Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
File:                     F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json)
Hash identifier:          /bdE7hpKXdbjkD/ZjsN3GSTWkX7GcBLBxZrLZ45pdGs=
Subject key identifier:   BD:97:23:0F:7F:05:5F:35:7A:E5:12:DB:A9:F2:72:7A:66:28:C5:32
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       458D20C11474EAA2742A997CB455A3B68D40ACB2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
Manifest number:          1E
Signing time:             Tue 14 Jul 2026 09:05:55 +0000
Manifest this update:     Tue 14 Jul 2026 09:00:55 +0000
Manifest next update:     Wed 15 Jul 2026 10:43:55 +0000
Files and hashes:         1: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=)
                          2: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=)
                          3: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: SmKpx+rOze4DE1rrk5eXNyiRv1gKBkJspyXeQaWIbcA=)
                          4: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=)
                          5: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=)
                          6: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=)
                          7: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=)
                          8: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=)
                          9: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=)
                          10: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=)
                          11: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:20:c1:14:74:ea:a2:74:2a:99:7c:b4:55:a3:b6:8d:40:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jul 14 09:00:55 2026 GMT
            Not After : Jul 15 10:43:55 2026 GMT
        Subject: CN=BD97230F7F055F357AE512DBA9F2727A6628C532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:52:e5:0c:10:22:7b:0d:4f:67:e5:94:d1:
                    aa:0f:89:4d:dd:14:0e:b5:27:d7:ad:7f:7a:c0:9e:
                    b9:02:92:b1:cf:f0:0b:2e:22:72:6b:fc:ce:46:6e:
                    4f:16:75:5b:17:38:8a:37:68:57:d7:3c:19:a8:bd:
                    c6:e5:d6:09:17:32:d1:98:9e:d4:84:09:ea:ed:35:
                    69:9d:39:86:6e:1e:b8:2c:7d:33:b1:0b:ac:48:7b:
                    82:b2:ca:4c:d5:40:a8:20:10:ac:05:7b:26:4c:bb:
                    ec:f0:b3:c4:bf:c2:5f:4e:49:90:f9:e2:97:61:ab:
                    4e:f4:43:b7:57:9d:b1:0a:d1:5b:ce:91:c2:a6:0a:
                    fc:f0:7c:00:91:34:bc:14:7d:f3:54:b8:00:d0:30:
                    68:cb:36:2f:14:bf:cf:e0:53:0b:7d:fc:7f:e2:7a:
                    5c:4a:a2:a7:0b:85:7c:c9:40:4d:f2:cc:93:4e:9d:
                    92:d8:89:81:81:a0:89:f7:47:92:ff:e9:c0:5c:fb:
                    f0:ea:c6:dd:0c:42:a4:e5:94:1b:63:3c:57:03:67:
                    ba:a9:fc:4e:e8:64:c1:49:f3:7a:81:3a:bb:23:de:
                    70:1a:78:5b:1b:6b:f3:52:5a:18:2c:8c:16:73:25:
                    36:4e:ce:d4:f3:63:9e:59:2e:a0:61:17:c7:72:68:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:97:23:0F:7F:05:5F:35:7A:E5:12:DB:A9:F2:72:7A:66:28:C5:32
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:fb:14:9e:23:90:cb:ae:21:9a:69:d0:5a:a8:6e:a9:92:
         1f:09:45:b5:0a:eb:86:8e:56:e7:da:bf:07:81:98:7f:da:f4:
         06:37:03:c3:26:9a:95:5b:05:8a:d4:b4:a5:60:39:f2:b8:92:
         99:e1:6f:c0:3c:e0:9b:1b:12:c5:51:f3:36:17:20:20:56:be:
         ab:b9:0a:c4:78:ea:80:d0:07:19:84:3e:95:2c:75:6e:0b:02:
         d9:04:58:34:f3:45:23:10:f8:38:1e:9f:02:f8:0d:88:fe:25:
         de:71:1b:a2:75:30:07:17:12:74:ba:cb:21:e0:00:a0:d1:dd:
         87:7e:4b:51:49:e3:de:f7:8c:dd:0b:5f:a6:66:81:48:be:c7:
         fb:f0:98:67:f9:14:03:78:3f:15:72:ff:6b:7a:35:a6:ff:b7:
         48:fc:b0:a5:51:6e:ad:76:b8:a0:1a:49:b4:76:9c:24:fa:a0:
         86:51:f3:a3:41:fb:2d:a1:1d:bb:88:49:b1:fb:27:17:63:da:
         06:07:36:e9:aa:7d:56:55:ef:3d:36:58:f9:e9:a7:1c:c0:68:
         0e:a0:9e:ac:83:29:bf:b9:51:e3:6a:aa:33:2d:4b:f6:a2:0e:
         cb:1f:90:46:41:d9:41:e9:9c:0e:95:a6:82:41:5d:35:c9:a5:
         cb:ae:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:01:35 2026 by rpki-client