Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
File:                     ECE7AD10B332E86702B118145564E6C084B9C744.mft (raw, json)
Hash identifier:          QkV9L1B4Gw+X39BGSTfFrZojC9yUU1QOBYetVtUv/I0=
Subject key identifier:   D5:C4:C3:D7:5C:A9:DD:5D:52:C9:77:30:3F:0D:3E:BB:D2:58:7C:58
Authority key identifier: EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44
Certificate issuer:       /CN=A919AAA00000/serialNumber=ECE7AD10B332E86702B118145564E6C084B9C744
Certificate serial:       6055785661831C898807C93E262DB5FBF96D3AEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
Manifest number:          07
Signing time:             Sun 05 Jul 2026 05:56:12 +0000
Manifest this update:     Sun 05 Jul 2026 05:51:12 +0000
Manifest next update:     Mon 06 Jul 2026 07:22:12 +0000
Files and hashes:         1: 3130332e3134352e36302e302f32332d3234203d3e20393332.roa (hash: Yp/8dD20XlslgkSYX3Zw2qk58UDNFY1ThOyLVD37ZgI=)
                          2: ECE7AD10B332E86702B118145564E6C084B9C744.crl (hash: UKgPCTemAmkZqQJF5HZWHNtCe1aUMFNoZNlomO2Ic9c=)
                          3: 3130332e3134352e36302e302f32332d3234203d3e203432393630.roa (hash: 4quknRlzzctaSU5IFxB6Tpo5hzL1S+C/fjMxv8WeKYA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 07:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:55:78:56:61:83:1c:89:88:07:c9:3e:26:2d:b5:fb:f9:6d:3a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA00000, serialNumber=ECE7AD10B332E86702B118145564E6C084B9C744
        Validity
            Not Before: Jul  5 05:51:12 2026 GMT
            Not After : Jul  6 07:22:12 2026 GMT
        Subject: CN=D5C4C3D75CA9DD5D52C977303F0D3EBBD2587C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:66:3a:0a:e3:9e:10:96:a1:7c:85:57:f0:
                    d0:ee:99:f1:7f:3c:09:e5:74:4c:97:1d:52:b7:62:
                    20:ce:51:c4:f2:5b:83:4f:03:c0:65:3a:65:a6:26:
                    95:57:a5:cf:76:c1:61:ed:27:e2:10:94:c8:3d:b7:
                    79:32:84:22:67:10:12:74:ef:26:5d:6a:39:63:6f:
                    a3:54:1e:17:ac:3d:03:c7:9e:f7:91:6d:33:fd:fc:
                    bc:47:2f:e3:a4:5e:87:35:1d:f3:da:bc:6d:aa:95:
                    df:ff:71:ba:0d:4b:dc:49:55:df:8a:f2:33:db:73:
                    5a:a1:a3:08:96:a6:1a:0b:ee:e1:52:c8:5c:72:88:
                    43:e8:55:97:66:d7:9a:9a:99:3e:d7:2f:00:76:e7:
                    86:ef:07:91:75:5c:76:84:58:dc:98:f0:1a:31:e3:
                    73:c2:85:9d:32:e8:f7:fc:5d:0e:9c:70:2c:34:d6:
                    58:dc:76:c1:b6:69:25:91:4e:a2:18:a2:45:ab:85:
                    4a:a4:c4:9b:e1:96:90:5e:d5:4b:5d:47:6d:35:09:
                    8f:e8:9c:09:62:a0:2b:e4:ff:71:c9:f8:1e:5d:83:
                    4f:a9:bf:6f:a4:e7:11:1f:fb:75:e0:45:45:4e:65:
                    40:6d:9e:03:23:a1:78:a5:a2:2a:72:38:a4:bd:ab:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:C3:D7:5C:A9:DD:5D:52:C9:77:30:3F:0D:3E:BB:D2:58:7C:58
            X509v3 Authority Key Identifier:
                keyid:EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:43:0d:7f:30:3e:50:a7:9b:11:9f:63:19:46:c6:10:83:
         a9:1a:d7:16:c0:c9:f0:9f:af:fa:a1:9b:2e:28:99:17:12:cc:
         99:c3:3b:4e:78:c0:ae:a7:a4:2d:4b:d7:18:bc:e5:ef:eb:a4:
         64:83:90:99:40:7a:b2:64:bf:89:b9:e7:e7:23:c1:ea:8c:34:
         4e:dd:36:5b:89:6a:53:3d:80:71:41:e2:35:09:b9:ee:d0:9b:
         83:d4:ee:b0:38:eb:3d:a0:bd:0e:b0:97:5c:a2:3d:ee:46:42:
         59:11:63:48:c7:37:c8:a0:1e:7e:6e:e8:3e:e8:fa:a5:16:c1:
         b7:de:c9:40:4b:0f:63:fb:ce:81:51:98:7a:f3:1e:2e:75:6f:
         de:78:cb:52:59:bf:d9:4a:6f:85:02:66:97:fe:22:20:80:20:
         0b:e1:bb:8d:61:d2:5e:f2:e1:f6:bf:e5:e2:1b:b9:00:95:df:
         c6:37:99:b3:9b:6f:25:c6:74:a9:49:5d:17:d0:9d:9c:3e:b5:
         27:44:56:63:cf:e2:93:24:9e:ec:67:31:c9:9c:bc:63:25:f2:
         89:fa:bc:38:b0:1a:74:93:91:ef:59:72:6f:2d:89:e3:2e:bb:
         ac:33:99:38:44:0b:26:f8:22:42:c0:5f:68:74:d5:c1:e8:34:
         e2:9d:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:36:16 2026 by rpki-client