Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          zTj0PCoJT6s1rgeE7mMTEmwE30GLpdn5rp9PTNk0vRs=
Subject key identifier:   BF:EB:31:CD:4D:25:14:CA:2D:FC:A8:49:09:F9:C1:9A:D6:E1:CF:73
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       28DBF707E0BD6B2FF5CA28EF74C77B720FB01721
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          013C
Signing time:             Sat 10 Oct 2026 11:49:38 +0000
Manifest this update:     Sat 10 Oct 2026 11:44:38 +0000
Manifest next update:     Tue 13 Oct 2026 12:18:38 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          2: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          3: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          4: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          6: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          7: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          8: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          9: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: WhoJ2TaqTspnu3MDEox9eilKIGTdZuWbW3ObuJBOq8c=)
                          10: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (hash: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=)
                          11: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:f7:07:e0:bd:6b:2f:f5:ca:28:ef:74:c7:7b:72:0f:b0:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Oct 10 11:44:38 2026 GMT
            Not After : Oct 13 12:18:38 2026 GMT
        Subject: CN=BFEB31CD4D2514CA2DFCA84909F9C19AD6E1CF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:63:42:54:75:52:e4:f2:a0:d1:f9:f9:2e:
                    6d:43:d4:f6:08:e8:06:a1:99:02:3a:6b:c2:df:23:
                    f4:bd:24:1d:d4:1b:a6:89:3c:3d:c7:04:87:dd:2f:
                    8c:8f:8d:91:c4:e1:46:dc:94:3b:d5:94:e1:0a:c0:
                    03:74:70:65:f7:ad:f9:26:4b:4b:3f:26:00:6a:a6:
                    26:60:84:3c:56:d0:d8:77:76:b8:fb:d3:fd:78:1e:
                    ea:4c:37:20:a2:35:fc:d7:79:f2:18:a0:eb:ad:4e:
                    fe:a4:33:8b:c8:3e:a8:84:eb:ce:89:40:77:98:7b:
                    a0:98:d5:77:4c:89:6b:6f:e8:95:5e:af:fe:90:3a:
                    08:d9:43:10:ab:c1:70:5b:40:a4:b3:a9:cb:24:db:
                    39:52:be:bf:e7:1f:63:3e:76:03:c4:fa:09:45:23:
                    70:4a:cd:9b:cf:00:b1:01:88:b8:3d:19:20:56:93:
                    e4:86:cb:04:b1:19:33:26:2f:b0:ed:fc:8a:74:d8:
                    fe:9f:aa:cb:8e:00:06:a8:b9:52:6c:5e:ea:7d:dd:
                    f8:4a:9e:55:a2:49:b0:11:3d:0b:3d:8c:31:4f:f8:
                    b1:05:c7:2f:12:89:a2:da:d9:32:d4:b9:45:c6:7f:
                    b8:fa:fe:54:90:fe:0a:bb:a3:20:5e:b4:2b:a5:17:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:31:CD:4D:25:14:CA:2D:FC:A8:49:09:F9:C1:9A:D6:E1:CF:73
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:cb:4c:e9:3b:3d:c5:a2:76:d2:49:70:bb:4d:9e:25:b1:
         d4:e1:c7:5d:ad:be:dd:ae:38:b4:1f:22:0c:f5:65:bc:e4:6f:
         20:d0:87:90:0c:3e:34:05:88:43:fb:d1:a3:00:8e:5f:68:60:
         f1:28:64:e2:49:23:83:cf:56:ae:cf:12:9a:d9:b0:ca:34:c4:
         3f:a0:de:94:16:71:00:0d:2b:cb:20:e1:59:cb:ef:8e:71:9a:
         ff:32:ba:3a:ad:8b:45:a6:78:db:e4:10:bc:15:5a:0d:41:73:
         24:f1:ab:2f:83:fc:80:96:87:6c:fc:1b:d1:85:83:b9:eb:73:
         a6:63:b5:59:80:69:3f:05:49:7e:8b:4d:fd:63:1f:88:e5:3f:
         83:43:66:bc:27:6a:52:46:43:2d:69:57:c7:63:b3:8d:8b:2d:
         4f:83:23:64:3c:7f:c6:f0:5c:67:6c:33:3b:ec:27:39:cf:e6:
         b5:a7:4e:46:8e:a6:ae:cb:68:95:25:42:91:e7:b5:7d:6f:e1:
         6d:bb:af:f2:06:67:87:8f:a2:66:98:9f:92:54:73:f5:10:d1:
         2d:07:43:e2:2f:75:15:ca:26:94:14:72:fa:cb:3c:f5:00:1f:
         41:ed:64:a3:0d:6e:d3:18:3f:b9:17:c8:76:6c:7a:a9:e1:f3:
         7f:28:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:46:48 2026 by rpki-client