Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
File:                     B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json)
Hash identifier:          PYnYwJggZGE72ZP/B2W+f7M2AeK0Xpojae80lZwwcBU=
Subject key identifier:   CD:00:E2:18:57:5E:31:96:1C:36:AA:E1:CD:6F:52:0C:19:67:F1:82
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Certificate issuer:       /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial:       0360ED6344AE4B116CCD64A7E4971E4C51510096
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
Manifest number:          77
Signing time:             Tue 14 Jul 2026 16:21:39 +0000
Manifest this update:     Tue 14 Jul 2026 16:16:39 +0000
Manifest next update:     Wed 15 Jul 2026 16:59:39 +0000
Files and hashes:         1: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=)
                          2: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=)
                          3: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: mnK0pul8VXVWZNTHZf5iig/l7LImLX8kOWYvH/Gu20E=)
                          4: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=)
                          5: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=)
                          6: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=)
                          7: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=)
                          8: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=)
                          9: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=)
                          10: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=)
                          11: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 16:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:ed:63:44:ae:4b:11:6c:cd:64:a7:e4:97:1e:4c:51:51:00:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
        Validity
            Not Before: Jul 14 16:16:39 2026 GMT
            Not After : Jul 15 16:59:39 2026 GMT
        Subject: CN=CD00E218575E31961C36AAE1CD6F520C1967F182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:6f:56:1d:88:f2:4c:ea:64:a1:7d:5e:49:
                    84:55:6d:a4:d7:9d:2a:64:ef:a0:0a:f4:14:79:7b:
                    b9:96:4a:ad:37:07:4f:8b:9a:05:55:26:dd:a9:83:
                    cd:3c:ce:ca:76:60:be:d5:ee:0f:f8:51:87:6d:6b:
                    b6:5a:b0:15:c5:5f:55:a5:18:2a:3f:67:11:ad:53:
                    8e:6b:28:86:79:0f:d4:71:51:d8:5f:23:eb:0c:af:
                    4f:ad:63:7c:d6:96:ea:c7:9e:a6:a8:66:88:b9:8c:
                    cc:46:56:f4:e5:dd:0f:10:f8:4f:c7:32:3c:3b:1d:
                    b8:6b:58:ae:b3:5f:71:9b:69:d2:74:bd:50:ca:1c:
                    f9:71:d8:df:e0:5f:a2:2f:55:4a:96:da:93:f2:cb:
                    97:c9:f6:c8:b6:8c:71:fa:8f:0a:c7:85:92:d4:73:
                    47:75:37:90:62:7b:e8:d2:8a:96:a6:9d:08:b4:f5:
                    70:4f:45:48:fb:67:f3:d9:2e:03:c3:a5:a9:42:5e:
                    77:0c:69:c5:d9:3b:4f:ad:c7:64:ce:24:c3:2d:32:
                    3c:c6:91:79:45:8f:4b:fa:08:74:77:26:dd:6f:d6:
                    6b:3d:d7:5c:7b:fd:3b:c2:6c:0b:81:44:cd:24:d4:
                    f3:27:8e:6b:f6:71:75:0c:5d:64:0b:d4:26:ac:63:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:E2:18:57:5E:31:96:1C:36:AA:E1:CD:6F:52:0C:19:67:F1:82
            X509v3 Authority Key Identifier:
                keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:88:aa:ef:ba:25:30:c9:84:70:a3:bc:0b:62:11:7b:ed:b3:
         9e:6a:ea:a5:73:2e:60:fc:6a:3e:5a:bc:cf:e2:3f:5a:18:d2:
         f5:07:6a:f2:67:a9:f9:a4:b8:80:3a:16:21:af:c1:0e:1d:b1:
         5c:ee:46:fc:08:81:49:24:3f:d6:d0:8a:0f:43:1b:f4:81:85:
         ec:ee:91:57:5c:2d:36:8c:17:32:d7:84:84:b9:58:18:a0:ec:
         0d:85:45:08:5d:4f:47:97:66:ef:81:86:99:05:fc:6c:b4:8e:
         e0:63:54:11:56:79:91:11:79:1e:64:69:3e:1a:5b:82:89:9b:
         49:c7:b5:87:b8:a1:21:bc:9f:56:11:25:01:94:3b:f4:a0:c2:
         29:90:23:33:b4:b4:4a:d9:40:f2:ce:a4:4c:76:0a:64:d2:9b:
         da:67:fc:c2:0d:0b:9f:48:71:e1:81:fd:c9:71:4f:df:e4:c0:
         0e:ac:58:b1:d9:b1:43:ee:78:33:32:39:b5:4c:f0:52:e9:24:
         5f:8e:0c:b0:a3:3e:94:be:2c:2b:c3:05:f6:8a:46:b4:a3:ed:
         87:47:37:0c:4c:58:9d:ad:68:b9:4b:75:71:4c:d2:d4:37:aa:
         b7:97:c7:bb:c0:29:72:33:52:f3:c0:0d:70:93:ea:6b:8f:99:
         ce:73:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:15:07 2026 by rpki-client