Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
File:                     060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json)
Hash identifier:          WHh772V4qeepKXqqkXUt2k5/fQAphq16C3/4u7cmoY8=
Subject key identifier:   53:43:F4:17:32:1B:87:90:35:0B:CC:EB:8A:AA:53:8B:A2:D1:CE:C4
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Certificate issuer:       /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial:       65752315998AD99DE2B8D6E015CCDEAC114B92AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
Manifest number:          7D
Signing time:             Mon 27 Jul 2026 09:28:46 +0000
Manifest this update:     Mon 27 Jul 2026 09:23:46 +0000
Manifest next update:     Tue 28 Jul 2026 10:24:46 +0000
Files and hashes:         1: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=)
                          2: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: P/IY9LkAx1ufCp/k12xFHM+dd6/40o+t1k8WS5DSkgU=)
                          3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=)
                          4: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=)
                          5: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=)
                          6: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:23:15:99:8a:d9:9d:e2:b8:d6:e0:15:cc:de:ac:11:4b:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
        Validity
            Not Before: Jul 27 09:23:46 2026 GMT
            Not After : Jul 28 10:24:46 2026 GMT
        Subject: CN=5343F417321B8790350BCCEB8AAA538BA2D1CEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:80:45:22:a9:fc:7f:eb:55:a0:ad:75:99:
                    86:d3:20:43:5e:6a:f5:e7:82:d9:2b:7c:3c:c1:00:
                    87:a8:98:24:ad:d1:fd:84:78:b8:55:6d:18:cc:92:
                    c7:42:88:6b:b9:e6:fb:6c:e5:6e:22:6d:21:0b:05:
                    34:d3:63:73:03:25:4b:69:2f:6e:85:ce:98:e2:76:
                    4e:52:df:95:61:f9:c2:45:f2:b6:53:34:a9:64:51:
                    a7:79:25:79:f3:28:5a:fb:6b:1d:1d:aa:25:31:45:
                    f9:dc:a6:58:ba:69:09:38:c5:27:97:7e:ce:07:e2:
                    38:59:58:43:fb:13:ea:dd:b5:3e:1a:3c:e4:3c:3c:
                    ce:2b:2a:bb:bc:eb:d8:33:55:b8:54:c7:9c:16:7b:
                    2a:86:24:3d:b8:ea:27:77:34:f6:0d:f4:0f:80:87:
                    aa:17:06:87:45:7f:1f:a6:6e:8b:c9:22:49:52:1b:
                    f2:f7:fd:c7:e0:2f:40:cb:2b:a0:44:29:fb:a0:6a:
                    57:f6:67:73:4c:f6:c3:d0:84:ce:27:3a:fc:d9:29:
                    3e:31:eb:f4:b5:63:c0:59:02:46:5a:9e:da:3c:0d:
                    d8:da:37:9e:26:a0:38:e5:71:70:0b:c4:f2:65:c0:
                    c1:d5:bf:1e:a9:a5:b6:ce:99:5c:e7:10:b4:35:4c:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:F4:17:32:1B:87:90:35:0B:CC:EB:8A:AA:53:8B:A2:D1:CE:C4
            X509v3 Authority Key Identifier:
                keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:26:95:d0:fc:27:bc:ec:a9:10:93:4f:e3:7b:e6:99:2e:
         50:97:89:e3:4e:b0:6d:7d:8e:85:75:4b:da:3d:65:c4:01:9d:
         07:46:a4:c4:c3:86:b0:71:5c:7c:2b:3c:32:7b:a6:2d:e0:f5:
         a0:0b:3e:9a:d2:85:1a:70:e9:4f:e1:b2:2e:f0:c5:4d:f3:16:
         b7:25:cd:07:d9:c4:4e:4b:51:85:a2:03:c5:57:dd:be:76:33:
         f7:84:69:9f:56:c9:6e:60:2a:bc:01:4c:18:75:e3:88:26:ef:
         cc:45:e6:05:5d:47:74:b1:26:89:e2:f3:cd:c8:37:be:4c:ad:
         eb:40:09:cb:76:58:12:4c:ab:87:fe:51:4d:fc:5f:bd:ee:e9:
         ae:00:60:37:f2:0c:3c:de:c2:52:38:8e:ab:bf:b5:4b:84:e9:
         10:a4:82:91:40:77:55:fc:f8:53:80:3f:aa:7d:dc:19:e0:e8:
         ab:93:f1:2d:5b:8d:e0:0f:b5:63:76:6a:f3:e9:07:ea:29:cb:
         6c:88:75:98:d6:e2:22:14:57:96:32:b0:1a:cd:ad:e6:f1:30:
         75:15:b4:4b:83:ec:f8:a9:f2:d1:24:50:fd:0f:43:b4:aa:9f:
         91:df:78:64:98:b7:a2:c6:8b:f2:aa:09:f5:ff:c8:33:8c:16:
         3a:a5:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:30 2026 by rpki-client