Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
File:                     FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json)
Hash identifier:          kNL/tkP4O+hbW4TcBG4UJMOoV/bRNFOn+MYKtLINzWk=
Subject key identifier:   79:07:BD:A9:E7:E3:EB:AB:C9:36:CB:CD:0F:06:88:00:64:D7:44:8E
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Certificate issuer:       /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial:       6C91BEDA9C55EE0CEF147A0AADD3C4CD426BE673
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 06:38:37 +0000
Manifest this update:     Mon 27 Jul 2026 06:33:37 +0000
Manifest next update:     Tue 28 Jul 2026 06:42:37 +0000
Files and hashes:         1: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=)
                          2: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=)
                          3: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=)
                          4: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=)
                          5: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=)
                          6: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=)
                          7: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=)
                          8: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=)
                          9: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: QbHPXXTCEwXrCMAq7XSfDHKiV/DJFylrM1UnCC/ImEI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 06:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:be:da:9c:55:ee:0c:ef:14:7a:0a:ad:d3:c4:cd:42:6b:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
        Validity
            Not Before: Jul 27 06:33:37 2026 GMT
            Not After : Jul 28 06:42:37 2026 GMT
        Subject: CN=7907BDA9E7E3EBABC936CBCD0F06880064D7448E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:0b:a6:38:60:84:18:c5:7b:f5:ea:d1:68:
                    50:ad:b4:75:60:a5:33:08:77:78:3d:58:33:34:75:
                    9e:09:98:bc:d0:3e:cc:54:4d:b3:70:ce:bd:7f:d8:
                    36:9f:2e:5a:1e:5a:9d:ba:b9:d0:d7:6d:bd:6d:13:
                    42:65:5c:1f:ed:ed:29:cf:a0:63:64:74:cd:2e:52:
                    7d:d2:da:2a:8c:4c:41:64:c8:3f:f0:4d:d8:89:a1:
                    d1:66:6a:eb:66:7a:9b:e2:a8:fa:59:ae:6d:44:c2:
                    58:6e:8d:76:c9:1a:b1:5e:c0:55:39:37:9f:22:34:
                    c1:b7:cf:39:11:ab:45:ef:6e:57:19:38:bb:70:f4:
                    74:40:a1:e9:0a:47:35:12:e4:7f:2a:93:3a:4b:47:
                    f8:c3:f9:fe:b0:ed:1a:b7:68:49:7e:e1:2a:a1:28:
                    0e:63:1d:07:7c:ef:be:b9:1e:0a:9f:4b:7e:35:0b:
                    db:18:9e:68:af:5e:01:70:2f:a9:6c:d6:f5:df:62:
                    f2:e7:3b:aa:97:83:2d:2e:ad:d2:f1:90:60:d2:f9:
                    52:f9:40:fc:5e:a9:b7:5b:58:17:b0:33:06:b1:a3:
                    4e:b3:27:30:cc:61:9a:2b:5f:60:e7:d9:a4:bb:62:
                    05:b1:bd:7e:cb:20:95:34:b2:1f:b4:e2:e2:69:3a:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:BD:A9:E7:E3:EB:AB:C9:36:CB:CD:0F:06:88:00:64:D7:44:8E
            X509v3 Authority Key Identifier:
                keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:84:6c:df:4e:25:47:2c:97:9c:29:d2:60:92:7e:5d:34:
         47:87:e9:49:ec:b9:bc:f9:55:d2:ac:ff:87:a2:aa:bf:51:0c:
         58:25:eb:00:82:e9:e9:1d:ca:bd:82:9b:a3:c7:13:f6:23:6f:
         41:e6:46:90:2c:40:a8:34:f1:b5:98:dc:d1:f3:cf:99:16:c2:
         ab:b6:22:6a:36:3c:48:c2:3c:f6:be:d6:98:b7:82:34:87:92:
         45:3d:35:38:9c:e4:ac:84:f6:eb:9f:c1:13:e3:c2:ff:fc:69:
         1c:81:91:ce:08:f5:ed:83:db:ac:3f:fe:24:ee:e1:3a:75:ce:
         48:e8:a5:26:d0:e4:95:92:6c:f1:4d:e7:17:b9:99:25:e7:2a:
         4e:c4:a0:8e:65:4c:e7:49:5c:01:5b:84:c8:7d:94:4c:10:7c:
         5d:dd:39:cc:8a:ce:04:3f:bb:a5:81:9c:63:16:ce:8b:3a:c2:
         d0:0a:50:0a:bb:8a:55:f2:84:83:ad:fa:f3:55:b1:54:ae:e9:
         08:c7:fc:c8:5f:5c:ee:11:61:c2:ac:80:8b:e2:88:c3:d5:80:
         36:35:6b:87:c3:c1:d0:bb:a6:46:94:46:8b:9e:fb:84:8a:e4:
         25:37:18:34:d8:86:c1:50:90:85:2f:e7:09:8c:fe:e8:e3:85:
         48:f4:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:14:38 2026 by rpki-client