Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
File:                     7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft (raw, json)
Hash identifier:          5/e17hu6J9mIwHdfz3KLmI+InGS1shMOZcfv3YCH2/o=
Subject key identifier:   90:02:57:76:B5:27:14:E3:7C:34:28:2E:BA:9E:C4:81:84:D0:71:D5
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Certificate issuer:       /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial:       3A41FAB4DEA68EFA164D623914CF0CB9AD220DF8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
Manifest number:          38
Signing time:             Mon 02 Mar 2026 07:33:16 +0000
Manifest this update:     Mon 02 Mar 2026 07:28:16 +0000
Manifest next update:     Tue 03 Mar 2026 09:44:16 +0000
Files and hashes:         1: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (hash: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno=)
                          2: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (hash: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8=)
                          3: 35322e3133302e31362e302f32302d3332203d3e203538353933.roa (hash: 9fmayBtgmtjpp4jzOoesECemG0iPag+LmUb3f7R4naw=)
                          4: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (hash: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4=)
                          5: 34302e37332e3132382e302f31372d3332203d3e203538353933.roa (hash: CiPHFGZqvfKg4LSjdZddwLwpgrGQUYVCQQV/0MxCEaY=)
                          6: 34302e37322e302e302f31362d3332203d3e203538353933.roa (hash: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w=)
                          7: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (hash: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c=)
                          8: 34302e37332e302e302f31372d3332203d3e203538353933.roa (hash: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs=)
                          9: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl (hash: R26VTxgHUpuCJioI5LmAavqHKjnUM7x5Ml4DsrI0dJA=)
                          10: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (hash: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU=)
                          11: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (hash: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c=)
                          12: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (hash: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k=)
                          13: 35322e3133302e3139322e302f31382d3332203d3e203538353933.roa (hash: dzApubPVeFSkZdW4H5zf0mOm6a9a8hNkGDjx4j4dslE=)
                          14: 35322e3133302e36342e302f31392d3332203d3e203538353933.roa (hash: OprOlplssuamN3h94BT0AnEzNk6BvCRELQ3ohphCM00=)
                          15: 34302e37322e3132382e302f31372d3332203d3e203538353933.roa (hash: p/W3urv9s6Mh0sKXJJNeu9I+tgf84ncaa3h8zoru8OE=)
                          16: 3133392e3231372e3132382e302f31372d3332203d3e203538353933.roa (hash: gyaQRSP2K4Ar7mRLlvlWZj3SxsO0p/6gafUPCndYi6E=)
                          17: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (hash: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I=)
                          18: 34302e37322e302e302f31352d3332203d3e203538353933.roa (hash: GZdXu8wxwSiGKPAoovUfq55Hmtnm5G22A4eA9cJCeZ8=)
                          19: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (hash: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=)
                          20: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (hash: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8=)
                          21: 34302e37332e39392e302f32342d3332203d3e203538353933.roa (hash: 7R7fDqZf/5+3oxpf17LppS6FttEpLPqj/SRHzmBlL90=)
                          22: 3133392e3231372e302e302f31362d3332203d3e203538353933.roa (hash: TjfWShvYyMSe5iUDgDmO2D0KmAjdpi9YE3JeWe6558M=)
                          23: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (hash: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo=)
                          24: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (hash: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8=)
                          25: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (hash: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg=)
                          26: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (hash: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk=)
                          27: 34302e37322e3235352e302f32342d3332203d3e203538353933.roa (hash: N+EpGWN+5eD7X8BPdHo0VUuyK/mruZfTCEv7P/4k7IA=)
