Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
File:                     ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft (raw, json)
Hash identifier:          248cLN0YJVlItmfiSAMeJ58l6C+auwQdI1ec9fjH78I=
Subject key identifier:   37:54:43:48:A7:E9:F4:2B:97:27:C8:AB:85:A9:36:B8:14:21:F2:74
Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
Certificate issuer:       /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Certificate serial:       3B8986A8CD4994AAB24C97CE8B66BB9437966873
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
Manifest number:          38
Signing time:             Sun 01 Mar 2026 22:43:16 +0000
Manifest this update:     Sun 01 Mar 2026 22:38:16 +0000
Manifest next update:     Tue 03 Mar 2026 01:49:16 +0000
Files and hashes:         1: 3130332e31322e3138342e302f32322d3234203d3e203137393632.roa (hash: qnnxGxRNI/z1MtSxzOyx2REepeOn/DgePSr/fk2goeg=)
                          2: 323430303a656530303a3a2f33322d3634203d3e203137393632.roa (hash: 1s9AHeqFacmS2ERAUAUAA+MVZyukBR4FW2yZWjR7rV4=)
                          3: 33362e33362e302e302f31362d3234203d3e203137393632.roa (hash: y+4wcOCgwkmcrUpyKI9dT6DuAQwTUC4bOQIdwL8Cy2E=)
                          4: 3231392e3233342e39362e302f31392d3234203d3e203137393632.roa (hash: /wKm+4dYS7aTMaqcbMYOto85jk3dFgQXJGfUsrncX7s=)
                          5: 3131312e3232322e302e302f31362d3234203d3e203137393632.roa (hash: hdqwNZAyazPMo4Rbx1hyV5HA9rsGlRkWsefRG1rahp4=)
                          6: 3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa (hash: WvF4StheOK2NbNjz7INAKsnHnI6IWdq5cD/JbnGJa7w=)
                          7: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl (hash: YvlKpL4HeOrW9Xyaw2A/YCO0gJXsungPsEZCSgRdxzs=)
                          8: 3232322e3234382e302e302f31362d3234203d3e203137393632.roa (hash: 0luaUvGZgK4d3evpnMv14ZbCgRXpoWZ1+VlfRnWWPQE=)
                          9: 3232332e3231322e302e302f31352d3234203d3e203137393632.roa (hash: VIMZpXymVqfAjQ2dMLSK6u00VThYhUs8pkCRyuUxGBM=)
                          10: 3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa (hash: JEd2c6sWALyCaMi18jHXPGHveyyaKT8SFKkrn5C6g+I=)
                          11: 3230332e38382e33322e302f31392d3234203d3e203137393632.roa (hash: R5moh4Q8PvGj+dpFkP4txni5P7rMovpRrsPU8yocAVw=)
                          12: 3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa (hash: Fxdt6NBtmyi9y2SDARcXHHpuGBqRns0PO5iPMY8wBg4=)
                          13: 3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa (hash: kdhfiBnDIG18b57XVsAuy3VcDOQ+J/7L/GCKIxBYUJA=)
                          14: 3232322e3132352e302e302f31362d3234203d3e203137393632.roa (hash: XVlPVtnxFUqwjLYUkxXF4wjBVVEYWgIOUL8vy17tBWc=)
                          15: 3131362e37362e302e302f31352d3234203d3e203137393632.roa (hash: LBuZZHM4nWcNaUK3WxdhU4EzjPch1mKzxQJqDhH5V1g=)
                          16: 3131352e34342e302e302f31352d3234203d3e203137393632.roa (hash: LB7VwLtyn8Bqa6tKfGqKG+X0uYDYdJ1VlqslrfuLIGY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 01:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:86:a8:cd:49:94:aa:b2:4c:97:ce:8b:66:bb:94:37:96:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
        Validity
            Not Before: Mar  1 22:38:16 2026 GMT
            Not After : Mar  3 01:49:16 2026 GMT
        Subject: CN=37544348A7E9F42B9727C8AB85A936B81421F274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:57:61:66:23:de:f9:4a:d7:ba:04:0a:c6:
                    42:71:5f:11:0e:3b:32:e2:86:51:15:06:ab:67:4a:
                    1a:5b:3b:50:55:53:05:7f:77:e9:f0:82:ce:93:f9:
                    1d:42:c5:d0:6e:a3:20:35:bc:21:22:53:5e:5e:7e:
                    09:da:27:ba:9a:c7:e8:32:52:dc:66:d8:6c:0c:95:
                    44:88:fd:bf:61:a3:a9:e8:2c:39:b6:dc:01:92:75:
                    f1:35:72:53:28:ee:5c:e1:ae:2f:98:75:ce:14:eb:
                    07:ad:a1:99:5d:1b:08:2e:af:75:28:4e:27:6e:c6:
                    c5:8e:27:24:30:1e:ec:74:7d:38:1f:b7:9c:27:67:
                    6b:fd:9c:81:ea:51:53:bc:3c:3d:4f:8e:cf:03:2a:
                    5a:1a:92:bb:ab:76:85:6e:1b:75:f6:b3:ae:56:6e:
                    60:24:3e:c3:7e:4f:ca:0c:d8:fb:95:15:a0:af:e7:
                    b6:0c:ad:1d:fa:f2:bf:2e:68:b2:1a:3f:f8:b8:17:
                    1b:04:75:de:e1:e7:a3:25:28:43:f6:7e:85:82:52:
                    90:95:cd:92:a0:8c:93:53:66:62:19:82:bd:90:01:
                    a8:3c:e9:aa:bf:77:18:dd:f7:b8:46:a3:e4:e4:46:
                    56:03:fe:40:3f:43:f1:41:9d:cf:cc:4d:dc:a2:49:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:54:43:48:A7:E9:F4:2B:97:27:C8:AB:85:A9:36:B8:14:21:F2:74
            X509v3 Authority Key Identifier:
                keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:21:53:ef:a4:62:c3:60:65:16:21:99:3c:ed:0c:c5:35:
         bc:2b:66:9f:44:a6:2b:8c:10:cd:c8:91:0f:29:09:82:92:ab:
         09:71:98:d6:ef:03:b7:26:af:23:b9:85:97:d5:d4:9f:c5:9f:
         ea:ae:1a:ab:f1:bc:2f:eb:ac:ca:6e:a7:df:21:fc:60:40:ba:
         45:cc:e5:44:d2:69:a5:fd:82:d3:3c:9a:18:72:67:fe:a6:02:
         ce:73:3f:0c:be:7c:92:60:a2:47:23:53:35:75:25:75:69:3e:
         82:37:22:a9:7e:e7:0f:ec:de:7c:e5:f3:f7:5c:0d:7d:83:90:
         42:63:16:62:58:87:d1:dd:81:c2:4d:39:a5:0f:5b:46:5f:a7:
         62:3b:54:64:fb:a6:4a:4f:ad:f7:35:c1:40:ea:0c:6d:d2:e8:
         dc:19:67:65:bb:1a:37:f2:98:ae:c5:9e:d1:f0:90:ea:3d:c1:
         1c:cd:58:63:bd:56:64:01:50:18:b2:ae:c3:73:2d:81:4b:84:
         5d:ef:e4:0f:57:d8:4d:10:aa:65:17:06:ec:26:07:51:3c:42:
         bd:70:85:16:de:0b:1b:41:cf:23:c8:91:f3:5b:50:9a:36:87:
         c5:36:b5:47:aa:1f:5c:16:0d:5d:54:08:f6:43:db:fb:17:d3:
         b7:0e:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:54:04 2026 by rpki-client