Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          Bh6WcJ0q5oD0qWI/TZLWjdMIZm5FzuKh5BQodsYqWSI=
Subject key identifier:   1E:3D:B0:5F:9A:88:75:56:3E:35:C5:19:67:C0:0D:76:BB:49:2F:89
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       14F1E0CD1ED1E3A5C7169AC9357360CF7C54B5AD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          39
Signing time:             Mon 02 Mar 2026 06:53:16 +0000
Manifest this update:     Mon 02 Mar 2026 06:48:16 +0000
Manifest next update:     Tue 03 Mar 2026 10:33:16 +0000
Files and hashes:         1: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          2: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          3: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          4: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          5: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: WooMDwT77t6QIBHCZuNcMt7RNuUoKNCnq4b8dCZopVc=)
                          6: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          7: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          8: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          9: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
                          10: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          11: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
                          12: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f1:e0:cd:1e:d1:e3:a5:c7:16:9a:c9:35:73:60:cf:7c:54:b5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Mar  2 06:48:16 2026 GMT
            Not After : Mar  3 10:33:16 2026 GMT
        Subject: CN=1E3DB05F9A8875563E35C51967C00D76BB492F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:27:50:de:96:e3:12:8d:c7:cb:88:76:2c:
                    6a:23:fd:14:67:d5:38:73:62:f0:63:2f:a6:f4:bd:
                    09:61:59:56:69:96:50:9c:82:b8:39:86:26:1f:e9:
                    bd:c7:4b:cc:23:4f:04:61:20:6e:c8:c9:a1:ba:7d:
                    01:2f:f1:8a:17:5d:b4:0e:09:1d:44:e9:e4:63:a6:
                    65:dd:5f:ba:74:fd:68:d1:1f:60:11:92:a6:1b:b9:
                    0c:aa:f1:18:80:19:dd:fa:2a:90:97:16:54:2a:cc:
                    85:be:9b:a4:66:c2:5f:6a:cf:cf:cb:e7:83:0e:a8:
                    80:2a:db:1c:88:c9:2f:f3:5e:9d:79:0c:1c:2a:69:
                    62:74:f3:ab:f7:22:db:ff:d8:de:7a:b2:c1:53:60:
                    60:a6:30:9f:b4:27:86:8d:2d:1a:66:96:81:41:56:
                    30:da:00:34:0a:06:ee:80:ac:0b:b9:e5:f6:b0:bb:
                    f7:0d:8a:81:e7:a6:1c:2c:4c:c4:85:dd:48:5b:df:
                    25:15:bd:b0:79:59:e2:bf:0f:88:b2:d9:38:e9:57:
                    22:a6:23:0f:69:25:f0:ae:ea:6b:85:79:41:66:ef:
                    b4:cb:ee:ba:56:65:66:65:4f:a4:2a:81:41:80:10:
                    42:90:fe:30:a8:44:73:e5:0b:f4:80:29:b6:33:ee:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3D:B0:5F:9A:88:75:56:3E:35:C5:19:67:C0:0D:76:BB:49:2F:89
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:42:a9:bc:35:07:c9:0d:2f:99:13:af:03:3b:34:8b:68:ed:
         3c:e7:83:90:ed:dc:77:87:b9:99:e9:9b:8a:aa:85:f0:b4:9a:
         e0:a5:41:bf:70:e4:95:cc:59:e0:0e:9c:b7:b6:90:f5:a5:36:
         3e:61:18:1a:c3:98:67:49:5c:bd:03:1d:4a:15:6b:17:ee:bc:
         73:8b:0f:52:97:43:cd:9c:25:f4:5e:63:8f:f7:02:61:a2:49:
         44:c3:0c:03:6a:c3:e1:08:e6:eb:6c:2a:c9:45:bc:18:b2:c4:
         bc:62:fc:08:62:67:4d:38:13:0a:fb:4d:4f:a5:71:30:21:f2:
         be:e6:84:0b:57:3a:b5:ce:18:61:b1:55:c1:d6:6b:c0:65:03:
         7e:43:18:0e:4f:2b:6a:c3:d9:2a:ba:cf:34:53:b8:45:3f:49:
         bf:69:10:01:d3:06:91:69:a4:66:4f:c4:5d:ad:d1:9b:47:cd:
         3b:99:40:2b:2e:b5:cd:8a:5c:61:4c:78:89:6e:b9:70:75:9c:
         dd:30:b9:b5:14:e0:af:94:27:87:f7:3a:7b:e1:0e:33:5c:d4:
         51:d6:1c:d9:de:bb:28:16:57:2d:f8:ad:45:36:fb:3c:3a:10:
         ec:68:b6:7b:21:83:28:48:a2:d2:90:c9:06:47:75:a2:3b:9c:
         aa:96:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:39:53 2026 by rpki-client