Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          3NLgc/y3m7pYIp5Ab2GMlAQ/8sQrMjBA0PajbYn+/Bo=
Subject key identifier:   2B:11:58:74:01:8D:97:B1:E7:AB:35:62:6F:F7:89:FC:EF:3E:1F:D3
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       53E6E8AA584EEEA0581221AD047F26C5089D3927
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          39
Signing time:             Sun 01 Mar 2026 23:03:16 +0000
Manifest this update:     Sun 01 Mar 2026 22:58:16 +0000
Manifest next update:     Tue 03 Mar 2026 00:53:16 +0000
Files and hashes:         1: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
                          2: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: DF3atOvj9E/WmiS9+5viAN9UoS4GspWTR597TGk5z6I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 00:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e6:e8:aa:58:4e:ee:a0:58:12:21:ad:04:7f:26:c5:08:9d:39:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: Mar  1 22:58:16 2026 GMT
            Not After : Mar  3 00:53:16 2026 GMT
        Subject: CN=2B115874018D97B1E7AB35626FF789FCEF3E1FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:33:19:d2:1c:19:78:60:fa:50:ae:28:10:
                    be:e6:d9:51:62:7b:6f:1f:77:3b:db:39:04:08:45:
                    8b:9a:58:09:3e:11:e4:cb:3f:c9:ba:a9:a4:5d:d9:
                    7d:1d:21:09:44:25:e8:e0:3f:ec:0d:0d:56:e0:03:
                    d8:87:c3:02:99:d5:e0:97:36:22:ab:41:9d:91:d0:
                    96:7a:64:e7:36:93:13:f0:fc:c5:9d:5f:4c:ea:ac:
                    04:a5:d7:cc:d1:20:92:39:99:9d:73:45:3e:96:1d:
                    94:20:a1:43:b8:ea:71:63:28:49:df:af:1c:fd:88:
                    b6:ba:0a:c5:81:84:dc:e1:21:8e:3e:53:39:c7:86:
                    09:cc:68:45:2e:2c:da:2f:4e:95:ed:cd:7b:56:b5:
                    9d:07:7b:26:bc:10:4a:f3:23:49:01:00:21:5c:47:
                    e3:18:bb:cf:1e:cc:33:20:e4:dd:71:54:ee:4c:5c:
                    5b:e3:47:b1:f4:9e:4b:4c:7d:5e:c2:fc:89:ba:00:
                    a0:d8:9b:b5:4a:4d:da:cc:6e:49:f3:8d:d5:85:c8:
                    6c:4b:34:17:c7:3d:e1:ef:ef:13:a9:47:29:40:e3:
                    72:2d:82:12:55:ec:b3:bd:c1:4a:c1:0e:29:e8:02:
                    34:98:3b:85:c1:82:66:31:6b:65:ba:e6:91:f9:92:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:11:58:74:01:8D:97:B1:E7:AB:35:62:6F:F7:89:FC:EF:3E:1F:D3
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:e6:21:e9:90:49:16:3b:ac:78:85:07:2b:0e:d5:b2:e4:
         78:11:70:9f:90:a8:a4:95:b4:0d:de:4e:86:e5:01:2f:3d:db:
         f8:c4:bc:68:2e:65:66:b4:4b:34:7b:07:2c:dc:4e:55:7d:65:
         97:13:8b:81:6a:f8:bb:d3:48:74:09:32:ab:57:b4:07:81:66:
         cb:88:cf:99:6b:9f:30:30:43:de:c5:b6:af:8b:20:64:f4:46:
         44:72:2c:f2:c9:c9:fa:e2:07:57:70:e0:38:93:94:e6:fa:87:
         07:87:af:aa:5e:67:f8:3d:d8:d1:55:bb:f7:02:56:ee:d3:4d:
         81:e1:80:db:97:df:89:87:38:1b:e4:6a:2b:8a:f0:9f:50:39:
         b6:a9:64:1d:23:50:96:96:a4:67:f0:18:bc:e6:ee:89:1c:ac:
         09:54:87:ff:41:03:88:65:10:97:fc:e4:2b:d6:06:05:93:1c:
         53:ba:d0:97:81:5f:7b:c6:fe:6c:8b:2a:88:18:bc:b7:21:82:
         b6:71:71:d6:3f:31:ac:b7:31:8a:f6:7d:55:4d:97:ef:b8:55:
         a8:5c:23:b6:b9:d9:bb:3a:93:78:9e:f8:fe:68:fb:ec:6a:5f:
         6d:69:1d:48:3c:09:a0:a7:8f:23:ff:1c:21:fa:16:06:05:56:
         c3:45:cb:61
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUU+boqlhO7qBYEiGtBH8mxQidOScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2
NUJDNzdBRDAeFw0yNjAzMDEyMjU4MTZaFw0yNjAzMDMwMDUzMTZaMDMxMTAvBgNV
BAMTKDJCMTE1ODc0MDE4RDk3QjFFN0FCMzU2MjZGRjc4OUZDRUYzRTFGRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhzMZ0hwZeGD6UK4oEL7m2VFi
e28fdzvbOQQIRYuaWAk+EeTLP8m6qaRd2X0dIQlEJejgP+wNDVbgA9iHwwKZ1eCX
NiKrQZ2R0JZ6ZOc2kxPw/MWdX0zqrASl18zRIJI5mZ1zRT6WHZQgoUO46nFjKEnf
rxz9iLa6CsWBhNzhIY4+UznHhgnMaEUuLNovTpXtzXtWtZ0Heya8EErzI0kBACFc
R+MYu88ezDMg5N1xVO5MXFvjR7H0nktMfV7C/Im6AKDYm7VKTdrMbknzjdWFyGxL
NBfHPeHv7xOpRylA43ItghJV7LO9wUrBDinoAjSYO4XBgmYxa2W65pH5kiGbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUKxFYdAGNl7HnqzVib/eJ/O8+H9MwHwYDVR0j
BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3
MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE
MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPLmIemQSRY7
rHiFBysO1bLkeBFwn5CopJW0Dd5OhuUBLz3b+MS8aC5lZrRLNHsHLNxOVX1llxOL
gWr4u9NIdAkyq1e0B4Fmy4jPmWufMDBD3sW2r4sgZPRGRHIs8snJ+uIHV3DgOJOU
5vqHB4evql5n+D3Y0VW79wJW7tNNgeGA25ffiYc4G+RqK4rwn1A5tqlkHSNQlpak
Z/AYvObuiRysCVSH/0EDiGUQl/zkK9YGBZMcU7rQl4Ffe8b+bIsqiBi8tyGCtnFx
1j8xrLcxivZ9VU2X77hVqFwjtrnZuzqTeJ74/mj77GpfbWkdSDwJoKePI/8cIfoW
BgVWw0XLYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:36:28 2026 by rpki-client