Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
File:                     8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json)
Hash identifier:          tdZ9FUhTHjpjM5zspayqPQ0VDOXcmYEiWHt1a0U+G8Q=
Subject key identifier:   3A:3A:F7:BD:4B:48:90:98:E7:E7:56:E7:0A:3B:5E:31:10:4A:98:0B
Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
Certificate issuer:       /CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Certificate serial:       47637CA7D1CCABC978452B7B3A9A60641CA246B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
Manifest number:          39
Signing time:             Mon 02 Mar 2026 09:48:17 +0000
Manifest this update:     Mon 02 Mar 2026 09:43:17 +0000
Manifest next update:     Tue 03 Mar 2026 10:33:17 +0000
Files and hashes:         1: 3230322e3138392e33362e302f32322d3332203d3e20313337363930.roa (hash: tBDon7qwNeWrPA26OZBGPlmQowAGhGqE/GeAb1bpS10=)
                          2: 3230322e3138392e32342e302f32322d3332203d3e20313337363930.roa (hash: WsDWFA3iyxP5XNWv/VrakU6bn8VOzvjFaYrEaa9kg7U=)
                          3: 3230322e3138392e32302e302f32322d3332203d3e20313337363930.roa (hash: pXd/a+PR9keaGQQ50/8k6g0yn6Vvb7fAGIopVVHCeTY=)
                          4: 3230322e3138392e33322e302f32322d3332203d3e20313337363930.roa (hash: 4i4FSEybTioj1V2sTCq+7obB9sLuJf2pf8I6Vq9j4yk=)
                          5: 3230322e3138392e34302e302f32322d3332203d3e20313337363930.roa (hash: 7MLtgEQLgz8+JliMrgOq3UgS3iW+w2D5wOJJPHojtII=)
                          6: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=)
                          7: 3230322e3138392e32382e302f32322d3332203d3e20313337363930.roa (hash: 1NfYMuYmM23VWZnzSw96HJtYj4Lq8yKysAQ8JJZNoXw=)
                          8: 3230322e3138392e34342e302f32322d3332203d3e20313337363930.roa (hash: X++pwqsSWbzCsFfKHx63zaTXj3/7WcDlIS7dIyXvltA=)
                          9: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=)
                          10: 3230322e3138392e31362e302f32322d3332203d3e20313337363930.roa (hash: IfoMH56XJ1hZmG6m81pyfga0KXHap9V3FsJ5JuGS2TU=)
                          11: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: rYTze9YHI/5YmXnRCXJqw4Q8StjmkBVbdap38Fqy0HE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:63:7c:a7:d1:cc:ab:c9:78:45:2b:7b:3a:9a:60:64:1c:a2:46:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198
        Validity
            Not Before: Mar  2 09:43:17 2026 GMT
            Not After : Mar  3 10:33:17 2026 GMT
        Subject: CN=3A3AF7BD4B489098E7E756E70A3B5E31104A980B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:5b:60:13:37:82:a2:38:62:12:59:97:c2:
                    87:38:d5:53:ae:cd:6e:46:d7:20:33:d9:a8:0c:24:
                    92:50:c0:36:3c:6a:8a:5a:a2:3b:e7:f1:33:9e:bf:
                    f9:f6:19:a0:b5:db:b2:30:16:20:75:00:8e:58:7b:
                    3f:5c:2b:8b:f7:41:da:c3:37:71:15:da:1c:b6:3d:
                    aa:d0:e8:33:79:cd:c1:1c:98:5a:59:aa:7f:c1:b1:
                    1f:4f:6b:98:bf:7f:be:d7:78:be:27:a8:76:3c:6c:
                    8c:c0:6e:79:3c:8b:c6:94:23:03:15:d6:e7:55:74:
                    b9:b1:ea:36:69:99:0b:20:d5:f0:8a:52:1e:5c:ab:
                    85:7f:45:3d:07:06:88:db:21:84:52:f2:06:be:b4:
                    7b:01:36:63:1a:4d:c8:98:b6:53:9e:a8:f0:f5:aa:
                    e8:92:92:bf:1d:3c:60:fb:b6:bf:fc:d4:11:18:48:
                    03:00:69:28:b1:2e:8f:1f:51:dd:79:69:2c:85:b1:
                    38:a2:45:8d:36:7e:4f:61:47:b0:c5:67:2f:05:6c:
                    e6:c6:a5:a0:98:e2:15:41:e0:b9:9b:cb:c7:ad:82:
                    52:fe:ad:e0:a5:42:69:12:95:3e:0b:c4:71:21:25:
                    b9:fd:70:e2:41:e0:36:24:99:af:0f:a8:2f:7e:c1:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:F7:BD:4B:48:90:98:E7:E7:56:E7:0A:3B:5E:31:10:4A:98:0B
            X509v3 Authority Key Identifier:
                keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:69:64:b2:d8:5e:d5:29:30:a3:49:68:18:73:d3:d0:4e:
         4b:98:00:ed:cc:22:1a:5b:d8:9f:db:72:bb:8b:e3:92:09:b8:
         01:c3:14:e3:4a:73:b1:0f:6c:4f:28:c8:cd:31:1a:6e:b7:05:
         6c:2d:e7:16:db:1b:89:75:f8:f4:cf:a6:97:bb:77:d1:fc:0c:
         52:ad:20:60:c1:55:a4:18:6a:a5:2f:5d:4e:8c:9a:e7:27:f3:
         0c:37:f9:5a:88:ab:bc:90:be:eb:5c:2b:d1:ab:f4:13:6c:21:
         c1:30:1b:a3:9e:ef:04:f7:7f:b9:79:41:33:00:7f:1a:f8:3c:
         cd:38:71:74:ee:bb:5e:74:23:60:d5:2b:7a:22:df:9f:5f:ad:
         03:ef:0a:8b:6c:25:b3:f6:d1:c1:d5:2f:83:b8:b8:6e:15:38:
         79:7f:5d:72:e8:be:47:15:57:7b:f5:42:8e:a9:8c:36:89:27:
         32:53:49:1a:7d:55:04:7f:30:ca:62:77:31:b4:25:7b:11:05:
         66:59:3e:d2:ca:80:a3:66:b2:a1:4a:aa:34:58:c6:c3:57:f3:
         7c:0f:73:b7:c9:6f:77:3a:04:dc:d2:8f:1f:27:b8:5a:63:06:
         c2:77:50:81:6f:c7:d9:76:27:44:7d:2e:a4:99:cb:bf:86:8e:
         d3:3a:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:22:52 2026 by rpki-client