Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
File:                     721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json)
Hash identifier:          4rabdU1u8EdlZlukqTz933IbvvQqMIvywV8Bz2MUSVQ=
Subject key identifier:   D5:3C:FB:B3:C9:DD:D3:3B:72:0A:9C:94:B8:8A:64:DC:4B:A7:E9:5A
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Certificate issuer:       /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial:       509CBABAB5264D3FFFB4F3305FFA0965A29613E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
Manifest number:          1C
Signing time:             Sat 04 Jul 2026 22:41:12 +0000
Manifest this update:     Sat 04 Jul 2026 22:36:12 +0000
Manifest next update:     Mon 06 Jul 2026 01:40:12 +0000
Files and hashes:         1: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=)
                          2: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=)
                          3: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=)
                          4: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=)
                          5: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=)
                          6: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=)
                          7: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: /6qaKNf0Ri1aQ0RK2zTAWxKFbySZ6n7mqRR6dqis6xI=)
                          8: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=)
                          9: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 01:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:ba:ba:b5:26:4d:3f:ff:b4:f3:30:5f:fa:09:65:a2:96:13:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Validity
            Not Before: Jul  4 22:36:12 2026 GMT
            Not After : Jul  6 01:40:12 2026 GMT
        Subject: CN=D53CFBB3C9DDD33B720A9C94B88A64DC4BA7E95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:b8:75:02:8f:2c:5e:aa:a8:4c:0e:90:eb:
                    b2:9b:fa:3d:62:00:4e:f6:fe:35:50:56:e9:04:86:
                    b3:b2:d1:63:80:ca:05:ff:12:a0:ee:d4:5c:f8:70:
                    7a:01:61:5f:ba:e1:cb:f0:06:a1:7c:b6:42:fd:a6:
                    d6:a0:9a:92:a3:f5:17:6c:3a:fe:73:6b:f6:89:ec:
                    e8:bb:b3:16:29:c8:8f:fb:54:06:b8:bc:19:87:be:
                    36:17:6d:bf:82:16:58:83:ac:1f:79:a3:7a:c5:25:
                    53:1f:26:47:0f:2c:06:59:02:e9:92:5d:90:4b:5e:
                    52:40:8d:48:8f:37:5d:58:41:64:77:b4:c4:ef:5a:
                    e5:48:94:60:b9:83:6a:d4:9d:71:59:9b:30:d4:4e:
                    ca:a7:fa:51:b9:84:32:69:cf:ab:a0:c0:ea:4d:32:
                    7b:93:36:bc:84:0d:cc:3f:f5:de:a8:11:73:0d:69:
                    e4:8d:cc:8b:cb:c5:07:ca:4d:ed:6a:a8:c1:0c:56:
                    f5:50:74:c9:48:ce:ed:ba:85:45:b0:f4:69:70:e2:
                    69:4b:59:e1:d0:d3:3a:82:a0:fe:07:ed:10:a7:f1:
                    99:f3:a8:92:38:ab:07:56:73:b1:6c:fb:6d:15:89:
                    b8:ee:41:29:b5:46:74:13:f5:67:dd:d8:c9:db:f8:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3C:FB:B3:C9:DD:D3:3B:72:0A:9C:94:B8:8A:64:DC:4B:A7:E9:5A
            X509v3 Authority Key Identifier:
                keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:4d:2a:81:82:7c:e6:a7:32:f9:fa:6c:9e:f3:31:7d:65:
         a6:a0:fc:f5:1e:ce:d9:70:e8:c5:bf:c2:d5:a4:36:37:cc:ec:
         c9:ae:88:79:87:a6:43:8b:5a:d4:9d:c4:26:fa:48:dc:86:a2:
         ac:84:21:51:31:bc:6b:d1:51:85:0b:79:43:76:31:29:fa:2e:
         48:ca:28:78:e7:b2:e9:17:84:f2:fb:20:af:dc:6a:3c:12:96:
         86:f3:60:ca:2b:0c:ef:80:c4:7c:85:27:d7:3a:b9:22:4a:3b:
         16:39:d2:34:b5:df:43:1f:14:f1:26:97:c7:88:42:43:42:dd:
         d3:ca:6c:c5:69:cb:0c:82:3f:3e:ad:1b:9c:0b:72:50:35:2b:
         b9:87:6d:e5:0b:79:26:ae:93:3b:29:55:de:2b:4a:fb:5d:84:
         cd:d5:45:b9:91:59:a8:75:b5:bc:d6:0c:8b:a5:54:97:b9:64:
         61:fb:67:9e:e2:0d:be:d7:b1:53:28:74:bc:5f:44:e3:db:6b:
         e9:61:68:ef:a6:a3:89:6f:94:c6:17:ac:16:a3:e1:0e:79:8d:
         fe:3e:e5:69:5a:b5:0a:b7:99:c2:e0:f4:2d:41:8a:c5:f3:97:
         59:ae:43:73:93:e3:7e:db:4f:9b:9c:91:6b:dc:b0:5d:04:6b:
         eb:cb:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:18 2026 by rpki-client