Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File:                     E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier:          tqI8nnEr6/DrjEF1FUxe0sRVTzTkbyyYSZP/y8Q8x7Y=
Subject key identifier:   4A:20:B5:24:7C:36:B2:74:0F:62:88:A7:C9:F7:11:6F:4F:28:C6:3F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       6FA246B65B4F7E6B552DEE89D01B0F893FDC0998
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number:          40
Signing time:             Mon 02 Mar 2026 01:23:16 +0000
Manifest this update:     Mon 02 Mar 2026 01:18:16 +0000
Manifest next update:     Tue 03 Mar 2026 04:07:16 +0000
Files and hashes:         1: 3132332e39382e35322e302f32322d3234203d3e203632333837.roa (hash: 8OBwPIffrr3XunlFIKZzyNK+MW5jxSUim6pt9VzokUM=)
                          2: 3132332e39382e33362e302f32322d3234203d3e203632333837.roa (hash: uXZqTUVIUMoZhVrKs97j3QYujpa12PmoKmyZwJAGwY0=)
                          3: 3131392e35392e3235322e302f32322d3234203d3e203632333837.roa (hash: 6erJBvMpCVcq1Po4iDG3SD4Zw/2rxYqy1EMsEVwFLYo=)
                          4: 3130312e3233322e39362e302f32322d3234203d3e203632333837.roa (hash: XB4M3bcChr+d8inKZBES9ct2hshjy+3uu1hxJ7cn64g=)
                          5: 3132342e34322e3133362e302f32322d3234203d3e20333939313338.roa (hash: bQiErAXOjI0VPmUr3ttraVD7Ty086lxsuve+vR9dswU=)
                          6: 3132342e34322e3132382e302f32322d3234203d3e20333939313338.roa (hash: Vezsjm2nsCleqU7ggWKnP3nKtWgjbAfTLLyfTneK3So=)
                          7: 3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa (hash: aF9AyQlYz6RZt0xQ2JBCrtNSCaQewPlZBi9SEDy/6I8=)
                          8: 3130312e3233322e33362e302f32322d3234203d3e203632333837.roa (hash: sTkKVt9iW4CD/CCmJGDYq7RmYRYZ1OMtKL4nyypAeuE=)
                          9: 3132342e34322e3134342e302f32322d3234203d3e20333939343638.roa (hash: SdlRWipoKWLjfI9FQSk/SCRyL8mhnpksMysC4H0OkRg=)
                          10: 3130312e3233322e33322e302f32322d3234203d3e203632333837.roa (hash: Q9d6PLAlNLtu/emzsKDFrKMsH9htWUfZ8MF4elQQCx4=)
                          11: 3131392e35392e3231322e302f32322d3234203d3e203632333837.roa (hash: YBKcVsKYReF2J4rC9+/qzKpjgZ1VbQwkjq+AreMX6uw=)
                          12: 3130312e3233322e3135362e302f32322d3234203d3e203533333536.roa (hash: acHm1cx9A4vbiUrlaoK4q0P7D4imDFdyhSny3rqGIo8=)
                          13: 3132342e34322e3135362e302f32322d3234203d3e20333939343638.roa (hash: Q9WNiY3D5Ig84zc4CmQwpw/C664C4T4CNwTtBXqPCmc=)
                          14: 3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa (hash: dnP0455oLYXVgpr0/l53Y31YnAi8TXoahm/DGNNY1Pk=)
                          15: 3131392e35392e3139362e302f32322d3234203d3e203632333837.roa (hash: kDCF0VWHsEGIlUgollIPMS99YSF2L+kV5LHktY/NTOg=)
                          16: 3130312e3233322e3133322e302f32322d3234203d3e203632333837.roa (hash: layHXUGbwoMnKUynxkhzn6W9lshnTJPugxkAq4QtpXo=)
                          17: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: BD7zSiPzUR09ZRgNfb6nYyLAShTzIMl+HUf7hTGrrYw=)
                          18: 3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa (hash: yU65BB1qrplK2lLxtpF/uVSmP1uOUvh6JmJKAK+0pfg=)
