Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File:                     A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier:          og/Qrdm1c+jAiFmVGz86wd3otnXt8e5wmjQc8pJ1RSk=
Subject key identifier:   1F:0A:AB:8E:CC:3D:AC:AF:4B:BB:F6:7E:91:E5:2A:6F:93:D9:06:73
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer:       /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial:       23FCB914E3846092E6FD6578BA6C49BB700D3191
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number:          73
Signing time:             Tue 14 Jul 2026 02:45:14 +0000
Manifest this update:     Tue 14 Jul 2026 02:40:14 +0000
Manifest next update:     Wed 15 Jul 2026 04:20:14 +0000
Files and hashes:         1: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
                          2: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
                          3: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
                          4: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
                          5: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
                          6: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
                          7: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
                          8: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: nUgVlPy0n8zijMYKbGVFEWF9QhB7beMvbRAtGtlPzC0=)
                          9: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
                          10: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fc:b9:14:e3:84:60:92:e6:fd:65:78:ba:6c:49:bb:70:0d:31:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
        Validity
            Not Before: Jul 14 02:40:14 2026 GMT
            Not After : Jul 15 04:20:14 2026 GMT
        Subject: CN=1F0AAB8ECC3DACAF4BBBF67E91E52A6F93D90673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e0:85:cd:7f:b7:5f:9a:11:60:35:dd:cd:3f:
                    ca:b7:e3:14:2c:8d:3e:ee:72:17:b4:40:3b:0a:47:
                    c9:53:83:ca:89:71:26:7d:90:4a:38:d5:96:50:d8:
                    8f:7c:bc:c9:f7:ab:af:18:88:82:c7:1f:5c:25:99:
                    b3:23:78:b7:2d:1d:25:97:db:f3:ee:ae:1b:85:a0:
                    d1:e9:e1:83:1f:8e:99:78:bd:1b:55:1d:05:1b:c4:
                    a5:5c:f1:b8:5d:a4:78:f1:90:fa:28:ff:a7:f0:00:
                    96:20:4e:59:7a:24:43:9b:38:07:79:ae:be:aa:45:
                    75:b1:a0:80:21:23:4f:e3:c0:c1:db:e6:5f:06:e1:
                    4a:ae:49:d3:6f:7f:0a:1b:84:13:d6:82:03:0a:56:
                    ef:f6:56:60:54:cc:55:c4:06:c9:f1:ca:eb:be:21:
                    6c:23:d7:a4:f2:15:75:16:76:39:f9:e3:17:82:19:
                    97:94:33:0a:cf:35:45:14:b1:84:92:60:7a:8b:0d:
                    4f:cd:9d:37:bc:3e:85:8f:41:54:d9:b7:45:8a:83:
                    a4:7a:b3:b3:93:bb:0d:76:cc:fe:5d:6a:95:e3:ab:
                    f6:e8:d0:33:b3:03:ec:1e:91:86:b6:46:e3:5f:4a:
                    1b:c8:3b:6e:82:04:e0:fc:46:4a:7b:ae:16:65:92:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:AB:8E:CC:3D:AC:AF:4B:BB:F6:7E:91:E5:2A:6F:93:D9:06:73
            X509v3 Authority Key Identifier:
                keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:a3:12:72:97:3c:a3:99:04:1b:ca:21:d2:ce:ee:11:04:
         fc:af:7d:2c:12:7b:bd:b7:5e:8f:cd:b3:7e:23:a4:73:b5:b5:
         49:cf:d4:62:dd:47:b2:81:57:7f:8e:12:e1:a6:be:7e:cc:a6:
         30:13:a6:26:d8:1f:21:4d:bd:b6:63:d0:5d:b2:5c:01:68:09:
         12:57:09:91:47:b9:8b:85:e5:6b:08:a4:7f:70:53:39:6c:6e:
         64:fd:c5:8d:51:c3:b4:8f:c9:c4:66:f5:62:8e:59:31:33:43:
         2c:83:b2:9b:bf:5e:4b:af:aa:ef:47:61:43:a6:1d:4f:41:5f:
         c0:66:ef:74:37:d6:b1:71:1f:24:61:72:a6:8f:1f:1f:8d:42:
         34:23:64:d4:f1:bf:da:70:3d:81:66:3b:f1:46:a4:9e:e3:c3:
         fa:fd:7c:05:c2:20:9c:6f:56:3c:57:1d:2c:9a:f6:a9:cc:6b:
         0a:83:07:0a:10:07:92:ef:fb:b7:a4:31:91:c4:3f:ee:da:84:
         70:fe:be:8a:4c:9b:f2:27:ea:4c:b3:23:ab:90:04:d2:79:da:
         1c:f9:55:d1:8e:7d:cf:76:b2:a7:92:4f:a7:4f:24:fa:49:dc:
         93:56:b5:17:7c:c1:00:d6:09:5b:f5:ff:45:8c:c1:71:6c:c3:
         67:68:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:03:59 2026 by rpki-client