Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
File:                     E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json)
Hash identifier:          6JSh51ECKfHlGl2WWx+AuO3bD1+VrZzaryzJL2LO69c=
Subject key identifier:   A2:66:87:80:E4:CB:A1:A2:E0:7D:60:0E:51:8A:76:86:E2:BF:B3:09
Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
Certificate issuer:       /CN=E9EED0187DAE9147812C7B516912D58FD976B964
Certificate serial:       04EF513C8786E578393DBBA8C2BD74DD9CB43781
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
Manifest number:          39
Signing time:             Mon 02 Mar 2026 01:43:16 +0000
Manifest this update:     Mon 02 Mar 2026 01:38:16 +0000
Manifest next update:     Tue 03 Mar 2026 05:33:16 +0000
Files and hashes:         1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=)
                          2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: 9prJrC/3egpFq5UgdcRfWPYXGO0v7ytZWlncGUesjcE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 05:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ef:51:3c:87:86:e5:78:39:3d:bb:a8:c2:bd:74:dd:9c:b4:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964
        Validity
            Not Before: Mar  2 01:38:16 2026 GMT
            Not After : Mar  3 05:33:16 2026 GMT
        Subject: CN=A2668780E4CBA1A2E07D600E518A7686E2BFB309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:81:71:e5:59:c9:b5:ed:1e:40:58:c4:f4:
                    73:9f:75:5d:3e:87:5e:da:7f:0c:aa:d2:ed:bc:7c:
                    6b:51:dd:01:9c:3b:bf:12:82:aa:d3:e1:2c:6b:88:
                    c1:1a:67:66:85:96:92:a2:83:24:1c:96:f2:0e:75:
                    0c:d5:18:3a:a2:90:14:ff:be:45:3f:39:6a:dc:5b:
                    f3:df:79:f1:a0:66:da:7d:91:84:3c:00:74:da:50:
                    05:cc:25:93:54:3b:20:8e:74:de:99:4a:5d:42:48:
                    8f:6c:e4:b7:2f:19:84:e5:66:f6:2d:7e:48:18:f4:
                    32:1a:96:19:ac:80:80:08:72:b5:39:bc:2a:99:6d:
                    57:f3:86:54:da:a2:2e:23:b6:af:66:58:3c:62:c4:
                    68:b1:30:39:52:4b:e1:34:da:b9:0b:ae:64:24:3f:
                    d3:6e:2e:dd:c9:4c:75:d6:67:a7:fb:3e:b3:4d:83:
                    59:ca:18:47:ca:f8:2e:07:ba:a9:f3:c6:e9:73:51:
                    3f:f7:f4:f2:63:47:49:3d:8e:3c:6d:b5:d2:87:ea:
                    79:e8:80:c0:62:0d:b0:69:4c:34:40:71:3d:5d:25:
                    33:37:93:c8:a0:dc:69:5f:d8:d8:fd:01:82:a3:28:
                    e2:14:f4:2f:c7:59:7b:06:15:7a:7f:f6:ee:98:15:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:87:80:E4:CB:A1:A2:E0:7D:60:0E:51:8A:76:86:E2:BF:B3:09
            X509v3 Authority Key Identifier:
                keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:37:7e:82:a3:bb:d2:6e:e2:f3:8c:eb:10:9b:9f:aa:0c:
         fb:14:aa:09:c4:5a:ad:5e:05:19:a2:b4:82:ac:a0:48:ac:78:
         42:39:26:51:ac:90:a7:a2:d5:93:2e:76:91:21:11:e5:40:44:
         f5:85:43:fd:ed:e2:fc:06:55:d4:1f:05:68:99:a2:8a:1b:22:
         06:68:7a:75:57:50:ff:8d:09:0c:58:d4:69:32:31:c9:fb:c5:
         33:35:15:eb:19:f0:45:fd:f5:5d:28:8d:37:84:87:d3:ef:5a:
         65:3a:fb:06:6c:79:8d:8d:9b:a5:9e:4f:f4:b0:38:dd:08:46:
         5b:dc:42:6d:34:e6:fe:a5:b2:40:cb:c3:80:6e:0d:eb:7a:1d:
         10:95:f7:fa:6e:28:39:33:c1:65:2f:49:4c:37:8d:d1:1b:cf:
         e8:76:5b:db:cb:be:ef:f0:39:41:c4:c7:16:d4:b3:fe:6d:47:
         4c:11:48:c1:d5:07:1b:b9:3d:07:f7:0b:9c:7c:8c:1a:d1:96:
         3f:5a:84:30:86:58:1b:d2:cd:49:db:c6:d4:8d:3a:2d:88:d0:
         63:36:11:d3:79:16:06:eb:65:47:7b:7d:8f:63:e9:11:56:9d:
         25:f2:03:40:14:7d:2d:d8:ea:c2:e6:3e:2e:79:8f:71:92:ca:
         48:70:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:13 2026 by rpki-client