                          19: 3130312e3233322e34342e302f32322d3234203d3e203632333837.roa (hash: zuWvZgWhWg/weyX1KlYFmyu60n6gdm1fZHlhR39qQns=)
                          20: 3130312e3233322e38342e302f32322d3234203d3e203632333837.roa (hash: bQrtgxtEZujaOYa1g+bXECA8PgP0wTLYkHlg34oXrCs=)
                          21: 3130312e3233322e3132342e302f32322d3234203d3e203632333837.roa (hash: QkodyoCCZPG3Q10DafGPLaySktICi06fiSwUYD2AkmA=)
                          22: 3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa (hash: W/bQYZj/hsTlnoP7p5QDfey1W36vYQVxLnEsc4e0VVc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:46:b6:5b:4f:7e:6b:55:2d:ee:89:d0:1b:0f:89:3f:dc:09:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Mar  2 01:18:16 2026 GMT
            Not After : Mar  3 04:07:16 2026 GMT
        Subject: CN=4A20B5247C36B2740F6288A7C9F7116F4F28C63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:a1:bb:62:7b:85:82:80:f6:d1:b4:ac:70:
                    13:7b:a0:7f:ab:f0:ef:c6:5f:6e:40:40:2d:a3:6b:
                    5e:0a:e9:a0:63:0c:db:ea:04:a7:23:52:81:af:ec:
                    e2:db:50:5f:af:95:30:1b:05:8d:65:3a:92:66:5d:
                    21:3a:84:fc:0f:d5:a1:3e:77:3b:1b:c9:c2:2d:53:
                    94:e5:4e:9c:6d:7f:83:74:5f:79:64:e6:66:f3:0b:
                    74:c9:e6:72:00:e2:cd:c0:e4:c2:1f:ec:e1:f8:43:
                    6f:03:c7:a7:c8:3f:9c:a5:8d:3a:91:54:3d:64:6d:
                    ab:a0:4c:95:ab:1b:de:bd:f6:09:76:06:59:e0:da:
                    ab:f0:34:05:72:c9:82:26:48:b5:d6:74:44:4b:08:
                    ff:ff:62:d5:c1:24:dc:e5:ab:e9:9d:5f:c1:b3:79:
                    ad:75:29:a1:84:16:5f:20:7a:9b:e1:7f:89:a6:ce:
                    fc:62:47:3f:ef:36:aa:cf:f5:83:8c:69:1f:35:01:
                    16:38:71:10:0c:07:7d:8a:6a:9c:9c:c1:29:a2:a3:
                    86:53:32:81:26:5d:d3:2e:bd:81:cc:83:b2:7b:68:
                    80:fd:03:2f:24:c3:28:fb:1d:d9:2b:6b:ac:af:3f:
                    84:12:9d:b4:f1:be:b0:10:06:b9:e5:67:22:20:b4:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:20:B5:24:7C:36:B2:74:0F:62:88:A7:C9:F7:11:6F:4F:28:C6:3F
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:32:65:a3:67:15:41:2f:db:d7:da:5a:d3:60:95:f9:c3:
         d2:82:c8:10:24:c1:52:ff:16:c6:73:80:c1:d8:43:05:d6:10:
         dc:9e:a1:39:1d:5a:95:05:e9:7d:04:c2:58:74:71:95:35:3e:
         78:ab:72:b3:9e:e7:4c:26:d3:eb:2f:da:18:ef:b6:7b:f7:f5:
         0e:a6:f9:51:a0:d2:76:66:9d:b3:3b:81:40:67:6f:00:2d:6a:
         c6:7f:5f:7f:f5:96:3f:23:7c:a8:b6:af:74:03:50:d8:31:4f:
         a9:ab:2c:ce:c5:ba:a8:0b:2a:ed:eb:c4:b2:62:da:a5:f8:aa:
         3a:ac:f8:14:aa:b8:c6:4b:08:53:d4:2e:76:d2:39:aa:19:3a:
         10:cb:86:91:09:92:e9:49:ca:b2:58:b6:9e:90:e3:b7:8b:7d:
         1b:6b:f9:5f:44:14:9b:79:4b:51:16:c0:00:92:3a:03:94:7a:
         93:4a:7d:17:5b:15:a6:b4:2b:68:7d:6a:bd:57:36:cc:55:74:
         5d:cd:2b:89:db:5b:c0:3c:b9:27:b9:27:b0:4f:3c:38:93:2c:
         69:49:87:f6:8a:ee:56:4d:b6:95:2a:89:c4:46:25:69:3a:fb:
         de:85:9a:29:33:09:20:a9:a2:a2:cf:98:c1:42:a1:85:9f:62:
         55:bb:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:50 2026 by rpki-client