                          28: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (hash: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk=)
                          29: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (hash: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=)
                          30: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (hash: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg=)
                          31: 34302e37322e302e302f31372d3332203d3e203538353933.roa (hash: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 06:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:41:fa:b4:de:a6:8e:fa:16:4d:62:39:14:cf:0c:b9:ad:22:0d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
        Validity
            Not Before: Mar  2 07:28:16 2026 GMT
            Not After : Mar  3 09:44:16 2026 GMT
        Subject: CN=90025776B52714E37C34282EBA9EC48184D071D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:77:8c:94:a6:53:9c:59:0a:c1:bb:aa:6b:
                    10:de:e4:54:79:40:34:e3:a0:d2:de:0c:be:de:82:
                    fc:d1:32:f6:7f:e5:c9:f8:29:d5:4a:0f:a3:5f:36:
                    d6:33:bb:3f:40:86:20:34:02:6d:23:ea:25:cc:b2:
                    58:5e:a6:6d:f6:68:fd:de:d5:f4:35:13:a0:1b:a5:
                    7e:0a:fe:d0:8b:07:46:43:d1:b8:a5:66:f2:e5:ad:
                    2a:39:d7:1d:22:5a:5e:00:c7:c2:d8:63:22:da:f1:
                    40:f9:d1:e0:d8:1d:a6:c6:b0:52:bf:72:5d:4a:14:
                    41:a5:41:48:3a:03:dc:ed:23:10:57:55:68:66:6d:
                    15:42:a5:74:6f:17:4a:f9:bf:06:05:55:91:95:d6:
                    e1:61:fb:48:39:86:bb:ea:83:50:43:65:7b:e8:75:
                    b4:9c:ac:55:00:50:f9:02:81:d3:5d:ee:18:ae:4c:
                    58:1c:f0:e9:35:59:fb:20:91:f5:7c:b9:34:df:39:
                    ba:73:d1:dd:51:f8:9b:10:24:56:bb:0c:c9:ba:b0:
                    8f:58:a2:36:33:8f:58:30:e3:43:ab:f6:12:30:6c:
                    63:2a:68:9f:8f:7c:9a:5d:b3:7d:66:22:de:24:48:
                    3c:5b:04:fa:08:97:e1:27:02:04:7d:d2:1d:89:37:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:57:76:B5:27:14:E3:7C:34:28:2E:BA:9E:C4:81:84:D0:71:D5
            X509v3 Authority Key Identifier:
                keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:f9:52:83:4e:a6:b7:65:f2:7f:33:fc:c4:29:98:72:22:
         9e:4c:08:c1:18:4f:16:87:b0:e9:af:74:37:bf:eb:9b:68:1c:
         aa:88:38:c8:8d:a2:67:65:95:52:56:c9:65:be:5b:00:9b:6a:
         d1:df:7d:ab:0a:90:1a:37:01:02:0b:0c:94:3e:2b:d6:b4:c0:
         68:47:c4:f9:28:29:03:72:9d:44:b1:29:1b:84:e9:a3:aa:dc:
         4f:e9:16:ec:3a:20:15:a9:c2:19:37:2b:06:52:2c:05:52:b4:
         0e:00:28:89:9b:8a:35:44:5d:0a:cc:fe:ed:3b:44:13:e4:27:
         d6:86:7b:7a:c4:ca:f1:36:0b:ee:39:c4:b9:ef:5e:18:55:b0:
         dd:bc:0d:1a:bc:a4:1c:40:5f:cf:20:ea:70:f2:e0:4a:09:14:
         dd:45:03:7a:bb:d1:04:f0:3a:1c:73:da:b2:79:06:18:de:81:
         97:d8:2d:55:e6:2a:35:1e:9b:1d:a4:d9:99:1b:2e:42:e7:02:
         da:94:95:7b:af:fa:c2:bb:3d:2b:e8:aa:b8:38:19:7d:1b:68:
         f9:95:10:14:9e:db:54:db:2c:33:94:d7:49:ff:ee:40:af:38:
         5b:98:d1:5e:f3:1b:83:bd:db:83:2c:4a:f1:eb:ad:d1:fe:b5:
         eb:26:cc:ee
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOkH6tN6mjvoWTWI5FM8Mua0iDfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy
ODQ4RjA1RjAeFw0yNjAzMDIwNzI4MTZaFw0yNjAzMDMwOTQ0MTZaMDMxMTAvBgNV
BAMTKDkwMDI1Nzc2QjUyNzE0RTM3QzM0MjgyRUJBOUVDNDgxODREMDcxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYneMlKZTnFkKwbuqaxDe5FR5
QDTjoNLeDL7egvzRMvZ/5cn4KdVKD6NfNtYzuz9AhiA0Am0j6iXMslhepm32aP3e
1fQ1E6AbpX4K/tCLB0ZD0bilZvLlrSo51x0iWl4Ax8LYYyLa8UD50eDYHabGsFK/
cl1KFEGlQUg6A9ztIxBXVWhmbRVCpXRvF0r5vwYFVZGV1uFh+0g5hrvqg1BDZXvo
dbScrFUAUPkCgdNd7hiuTFgc8Ok1WfsgkfV8uTTfObpz0d1R+JsQJFa7DMm6sI9Y
ojYzj1gw40Or9hIwbGMqaJ+PfJpds31mIt4kSDxbBPoIl+EnAgR90h2JNx/xAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkAJXdrUnFON8NCguup7EgYTQcdUwHwYDVR0j
BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF
QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE4Nzc4OTEvMS83RUFDOUU0M0M4RkFF
N0VENUI2MTU5NDIzRDYwRUE3MzI4NDhGMDVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRz5UoNOprdl
8n8z/MQpmHIinkwIwRhPFoew6a90N7/rm2gcqog4yI2iZ2WVUlbJZb5bAJtq0d99
qwqQGjcBAgsMlD4r1rTAaEfE+SgpA3KdRLEpG4Tpo6rcT+kW7DogFanCGTcrBlIs
BVK0DgAoiZuKNURdCsz+7TtEE+Qn1oZ7esTK8TYL7jnEue9eGFWw3bwNGrykHEBf
zyDqcPLgSgkU3UUDervRBPA6HHPasnkGGN6Bl9gtVeYqNR6bHaTZmRsuQucC2pSV
e6/6wrs9K+iquDgZfRto+ZUQFJ7bVNssM5TXSf/uQK84W5jRXvMbg73bgyxK8eut
0f616ybM7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:32 2026 by rpki-client