Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
File:                     B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json)
Hash identifier:          tL6n9naPmgtg9q6T94l2FHglQxcmbXu9ENk9cfg+0Fw=
Subject key identifier:   07:C5:B5:2D:EC:98:86:70:91:E5:47:0E:5C:69:9A:BC:9F:35:4D:B2
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       7DA45FACAF85911AD275FAD5D5E60DA1152B011B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
Manifest number:          51
Signing time:             Fri 21 Aug 2026 15:55:03 +0000
Manifest this update:     Fri 21 Aug 2026 15:50:03 +0000
Manifest next update:     Sat 22 Aug 2026 16:47:03 +0000
Files and hashes:         1: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=)
                          2: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=)
                          3: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=)
                          4: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=)
                          5: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=)
                          6: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=)
                          7: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=)
                          8: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: Msofn+V90E4tM6yZIV9GldtFL9MSgrlX6yNAl+lj2tI=)
                          9: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a4:5f:ac:af:85:91:1a:d2:75:fa:d5:d5:e6:0d:a1:15:2b:01:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Aug 21 15:50:03 2026 GMT
            Not After : Aug 22 16:47:03 2026 GMT
        Subject: CN=07C5B52DEC98867091E5470E5C699ABC9F354DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:46:2a:24:18:68:f0:e3:0b:62:53:a1:39:
                    b6:87:3f:14:9e:ec:77:d4:a7:f9:6f:f0:c9:8d:1b:
                    03:a6:cc:d1:8d:2b:4c:8a:8a:54:b0:c4:f8:ea:11:
                    67:38:7d:29:76:cb:cc:bb:04:08:a9:ea:98:fc:26:
                    c4:d0:9b:5a:72:a9:f0:8d:ad:33:cf:26:9e:91:e6:
                    55:52:08:ba:93:9b:61:57:3d:58:55:30:44:62:65:
                    65:03:4f:b6:bb:25:ff:2a:9c:99:cb:21:70:6d:d2:
                    d2:2a:42:5c:4f:f3:b6:eb:48:a9:73:1b:ea:31:85:
                    a8:7f:24:36:ac:da:a8:fd:b2:ba:9c:41:49:18:68:
                    d0:10:91:f2:d3:a7:17:19:20:5b:44:5f:bd:5f:25:
                    af:73:a5:cb:50:d7:24:7d:b5:9a:cc:d1:4d:68:c6:
                    dd:71:e5:fa:26:09:3a:20:d3:47:4b:57:97:ac:4e:
                    1b:6a:35:74:18:f7:44:f2:3b:01:28:6f:36:ad:39:
                    9c:e0:96:6d:9f:4d:ae:70:68:24:3e:60:28:ee:de:
                    a2:2b:64:d8:3b:b3:db:c6:4d:23:78:36:37:ee:4c:
                    af:53:ed:f9:29:a8:47:fe:d1:91:15:5e:21:ae:1c:
                    78:8d:ef:e8:e9:1a:7f:c9:15:7e:10:13:be:5b:c5:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:B5:2D:EC:98:86:70:91:E5:47:0E:5C:69:9A:BC:9F:35:4D:B2
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:62:1e:ac:48:3f:55:90:70:5c:8d:cd:f0:ec:c2:85:2e:f5:
         c3:7e:72:c1:30:c8:f5:c5:cb:2e:46:f2:8c:e3:5f:e4:66:82:
         37:a0:46:af:1f:23:55:21:01:3c:ee:69:b3:1c:c5:61:89:5f:
         ca:a2:fe:98:87:97:61:cf:23:a5:39:0c:61:57:dc:3f:c8:d5:
         c4:45:af:e9:c1:47:71:c5:2a:c7:f1:ea:d0:6d:12:7c:f9:21:
         5c:cb:c5:8e:10:79:e5:10:55:68:c5:ff:8b:14:ed:76:78:c3:
         db:b9:f1:4b:e5:07:4d:6d:09:a1:ea:3b:7e:14:92:b6:8c:e7:
         77:0b:1a:8d:85:f7:85:e7:7d:69:73:f6:ab:36:02:37:6b:94:
         85:37:74:50:46:9f:c7:0e:ad:e2:a4:bc:ff:72:c7:9d:45:f7:
         8f:4c:7c:f9:d3:5e:f9:c9:a2:a7:b7:4e:88:7c:1f:dc:dc:93:
         ab:b6:94:d7:c1:ad:34:86:96:b6:db:37:f9:07:15:a3:81:d2:
         78:db:72:27:60:16:4e:aa:1c:c6:e2:19:ae:c5:d3:ba:48:93:
         e3:25:7f:a0:e1:11:50:0b:f1:fa:07:d0:98:8d:18:a9:01:b9:
         2b:42:c9:d9:df:77:5e:c9:41:ca:af:e1:99:a0:3f:e0:6d:49:
         a1:4e:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:18:46 2026 by rpki-client