Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
File:                     7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json)
Hash identifier:          2QL8UY5hfYynAZaZckdZaN5eBlxSXTi6ywYmyC/+El0=
Subject key identifier:   53:2A:30:4A:60:0E:32:08:17:A6:A0:68:D0:02:E9:78:F7:75:53:37
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Certificate issuer:       /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial:       7E756846E21774BDD2804ADA6472225B13EDB95D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
Manifest number:          D8
Signing time:             Tue 07 Jul 2026 05:28:30 +0000
Manifest this update:     Tue 07 Jul 2026 05:23:30 +0000
Manifest next update:     Wed 08 Jul 2026 06:46:30 +0000
Files and hashes:         1: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=)
                          2: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=)
                          3: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=)
                          4: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=)
                          5: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: BIUYIb8aAF9xqgNdDgikTR4G71VmRzqSr+qy+0dBLn0=)
                          6: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=)
                          7: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=)
                          8: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 06:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:68:46:e2:17:74:bd:d2:80:4a:da:64:72:22:5b:13:ed:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
        Validity
            Not Before: Jul  7 05:23:30 2026 GMT
            Not After : Jul  8 06:46:30 2026 GMT
        Subject: CN=532A304A600E320817A6A068D002E978F7755337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:d6:1e:49:fb:8f:08:cf:b7:2c:e7:13:c3:
                    f7:47:4e:db:2c:1e:4d:80:ad:a9:b1:42:3c:5f:03:
                    f8:ba:30:3b:ca:c7:e9:fa:f1:3b:e9:70:40:00:cf:
                    c5:71:0a:9a:45:92:a3:88:be:7e:6d:49:ab:7a:ae:
                    39:29:bb:c3:c2:51:8f:7c:c3:57:b4:f2:87:96:10:
                    28:62:5d:8d:85:60:86:c8:6d:5e:54:f2:6b:9c:68:
                    7c:8b:74:29:4c:0d:95:d6:ac:55:d3:aa:6d:5f:de:
                    57:35:e1:ae:7b:5d:79:08:23:c1:b2:52:27:69:c5:
                    a6:61:32:7c:93:ca:c9:18:1e:4e:6c:ad:63:e9:c6:
                    25:4d:57:b1:b3:4c:33:24:05:69:38:a6:9f:32:d8:
                    09:62:68:90:d5:96:ed:9d:9f:75:b4:6e:ea:e6:60:
                    18:04:14:70:d5:c3:d4:d7:f4:f8:21:5d:13:a8:53:
                    12:c5:aa:d2:d4:23:d7:b8:cd:81:d6:b6:d3:1a:ba:
                    e9:ac:8f:a4:7c:40:05:c0:e4:71:9d:e4:4b:89:73:
                    d2:f3:ef:94:d4:22:7f:25:8c:e6:40:19:43:65:f6:
                    38:e0:70:ac:9e:85:0c:45:8c:29:3d:af:d9:be:ab:
                    df:da:1e:54:29:9d:04:6f:38:a7:7f:a3:72:ec:02:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:30:4A:60:0E:32:08:17:A6:A0:68:D0:02:E9:78:F7:75:53:37
            X509v3 Authority Key Identifier:
                keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:19:6d:d4:f8:4b:20:5f:fc:59:57:89:4d:17:2b:29:a9:
         f3:2a:d6:df:8f:96:c0:9a:a4:c8:b3:ed:d6:f0:d5:cf:14:ab:
         6a:2a:a5:10:e9:b3:29:98:7a:73:09:b3:c6:75:4c:de:f8:9f:
         a9:d5:89:32:d1:01:2f:d1:b3:bf:62:1c:65:21:c4:99:a3:d6:
         27:b6:76:6b:82:86:a6:e3:3c:bd:b3:11:41:77:a8:c5:26:fd:
         47:b0:f6:1a:7c:c0:f6:b7:13:e4:cc:45:63:68:20:f0:02:c5:
         48:92:09:0f:cc:b8:22:cb:ac:78:d3:ba:5a:1f:6b:db:78:26:
         54:82:26:ba:7d:da:0f:04:06:71:15:8f:f4:d8:ea:bc:75:6f:
         ad:1d:42:3a:62:fe:76:0a:e7:ba:ef:a5:9c:ce:5f:78:40:7c:
         12:5f:f3:15:7c:76:c8:88:c2:0c:59:be:f0:05:0a:45:74:db:
         e5:3d:ed:e0:b0:d3:b4:66:24:49:a8:39:05:cc:cd:e9:ed:8a:
         4e:74:22:44:82:6c:ce:16:61:34:dc:7b:4c:7e:03:06:b3:a8:
         fc:78:d3:37:99:21:cd:ad:7d:7f:70:b9:0d:f0:7b:e7:c8:ac:
         da:0d:5d:0a:6f:a5:5d:d4:03:79:ce:c0:87:92:09:c9:1f:ab:
         04:a1:9e:89
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfnVoRuIXdL3SgEraZHIiWxPtuV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx
Q0U0RTk1RDAeFw0yNjA3MDcwNTIzMzBaFw0yNjA3MDgwNjQ2MzBaMDMxMTAvBgNV
BAMTKDUzMkEzMDRBNjAwRTMyMDgxN0E2QTA2OEQwMDJFOTc4Rjc3NTUzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCas9YeSfuPCM+3LOcTw/dHTtss
Hk2AramxQjxfA/i6MDvKx+n68TvpcEAAz8VxCppFkqOIvn5tSat6rjkpu8PCUY98
w1e08oeWEChiXY2FYIbIbV5U8mucaHyLdClMDZXWrFXTqm1f3lc14a57XXkII8Gy
UidpxaZhMnyTyskYHk5srWPpxiVNV7GzTDMkBWk4pp8y2AliaJDVlu2dn3W0burm
YBgEFHDVw9TX9PghXROoUxLFqtLUI9e4zYHWttMauumsj6R8QAXA5HGd5EuJc9Lz
75TUIn8ljOZAGUNl9jjgcKyehQxFjCk9r9m+q9/aHlQpnQRvOKd/o3LsAngFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUyowSmAOMggXpqBo0ALpePd1UzcwHwYDVR0j
BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB
NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC83RjMzNUVFNEEzM0Qw
N0M0MkMzOEM0NUVDNjQ4QTZGOTFDRTRFOTVELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC0ZbdT4SyBf
/FlXiU0XKymp8yrW34+WwJqkyLPt1vDVzxSraiqlEOmzKZh6cwmzxnVM3vifqdWJ
MtEBL9Gzv2IcZSHEmaPWJ7Z2a4KGpuM8vbMRQXeoxSb9R7D2GnzA9rcT5MxFY2gg
8ALFSJIJD8y4IsuseNO6Wh9r23gmVIImun3aDwQGcRWP9NjqvHVvrR1COmL+dgrn
uu+lnM5feEB8El/zFXx2yIjCDFm+8AUKRXTb5T3t4LDTtGYkSag5BczN6e2KTnQi
RIJszhZhNNx7TH4DBrOo/HjTN5khza19f3C5DfB758is2g1dCm+lXdQDec7Ah5IJ
yR+rBKGeiQ==
-----END CERTIFICATE-----
Generated at Tue Jul 7 14:44:39 2026 by rpki-client