Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          xRZUF48xltnc1LtkFUMeNLQFQmvE3ZOl2ouVHAv055s=
Subject key identifier:   B5:79:84:B1:48:62:B1:56:F1:75:68:87:B8:A3:F1:31:EA:A3:75:15
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       1D0D2CD728D724D9CE1BB5BFB55A33C53F24E3B4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          75
Signing time:             Thu 16 Apr 2026 21:24:33 +0000
Manifest this update:     Thu 16 Apr 2026 21:19:33 +0000
Manifest next update:     Fri 17 Apr 2026 21:43:33 +0000
Files and hashes:         1: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          2: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          3: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: a2qVmUL7vYWchga9/8R4Rh7ZHt4QkhxM9oz2y7jK7wI=)
                          4: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          5: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          6: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          7: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          8: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          9: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 21:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:2c:d7:28:d7:24:d9:ce:1b:b5:bf:b5:5a:33:c5:3f:24:e3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Apr 16 21:19:33 2026 GMT
            Not After : Apr 17 21:43:33 2026 GMT
        Subject: CN=B57984B14862B156F1756887B8A3F131EAA37515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:f8:e2:99:07:91:4e:05:25:06:36:6d:57:
                    15:c9:bd:85:9d:69:15:20:56:2a:82:37:27:50:a8:
                    56:5d:ea:6b:5d:89:55:ef:39:9c:29:2c:e4:c3:d7:
                    3e:2f:36:e4:ac:47:ef:fe:22:5b:e9:4c:74:37:1b:
                    be:40:2d:31:24:48:ed:7c:bf:7e:02:06:aa:fe:57:
                    52:66:95:22:8d:34:68:07:01:25:4f:14:fc:f5:2e:
                    30:b8:ce:61:b8:29:0a:9f:a6:45:4d:b7:9a:b0:23:
                    23:58:b6:0e:63:7c:ae:94:da:e8:5f:42:b6:64:bd:
                    ba:91:99:45:99:b4:34:ac:2c:81:5e:40:db:86:92:
                    da:fa:ed:88:5d:6a:97:09:db:73:ec:5d:e0:43:a6:
                    f9:eb:a3:9e:58:6d:9a:35:1e:25:90:11:15:ed:64:
                    6c:4d:5b:34:33:2a:03:62:6f:ff:8a:12:2d:3e:c5:
                    3b:71:9b:07:b4:24:3b:23:47:a3:af:7a:72:93:69:
                    87:a1:0b:9d:0b:23:af:1a:2e:49:01:fa:73:73:f8:
                    9d:83:ef:0d:56:b9:cc:c5:48:fc:8c:8d:49:7c:35:
                    4d:0a:5f:88:b7:89:38:b0:d0:ff:fd:4e:f6:8a:00:
                    9b:e8:bf:70:d2:82:fb:67:f1:1e:ba:cf:ad:f7:68:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:84:B1:48:62:B1:56:F1:75:68:87:B8:A3:F1:31:EA:A3:75:15
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:9c:00:fc:13:48:f8:f2:90:64:62:48:58:8c:b5:fe:22:
         91:36:d4:8f:d1:78:be:79:1a:35:ac:ee:d0:b7:3e:89:f7:40:
         66:6a:97:fb:4a:9b:b4:a6:77:72:3d:59:96:5e:dd:58:cb:18:
         cf:42:cb:c8:bd:78:35:84:67:a9:37:21:d4:dd:72:a7:0c:00:
         49:5d:5a:f4:e3:fb:c0:ad:82:97:93:54:aa:87:e1:06:77:54:
         8f:d7:e1:9c:d4:ee:3a:fb:19:59:bd:82:77:64:e2:e9:9d:7e:
         70:c1:ac:ae:d0:3d:f7:79:3d:2a:90:b2:cd:2f:64:cd:33:5f:
         13:f8:ee:4b:78:b8:64:79:47:a8:25:b7:eb:e0:bc:9a:18:f6:
         14:a2:d6:bd:34:b1:fa:7c:df:7c:c9:b2:a4:4c:8b:55:4c:f1:
         a5:dc:09:cc:b9:bd:92:bc:7f:69:30:3b:cd:a8:9c:ef:c4:6b:
         3b:e6:ec:e6:15:b5:33:74:f5:d9:47:04:6f:12:02:d0:9f:5a:
         3c:04:df:03:e8:ff:c4:30:c6:74:88:93:41:58:ef:b6:8b:b1:
         1a:34:39:cb:1e:d3:47:f3:bc:8d:49:55:00:5b:74:5e:11:4c:
         3e:7b:d2:89:15:2a:cd:4a:8f:a2:04:90:91:13:ea:d7:53:bd:
         80:60:d1:e1
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHQ0s1yjXJNnOG7W/tVozxT8k47QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5
RDgwRjE2NDAeFw0yNjA0MTYyMTE5MzNaFw0yNjA0MTcyMTQzMzNaMDMxMTAvBgNV
BAMTKEI1Nzk4NEIxNDg2MkIxNTZGMTc1Njg4N0I4QTNGMTMxRUFBMzc1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGvjimQeRTgUlBjZtVxXJvYWd
aRUgViqCNydQqFZd6mtdiVXvOZwpLOTD1z4vNuSsR+/+IlvpTHQ3G75ALTEkSO18
v34CBqr+V1JmlSKNNGgHASVPFPz1LjC4zmG4KQqfpkVNt5qwIyNYtg5jfK6U2uhf
QrZkvbqRmUWZtDSsLIFeQNuGktr67YhdapcJ23PsXeBDpvnro55YbZo1HiWQERXt
ZGxNWzQzKgNib/+KEi0+xTtxmwe0JDsjR6OvenKTaYehC50LI68aLkkB+nNz+J2D
7w1WuczFSPyMjUl8NU0KX4i3iTiw0P/9TvaKAJvov3DSgvtn8R66z633aN3VAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUtXmEsUhisVbxdWiHuKPxMeqjdRUwHwYDVR0j
BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE
RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC84Qjc1MTYzQTU3NTUy
M0VFNDA4RDJBMkY1OUY4REQ1MDlEODBGMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxOcAPwTSPjy
kGRiSFiMtf4ikTbUj9F4vnkaNazu0Lc+ifdAZmqX+0qbtKZ3cj1Zll7dWMsYz0LL
yL14NYRnqTch1N1ypwwASV1a9OP7wK2Cl5NUqofhBndUj9fhnNTuOvsZWb2Cd2Ti
6Z1+cMGsrtA993k9KpCyzS9kzTNfE/juS3i4ZHlHqCW36+C8mhj2FKLWvTSx+nzf
fMmypEyLVUzxpdwJzLm9krx/aTA7zaic78RrO+bs5hW1M3T12UcEbxIC0J9aPATf
A+j/xDDGdIiTQVjvtouxGjQ5yx7TR/O8jUlVAFt0XhFMPnvSiRUqzUqPogSQkRPq
11O9gGDR4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:49 2026 by rpki-client