Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File:                     B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier:          x5leCzCdohCQiAJnIQc/eeWEY+DTySQ+wCLlL6zFIF8=
Subject key identifier:   36:F7:87:31:A9:94:8E:4C:15:F7:5B:57:98:09:7A:3D:D8:03:7A:FD
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       53D0A6F86B82EE463AFFBB79A2AC645B458AC58C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number:          38
Signing time:             Sun 01 Mar 2026 20:48:16 +0000
Manifest this update:     Sun 01 Mar 2026 20:43:16 +0000
Manifest next update:     Mon 02 Mar 2026 21:34:16 +0000
Files and hashes:         1: 3130332e39372e35392e302f32342d3234203d3e20313532303932.roa (hash: 3/58orjmzpKdtmKP2bXfseV66R6BzBQVq1m+AsGRi0M=)
                          2: 3130332e39372e35392e302f32342d3234203d3e20313337343433.roa (hash: YQJhhloPhqFiV0jq+cBSJsHLwVGC+4b9h11geBT/7MY=)
                          3: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: EDb29gyjphng4gtUZCR8LqAmpheWNlu5NBNQhXTrsxM=)
                          4: 3130332e39372e35382e302f32342d3234203d3e20313532303932.roa (hash: 9g8q6C2zMMfK8FIvJQCnY2jS/6Obpq4wlvntZI6tOkw=)
                          5: 3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (hash: Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=)
                          6: 3130332e39372e35362e302f32322d3232203d3e20313532303932.roa (hash: xzVFs6aTjbygQXEe4vJkKPr2ZvERkqIPBfioErfexIo=)
                          7: 3130332e39372e35372e302f32342d3234203d3e20313337343433.roa (hash: xdA/DzV+toI7Q3bECRbnQQmPTqAaNqd4BPhFTjhYgtk=)
                          8: 3130332e39372e35372e302f32342d3234203d3e20313532303932.roa (hash: c4ptnMygLAmeXf14Sts1bgs4S+frcNg4CBkxXbL7OAs=)
                          9: 3130332e39372e35362e302f32342d3234203d3e20313532303932.roa (hash: 9JowGdQS60EvySPbEMdcRTNTQ1+mfk9mYrPz0eWhI8M=)
                          10: 3130332e39372e35382e302f32342d3234203d3e20313337343433.roa (hash: JF5TxoFp3gy3/wvpBMe2C5Y2Ij/Gp3tRmMrWijml7no=)
                          11: 3130332e39372e35362e302f32322d3232203d3e20313337343433.roa (hash: tT7KABninYg0iamV5ShQ2APc57EUXLuPGm9ml3XoXL4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 21:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d0:a6:f8:6b:82:ee:46:3a:ff:bb:79:a2:ac:64:5b:45:8a:c5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Mar  1 20:43:16 2026 GMT
            Not After : Mar  2 21:34:16 2026 GMT
        Subject: CN=36F78731A9948E4C15F75B5798097A3DD8037AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:f7:d0:a3:3e:b0:30:55:80:2f:96:fa:6f:
                    62:f0:29:a9:11:e8:9e:5f:7c:d2:49:3f:1f:bd:7b:
                    e0:6b:f5:f1:67:c5:35:6a:cb:19:26:45:f8:86:cb:
                    c1:1c:7d:97:7c:d6:23:70:20:87:48:78:9a:09:ea:
                    aa:98:8d:42:71:20:c2:03:2b:3a:51:75:60:96:9e:
                    46:c3:e5:64:9e:56:66:2f:25:33:e9:41:f9:de:ad:
                    4c:75:0e:77:29:85:d0:f7:11:b5:0d:26:32:73:38:
                    68:9d:28:79:8e:e7:85:41:37:30:92:00:b9:33:1a:
                    99:a6:47:ed:49:bf:e3:7f:39:c2:98:9f:3d:2e:0b:
                    88:21:80:2e:14:bf:47:83:3a:16:e5:1a:35:7b:69:
                    4c:03:b7:94:2e:e4:e2:b4:e7:b8:ef:45:2a:cc:53:
                    12:98:7e:77:d2:a7:4e:c2:d3:f3:e2:ad:6d:ee:a2:
                    f9:19:77:fc:c7:56:83:03:23:3c:d2:f3:11:43:68:
                    55:cf:1e:2b:25:aa:78:0d:4a:07:b0:92:c5:22:2b:
                    78:08:8a:8c:95:09:95:09:23:9f:e2:ec:6b:a1:46:
                    0e:ea:94:a2:b6:87:54:82:49:5c:6f:74:b1:c1:be:
                    96:06:0f:cf:23:7e:24:e9:9d:24:31:06:8d:64:18:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:87:31:A9:94:8E:4C:15:F7:5B:57:98:09:7A:3D:D8:03:7A:FD
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:b4:cb:e3:96:5f:bc:2e:b5:56:33:d2:de:f0:5f:51:80:
         c3:1c:d5:99:ec:07:77:75:10:e0:18:07:e9:20:32:7b:a1:8b:
         2d:ad:14:07:b5:36:8a:9b:0b:43:67:2f:c0:ec:d3:34:e1:30:
         cd:c9:c2:6f:72:92:b2:e4:3c:86:bf:9f:3d:9a:7c:b1:8f:0d:
         1d:f9:68:3a:73:3c:89:62:db:6d:d6:21:71:20:54:1e:07:15:
         f1:7a:d6:02:eb:2c:f2:b0:09:ea:1b:be:0f:01:93:48:bd:95:
         9b:08:02:e8:65:e3:70:e3:de:db:23:5f:bc:55:ed:04:de:38:
         fb:6c:50:68:5a:78:66:2b:f4:84:51:20:40:6e:18:da:ac:4c:
         89:74:9f:95:b0:84:04:91:a5:af:36:3f:11:d8:93:94:61:68:
         81:fd:f8:fe:ec:c2:a8:ff:32:72:a3:21:64:ab:1a:b0:6e:6a:
         85:b1:d8:7d:74:ee:7a:c3:a1:e7:70:67:5b:76:57:08:25:57:
         1d:57:20:b5:19:47:aa:10:73:e9:0e:aa:55:e8:3f:95:57:8f:
         70:c5:9d:62:f5:05:06:3a:8e:51:40:1d:22:6c:e0:d8:3a:30:
         38:fe:35:7c:b9:fe:ef:d7:1a:98:9d:c6:fb:8f:de:51:71:87:
         92:7d:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:14 2026 by rpki-client