:e1:30:c2:f9:59:e5:15:27:9e:87:28:11:
         9c:73:76:54:4c:83:28:63:c1:46:f7:cc:a6:9f:50:d2:f6:76:
         8a:9b:50:36:ed:63:9a:90:1d:97:2c:60:c4:e7:a6:36:3a:df:
         e9:3e:5e:f3:22:fb:b3:62:f9:2f:77:47:87:fd:74:84:bb:7f:
         54:17:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:42 2026 by rpki-client