Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
File:                     79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft (raw, json)
Hash identifier:          f1D8LDgSaU3qrRlQAnJxCAGa8erIGROJNeXi2drl4h8=
Subject key identifier:   50:D2:61:20:2B:61:E3:7F:3D:5C:8D:0F:6B:88:AC:74:29:4E:D8:CA
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       0F2B05B23754285C1BD3FCB5ABAF6502A305705D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
Manifest number:          3A
Signing time:             Mon 02 Mar 2026 10:23:17 +0000
Manifest this update:     Mon 02 Mar 2026 10:18:17 +0000
Manifest next update:     Tue 03 Mar 2026 10:42:17 +0000
Files and hashes:         1: 34332e3232362e37362e302f32332d3233203d3e20313334373632.roa (hash: TEgRpxJrdHjFQfV6FA3/d3IsU3lW5rcF+EGF51eTmKM=)
                          2: 3130332e34352e3137362e302f32302d3230203d3e20313334373632.roa (hash: 9UvYybjZpTIXKrZpNHspvFCJye/rLLHJN8IH2vUwnN0=)
                          3: 3130332e34352e39362e302f31392d3139203d3e203633363132.roa (hash: ytuVaxbuKfHx/6663XtL86FRnQyNvO6Ke4c7ojFnJ8I=)
                          4: 3130332e34302e3234302e302f32302d3230203d3e2034383136.roa (hash: QLiibejGZY+s0lzjseXtBPtD7YiiDNXaqGMCZ9IkqtI=)
                          5: 34332e3232362e3134342e302f32302d3230203d3e20313334373632.roa (hash: TEmvnV0em0Malf//5tBhQBS08ooO1J9DkWsbmMXss94=)
                          6: 3130332e33392e3233322e302f32322d3232203d3e2034383136.roa (hash: 3zysFoseyORdE87QxC6HuD/MEEbQT2Rs3erWwrFjSR8=)
                          7: 3130332e33392e3232342e302f32312d3231203d3e2034383136.roa (hash: PIPxDHzRtVCrRNlipzR0dmIHI3b84LTCMDPN/atZWS0=)
                          8: 3130332e34352e3137322e302f32322d3232203d3e20313334373632.roa (hash: LXe9UoLF5HxrqCopFTH/2+CIE/OM0kuacxM2MNLyohc=)
                          9: 3130332e34342e3234302e302f32302d3230203d3e2034383136.roa (hash: mSMVOrBaP8GPS6PtTISeOiU1fvdwIqn8HOz0Htz/pAA=)
                          10: 3130332e33392e3230382e302f32302d3230203d3e2034383136.roa (hash: e1XoFn1VogeD0Yw8mxPj6vUyZjlJYZL+su/9k79urhA=)
                          11: 3130332e34352e302e302f31382d3138203d3e2034383136.roa (hash: njM5tHb3l0I4SA7MNFVwfN5UDDhy+7iCEFkp2FBj2B0=)
                          12: 79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl (hash: 09LCvqokKqRXkeL3s/LaDrjA+bJUSXZJfgUQpzVwXF0=)
                          13: 34332e3232362e35342e302f32342d3234203d3e20313334373632.roa (hash: 1IAhdtqxpAJqZd/3Y6CNteehWCyNgE6qPUQoX0l94jA=)
                          14: 3130332e34342e3233362e302f32322d3232203d3e2034383136.roa (hash: jDHp7YWBRkrqrYoMmJryoIxBWIW4KnNbKM3I1XgqM80=)
                          15: 34332e3232362e35302e302f32332d3233203d3e20313334373632.roa (hash: 4G1uX+M843NXLbM/JrsXemgrWu2m9ERtexHrTXnsTOg=)
                          16: 34332e3232362e35332e302f32342d3234203d3e20313334373632.roa (hash: /H/QELj8D79Edjy+iwlVUXEOh5NMYm9O9vM8ysBQN6w=)
                          17: 34332e3232362e33322e302f32302d3232203d3e20313334373632.roa (hash: dM3P2p7AfzRew8633W3o7eYGech11Mz4FsyXX+v5aI8=)
