Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          2H4VyRAIFGSGCHjG5ITjW1YL2RnDK1xQIzbi+Zzm9YE=
Subject key identifier:   97:14:E9:38:D8:2F:DC:5B:9C:E0:5A:13:A0:71:CC:5A:E8:C6:1E:10
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       49D89B43F99054BFA2C842AFE51E0169F7659C23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          76
Signing time:             Fri 17 Apr 2026 10:24:42 +0000
Manifest this update:     Fri 17 Apr 2026 10:19:42 +0000
Manifest next update:     Sat 18 Apr 2026 10:31:42 +0000
Files and hashes:         1: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
                          2: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          3: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          4: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: OIky1d9TemgsEkq8rIwN2ZPtCbfdPyLMiAk+BdCrzQQ=)
                          5: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          6: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          7: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          8: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
                          9: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          10: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          11: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          12: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d8:9b:43:f9:90:54:bf:a2:c8:42:af:e5:1e:01:69:f7:65:9c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Apr 17 10:19:42 2026 GMT
            Not After : Apr 18 10:31:42 2026 GMT
        Subject: CN=9714E938D82FDC5B9CE05A13A071CC5AE8C61E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:97:49:3b:c7:db:4c:6c:ed:52:cc:bb:3f:
                    bb:e2:2c:cd:91:70:eb:17:98:ee:b5:8b:a4:4c:bc:
                    0d:45:a0:d6:36:45:0c:bf:f2:9a:a5:33:27:6d:aa:
                    fb:a1:84:89:64:15:b6:46:65:98:57:50:1b:fd:cc:
                    84:89:15:43:b5:d4:2c:62:de:f7:69:06:25:e0:59:
                    57:8d:0d:20:7a:6d:5e:a8:c8:77:bc:5f:e1:26:24:
                    35:b1:4b:b8:c8:37:e8:86:a9:78:77:35:a8:6f:a7:
                    0c:8b:f5:de:3f:e3:a0:a3:5f:7c:dd:32:d7:fd:3e:
                    3c:dc:62:ed:86:be:08:b8:3b:ff:44:11:5a:59:4b:
                    ac:55:c2:bf:d7:94:4a:71:82:5a:b6:93:94:73:3b:
                    24:d3:22:30:66:ee:d0:27:17:56:8b:47:99:d3:f2:
                    e8:c1:e3:11:c7:c3:2b:31:85:0c:5f:c5:78:6b:a6:
                    98:da:24:60:26:f8:27:d6:c9:db:d5:56:73:4b:94:
                    a8:f1:9a:76:91:98:f2:5f:dd:89:e6:66:85:e3:e0:
                    a6:66:1c:c6:b0:7f:22:d9:e9:16:20:dc:03:1f:51:
                    50:01:2c:0c:81:87:85:b8:12:91:0b:aa:c2:5f:ff:
                    60:bb:e8:65:c9:15:79:6b:8c:8e:33:ea:97:45:74:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:E9:38:D8:2F:DC:5B:9C:E0:5A:13:A0:71:CC:5A:E8:C6:1E:10
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4a:b5:15:42:1e:e7:4a:41:c5:f6:19:ba:22:56:6f:ee:3b:
         ae:21:83:1d:18:45:6a:21:8b:e4:81:cb:21:07:96:b5:0a:9a:
         0b:da:db:58:a4:07:c5:88:65:15:cc:f8:1f:84:71:1e:dc:d7:
         07:51:a4:3a:9a:ac:04:e1:ce:05:37:54:eb:cf:e3:c1:bd:96:
         da:de:bd:40:e6:5c:39:35:07:92:c1:27:3e:c3:0c:10:86:58:
         80:cf:2e:92:e9:c0:94:37:93:9e:f6:06:9c:da:27:22:75:11:
         06:ce:a6:f4:c1:d7:79:d8:43:88:73:9b:92:74:35:97:10:5e:
         5a:b4:50:51:e7:3d:66:89:8d:20:fe:40:50:8e:0a:84:f8:59:
         6b:61:7e:67:57:b8:fb:20:59:2d:d0:7e:fc:12:ec:d5:bf:6f:
         c4:f8:e1:37:f2:81:e8:03:4d:89:67:37:dd:9e:f6:24:ad:65:
         f2:5f:67:b3:fa:12:23:35:38:8d:83:8e:7b:d8:42:ca:1e:4c:
         c5:72:d5:4e:66:e9:96:d6:de:51:e6:a8:7a:44:ea:23:15:4a:
         d0:6a:58:35:73:9b:81:db:e6:fe:ee:4b:1e:95:47:da:95:52:
         38:19:69:02:13:73:84:77:8e:c8:75:13:f2:69:b1:9e:f5:3a:
         fd:42:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:26:11 2026 by rpki-client