Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
File:                     24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft (raw, json)
Hash identifier:          W9ohKNBxzxzTERdgw0PnAhh3NMjFpG3DFxGf0k/AHWM=
Subject key identifier:   10:DE:A9:2B:10:E7:C3:9A:7E:0B:5F:0C:04:30:7B:6F:C8:9B:22:63
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Certificate issuer:       /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial:       06CF983D4ACD8FCEBE08061C87D09005DE6DD10D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
Manifest number:          3F
Signing time:             Tue 14 Jul 2026 13:06:20 +0000
Manifest this update:     Tue 14 Jul 2026 13:01:20 +0000
Manifest next update:     Wed 15 Jul 2026 15:36:20 +0000
Files and hashes:         1: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (hash: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=)
                          2: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (hash: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc=)
                          3: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (hash: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ=)
                          4: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl (hash: Isoc75C+tZo1ov4mZCRHKUKahEsT6QJsFBqMBc9afJ8=)
                          5: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (hash: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4=)
                          6: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (hash: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=)
                          7: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (hash: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=)
                          8: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (hash: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg=)
                          9: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (hash: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU=)
                          10: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (hash: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=)
                          11: 3230332e3139322e31352e302f32342d3234203d3e203137373831.roa (hash: WUwGCIiUne8yyxM/WabENAtajJDwAdTfUC/KCT6uOXI=)
                          12: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (hash: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo=)
                          13: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (hash: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=)
                          14: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (hash: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro=)
                          15: 3230332e3139322e31312e302f32342d3234203d3e203137373831.roa (hash: 45xCYyRQyjhCRC0vlSjwuILRfUgMsSd1dvyBXnBRchU=)
                          16: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (hash: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g=)
                          17: 3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (hash: V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:98:3d:4a:cd:8f:ce:be:08:06:1c:87:d0:90:05:de:6d:d1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
        Validity
            Not Before: Jul 14 13:01:20 2026 GMT
            Not After : Jul 15 15:36:20 2026 GMT
        Subject: CN=10DEA92B10E7C39A7E0B5F0C04307B6FC89B2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:d9:8d:a9:34:27:57:78:57:a1:28:5f:6c:
                    60:29:ff:8d:6f:40:7b:ee:85:b1:08:5e:0e:73:13:
                    42:1f:91:82:9a:2f:45:78:65:95:7a:9f:6d:43:3f:
                    7b:07:3b:be:5f:05:06:77:96:64:08:62:44:66:1f:
                    7e:8a:92:5d:ac:84:07:87:51:fc:c4:df:9d:a8:ca:
                    16:0b:6f:8c:41:ba:1c:e0:2c:2f:20:d1:99:36:e8:
                    0f:ad:c5:4a:6d:fd:c8:bf:00:62:8a:59:61:a2:1e:
                    b0:4f:94:80:16:51:04:24:f2:88:c1:e2:a3:29:32:
                    69:dc:fc:79:e7:3c:0d:c3:16:53:3a:76:64:f8:4c:
                    ae:8a:e3:0c:ca:c2:81:28:a5:29:e7:4a:a9:eb:34:
                    42:f0:6d:a7:77:66:41:c1:b7:ac:b6:43:63:bf:5e:
                    28:12:88:08:c8:3d:1f:d2:d6:40:1d:f7:12:f3:a2:
                    d8:ce:fe:7d:f1:14:60:e2:4b:cd:a5:66:e6:61:4c:
                    12:e6:2c:6a:de:35:22:7b:e7:00:f3:88:c6:62:bf:
                    df:e0:39:a7:58:7b:d0:9f:8c:d3:7a:aa:fe:dd:42:
                    49:da:ad:03:40:8c:bb:ee:42:e0:d7:81:69:f7:4d:
                    91:7c:64:37:65:7d:fa:59:f0:b7:fb:e4:2a:41:27:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:A9:2B:10:E7:C3:9A:7E:0B:5F:0C:04:30:7B:6F:C8:9B:22:63
            X509v3 Authority Key Identifier:
                keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:de:8e:c6:d8:4c:48:e0:22:1c:70:e0:1d:97:22:a8:75:51:
         f8:6d:db:3d:a5:e6:b7:e5:e3:5d:4f:4e:37:c9:23:a5:5c:5c:
         d5:8b:c6:07:be:37:39:1f:43:94:45:fa:40:19:8c:d6:83:0c:
         23:37:de:9b:8c:97:ab:78:df:7e:ca:58:12:db:0b:e7:76:bc:
         e9:7a:cc:d0:2c:35:84:b1:1e:5f:0f:c8:5e:80:77:6c:82:51:
         90:fc:36:2c:ee:d1:24:4a:b5:bf:37:b3:04:83:bd:14:a5:59:
         dc:98:8a:f3:27:7d:a0:37:4e:3e:04:6b:1b:11:1e:bd:83:30:
         fa:7e:67:7d:3d:42:79:99:57:5f:26:6b:84:60:fd:e3:84:9d:
         9e:41:2a:fd:0e:7f:a6:22:01:63:9b:ee:ab:b7:c3:ef:29:75:
         b8:6c:33:1d:2a:75:95:2c:6d:78:7d:b2:93:1d:c1:03:55:d8:
         1d:32:bb:19:0c:56:98:db:df:18:7c:f3:36:79:10:2a:41:de:
         1f:25:49:cc:87:0a:80:2a:22:44:d8:bb:f6:86:c4:79:a8:a8:
         2d:15:45:72:1f:16:d2:ea:48:e1:fe:8e:44:76:fd:7c:3c:16:
         b4:bd:0a:68:ed:bc:86:6f:ff:17:ba:e9:9f:df:ce:24:32:2e:
         9c:aa:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:55 2026 by rpki-client