                          18: 34332e3232372e37322e302f32312d3231203d3e203633363132.roa (hash: dMuT5PpwBbfSl93cOvmsvC1CQZBpiyj5XQ8Po/35ow4=)
                          19: 34332e3232372e36342e302f32322d3232203d3e20313334373632.roa (hash: lPkZxneaw7ivnJUGbog7XpYlWuoLPuWPc6LxamPCkXg=)
                          20: 3130332e34352e3234382e302f32322d3232203d3e20313334373632.roa (hash: fXaH00zxc0tR+ue1P6NV/E866EoCmrbfjRJu8uyaoE8=)
                          21: 34332e3232362e36342e302f32312d3231203d3e20313334373632.roa (hash: iMzWbwt9Lr6XyLIT0lsExIC6EGZ8AQPrSNPsn36V+Bs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2b:05:b2:37:54:28:5c:1b:d3:fc:b5:ab:af:65:02:a3:05:70:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Mar  2 10:18:17 2026 GMT
            Not After : Mar  3 10:42:17 2026 GMT
        Subject: CN=50D261202B61E37F3D5C8D0F6B88AC74294ED8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:0e:2e:7c:33:25:3d:c9:0a:0f:20:80:64:
                    69:83:70:d2:03:bb:c0:c6:7a:aa:f7:ea:36:df:70:
                    7b:22:ea:77:64:b5:23:fe:59:5a:5d:b0:54:f5:60:
                    03:4b:34:a8:3c:c3:c5:c3:38:ba:38:06:7a:52:94:
                    fc:e7:9e:72:6d:f8:f7:3c:40:ed:ce:54:bf:26:65:
                    59:39:ee:1d:b4:14:63:9f:df:5a:38:6d:d4:5f:93:
                    d9:f0:d7:fc:57:ba:3f:8f:82:39:fa:f8:ab:c3:f2:
                    94:ae:e1:2e:57:51:3e:5b:b3:ef:4e:8b:2c:0c:37:
                    cc:a7:b6:53:1a:c5:1a:71:83:09:0b:61:dc:b4:eb:
                    33:ab:df:9c:4b:b0:12:ea:08:02:6c:80:c8:12:d8:
                    7c:22:dd:7b:e9:99:1b:ca:fa:84:ff:85:2f:8e:3f:
                    22:9d:7c:64:64:df:4b:2c:15:77:ba:59:56:63:d7:
                    46:4f:94:9f:aa:17:63:13:9f:a5:fe:c0:2d:df:bd:
                    31:96:86:9e:4f:dd:e1:2f:00:52:3e:d8:54:8c:ab:
                    5e:3f:0b:9a:54:53:d7:8b:14:71:ee:bc:35:37:90:
                    32:d1:6d:8d:3f:51:c9:a2:a7:41:e4:89:39:6c:69:
                    d3:fa:a3:7a:00:6b:19:66:98:d3:b2:7a:d3:eb:c9:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:61:20:2B:61:E3:7F:3D:5C:8D:0F:6B:88:AC:74:29:4E:D8:CA
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:60:15:e2:e1:2f:37:a9:db:2a:24:73:8f:02:96:0d:7a:
         95:03:34:aa:15:5b:ed:c3:88:7e:92:1b:6c:eb:b6:48:56:3d:
         62:ba:53:c0:c0:cc:3c:4d:93:63:7a:e3:36:c3:1a:ba:9f:95:
         a6:8a:47:62:f9:e3:36:34:fd:73:5e:d7:6f:3e:df:e3:7f:0d:
         a7:73:36:f7:af:8e:c5:59:dc:7a:aa:7e:a2:42:36:43:82:1d:
         c7:6e:6b:c2:a7:df:8a:4c:42:8b:4d:60:cb:f4:c1:cb:6e:e7:
         54:48:78:8e:35:28:64:9d:86:8c:45:7d:b6:c7:f3:27:2d:3c:
         5e:f5:a9:a9:95:ea:8f:1a:ba:b9:45:fa:e7:39:c7:5a:9a:ad:
         2e:64:1d:51:64:69:d1:5c:8f:72:30:ef:3e:65:70:e4:e8:df:
         33:25:30:60:d1:af:5f:9e:0f:68:c4:76:fd:7e:9a:63:47:35:
         f0:b1:e9:de:f4:f6:cb:10:14:a0:c1:a9:03:89:2d:1a:0b:65:
         b7:71:ae:86:9c:55:9c:91:e6:6b:68:85:f7:29:4e:08:c5:84:
         34:05:66:f2:ff:b1:2b:e6:50:95:7c:50:3f:c0:f4:2b:b2:9f:
         ed:0b:9a:75:0a:9e:4c:25:b5:52:c6:12:95:7f:21:b3:7b:fb:
         1c:3a:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:52 2026 by rpki-client