Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
File:                     3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json)
Hash identifier:          gNnzLY4RCwnG4HZzXYYCFA8xh+115MgRm5bxUCLf8Sw=
Subject key identifier:   F5:9B:D4:3A:1E:2D:40:91:7D:2C:63:5D:02:88:CC:5D:50:C9:14:06
Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
Certificate issuer:       /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Certificate serial:       0CD52FCD9D1F1A443F441F4DAA3C64CAE33DA5BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
Manifest number:          B7
Signing time:             Tue 14 Jul 2026 17:41:49 +0000
Manifest this update:     Tue 14 Jul 2026 17:36:49 +0000
Manifest next update:     Wed 15 Jul 2026 18:19:49 +0000
Files and hashes:         1: AS56046.roa (hash: L/+OzcU657ZvVAFbSvWJkNX+NbH+6lJJlQ9WFvgPUaw=)
                          2: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=)
                          3: AS9808.roa (hash: WhejpRktrBp4DhuCjSqxXKBeqsCvxI/AeCBWlA0jPh0=)
                          4: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=)
                          5: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=)
                          6: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=)
                          7: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=)
                          8: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: Twg5Fko6GJ6hjm9QqPQV6En4uQM4iHhqQL4YP39toIs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 18:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d5:2f:cd:9d:1f:1a:44:3f:44:1f:4d:aa:3c:64:ca:e3:3d:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
        Validity
            Not Before: Jul 14 17:36:49 2026 GMT
            Not After : Jul 15 18:19:49 2026 GMT
        Subject: CN=F59BD43A1E2D40917D2C635D0288CC5D50C91406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a6:16:51:32:85:f7:39:10:06:ed:d1:b5:54:
                    a1:88:1f:c7:7d:fc:68:5c:de:dd:fd:47:16:3b:d1:
                    04:5a:7f:5c:41:f2:cf:27:27:06:17:a8:a6:ff:40:
                    bb:d6:94:2e:aa:4c:8c:23:50:81:c1:49:38:44:e1:
                    f8:fe:51:2c:8d:78:28:cb:7a:e7:ed:b4:c2:34:bf:
                    69:fc:6f:5e:f8:de:f4:96:69:72:1e:e0:72:8f:95:
                    07:d8:73:50:d2:3e:fd:ea:bd:0b:73:99:a5:12:1d:
                    6a:44:b7:3f:2a:0c:98:34:a7:a4:7d:e3:df:8b:8f:
                    eb:00:c3:88:09:86:9f:4f:6a:76:7b:c6:af:9f:d9:
                    3e:0d:48:b0:1e:8f:9b:26:9b:28:01:1c:98:35:26:
                    2a:6a:a6:34:03:aa:7c:5f:72:59:7d:a3:37:c3:ad:
                    4f:2a:33:0e:2a:f8:d6:71:cd:68:95:16:79:6b:de:
                    ae:91:6f:90:d2:25:26:19:16:ac:57:3d:3e:39:d6:
                    9f:c4:4f:25:63:9c:1e:8f:39:b1:b1:27:df:a4:78:
                    42:c8:ec:60:18:56:eb:57:6e:c9:d0:0f:53:cf:57:
                    42:a2:eb:8c:bb:19:e8:64:40:f7:d2:4d:6f:c4:52:
                    72:59:77:82:a0:4d:09:9b:5b:dd:ef:2a:fb:51:9a:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9B:D4:3A:1E:2D:40:91:7D:2C:63:5D:02:88:CC:5D:50:C9:14:06
            X509v3 Authority Key Identifier:
                keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ec:80:d8:0d:a5:53:59:71:65:ef:96:ad:58:53:7a:07:45:
         fc:0e:96:ea:0d:02:58:ac:e3:66:a5:b5:4c:ca:c8:7c:86:6f:
         db:72:17:5d:be:77:98:02:35:3e:d4:6c:10:56:f9:52:6a:e6:
         dd:48:9d:10:03:1f:ee:1b:10:75:7b:ce:70:55:83:8b:a3:a2:
         07:fa:08:bb:aa:b4:be:f7:79:55:42:d4:67:40:88:7b:e1:c9:
         30:6b:8e:fe:b2:da:8c:7a:06:07:63:bd:ca:be:88:0a:84:fc:
         1d:fd:45:cb:51:64:46:41:b3:8f:5c:cb:84:9b:c0:6a:a8:9f:
         5a:96:e7:ce:f5:fb:ea:62:98:c4:63:7c:4a:92:69:1d:b1:48:
         68:a0:37:be:fc:a3:34:b8:83:7e:1c:a1:d5:e4:42:46:0f:d8:
         12:8e:40:75:87:c4:2d:da:8f:a4:9a:64:71:a1:d1:d9:bc:68:
         5e:0e:7b:0b:8e:b2:e3:7d:f1:b1:03:24:26:16:14:72:7e:4e:
         ab:94:a2:16:e7:b6:5d:94:9e:5b:b9:62:e2:13:10:40:f7:80:
         0b:66:07:31:ed:5f:38:4e:4c:f0:3f:cf:6e:e1:05:65:50:93:
         cb:71:18:8e:c0:7b:38:8e:aa:e1:f2:82:c3:df:1e:73:dd:a4:
         ec:3e:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:32 2026 by rpki-client