Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
File:                     4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json)
Hash identifier:          w95vCJ6dRSXYXi6lPe/iSGla1DrkvcCKkHcZ1Nayjic=
Subject key identifier:   27:05:4C:60:62:DC:BF:12:D0:73:AD:50:35:01:70:36:E3:33:DD:3A
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       12C5CF7E80C5026A81B8B9E5601AB2719E981EAD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
Manifest number:          3A
Signing time:             Mon 02 Mar 2026 13:58:17 +0000
Manifest this update:     Mon 02 Mar 2026 13:53:17 +0000
Manifest next update:     Tue 03 Mar 2026 14:37:17 +0000
Files and hashes:         1: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=)
                          2: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: G84aFTE+AyhKOoZ86llmdYEvIttcYqQrDtzunRzxG5Q=)
                          3: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=)
                          4: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=)
                          5: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=)
                          6: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=)
                          7: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=)
                          8: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=)
                          9: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=)
                          10: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=)
                          11: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=)
                          12: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:cf:7e:80:c5:02:6a:81:b8:b9:e5:60:1a:b2:71:9e:98:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Mar  2 13:53:17 2026 GMT
            Not After : Mar  3 14:37:17 2026 GMT
        Subject: CN=27054C6062DCBF12D073AD5035017036E333DD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:a5:56:aa:b4:fd:e7:e8:7c:0f:a9:eb:42:
                    e1:52:50:9d:7c:8c:7c:ec:ad:48:ea:ca:46:2c:75:
                    32:6e:92:d9:a8:1c:7e:ae:1e:2e:b8:29:70:71:c4:
                    1b:fd:c8:0e:66:87:d9:36:62:7a:e0:3d:a3:07:2e:
                    bb:ab:32:04:b3:df:47:c0:19:ed:26:a2:54:f9:bb:
                    30:27:49:5a:1b:30:9b:ee:b5:cf:a2:2f:81:b9:3a:
                    90:bc:65:f8:d6:bf:57:e4:fa:74:8b:aa:f1:0a:75:
                    d5:86:42:5a:58:8a:43:f5:92:23:00:aa:b0:42:db:
                    67:fe:8e:2e:0c:c6:e7:47:2a:8a:47:d1:35:43:49:
                    3a:97:f1:59:ce:5d:17:3f:0c:87:d8:aa:b7:4d:30:
                    64:ab:81:af:c3:c2:5a:66:3b:41:c4:71:22:18:c5:
                    57:54:f5:0b:77:1b:23:86:22:e9:a1:a2:02:2a:a6:
                    62:3f:f8:aa:2f:7a:86:46:2a:ad:77:22:3a:55:c4:
                    fb:bf:e6:25:de:70:a5:24:b0:41:35:e8:e4:13:04:
                    d6:07:c4:fd:d9:be:4f:d7:fc:4c:65:d8:aa:35:89:
                    81:20:b2:de:f2:dc:6b:8e:6f:1c:ec:e0:33:5b:14:
                    ca:01:44:4e:11:51:15:32:55:93:5f:11:eb:99:0f:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:4C:60:62:DC:BF:12:D0:73:AD:50:35:01:70:36:E3:33:DD:3A
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:0d:1d:2a:4e:b0:f9:4f:9b:4b:5b:05:19:1f:ed:1f:9c:
         6f:f5:90:e2:11:15:b7:70:2c:4d:d3:2c:69:d7:fb:50:c2:f4:
         51:ca:9a:ae:f8:eb:23:30:a3:ae:7b:34:3b:55:ba:2c:59:fc:
         6c:9d:4c:79:7b:82:5e:69:6e:be:b2:65:34:4c:33:75:7a:b6:
         50:26:fb:1a:55:08:48:6a:5f:6c:2e:6f:85:92:47:44:20:c0:
         d2:57:c6:1a:b8:20:1e:43:19:18:7b:c0:e7:55:ca:55:58:3d:
         d4:72:76:2f:61:19:52:9c:c7:18:c1:5f:57:72:8f:8f:51:64:
         7b:e5:5e:9f:42:3d:62:5d:f9:44:f1:e1:21:02:d7:02:5d:b6:
         3b:37:e9:dd:6f:55:ed:ee:9e:e3:c6:30:67:1b:b0:21:08:83:
         c5:d0:b7:d9:b3:59:54:12:ce:e2:2a:45:43:12:ae:a0:22:7e:
         ec:92:51:7c:5c:1e:c4:ea:30:8d:30:97:ab:9b:7e:d5:5c:f2:
         02:68:02:3a:60:34:2a:d0:fa:22:44:42:3c:58:ea:45:2c:9a:
         13:b9:23:d5:cc:8a:66:e7:86:9f:23:d9:08:42:50:35:20:24:
         6e:26:06:0a:93:ed:1d:48:13:e8:08:4a:7c:40:90:ad:40:b4:
         6d:cc:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:26 2026 by rpki-client