Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          a1YrkSeakg19jGjrGci1vzKIM0J28H84CX3K8GmD5TU=
Subject key identifier:   54:BC:1A:82:26:9C:80:EA:0B:02:A1:A4:7A:14:98:C0:08:CE:69:A9
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       6D76EDE4B69CA286DB44CB60857C7C8E8DD72963
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          39
Signing time:             Mon 02 Mar 2026 08:18:17 +0000
Manifest this update:     Mon 02 Mar 2026 08:13:17 +0000
Manifest next update:     Tue 03 Mar 2026 11:13:17 +0000
Files and hashes:         1: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
                          2: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          3: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          4: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: rVR4b8dSUjxJ4y5fnCNEy4eCLD4tI+TEktCWAM/bDYs=)
                          5: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          6: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          7: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          8: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          9: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          10: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          11: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
                          12: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:76:ed:e4:b6:9c:a2:86:db:44:cb:60:85:7c:7c:8e:8d:d7:29:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Mar  2 08:13:17 2026 GMT
            Not After : Mar  3 11:13:17 2026 GMT
        Subject: CN=54BC1A82269C80EA0B02A1A47A1498C008CE69A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:a2:6b:a1:e2:fe:96:e5:a1:c0:e9:ea:d5:
                    95:01:b8:51:97:ca:22:7d:4a:59:06:2f:c2:20:75:
                    ea:c3:7b:97:61:2d:db:7f:71:3e:59:e5:55:3f:33:
                    28:68:01:2b:cb:32:f7:26:ae:78:11:4c:3b:fe:bb:
                    6a:3d:e0:dd:35:23:30:43:08:5f:3c:0e:a0:61:d3:
                    c3:b3:bb:0a:1e:72:92:11:c3:31:42:8b:d0:eb:48:
                    63:1b:a0:34:b9:59:b2:d0:c9:cf:92:10:54:6f:d5:
                    ab:22:62:dc:d3:b7:75:07:c1:7f:a8:01:0a:d4:41:
                    5f:2a:d8:b0:14:d5:21:47:0a:73:28:4c:d8:a1:f9:
                    d0:39:92:05:96:52:6b:fc:0e:10:a0:1c:3a:17:fb:
                    7a:4f:51:e4:d1:6c:73:a0:57:ab:19:f1:89:ed:53:
                    40:11:f7:13:eb:94:b9:88:03:87:ce:94:b7:f5:16:
                    09:f4:13:03:ba:d5:f0:05:ac:6a:f5:12:74:4a:07:
                    ff:f3:3d:ed:2b:92:51:f2:fc:1a:7e:f6:f5:80:a4:
                    bf:d9:8f:37:c4:a7:9f:de:92:a2:f4:c1:01:b5:73:
                    ce:46:5f:27:94:ff:5d:3e:25:52:22:86:90:2e:7a:
                    11:a1:6c:6e:59:a3:0b:58:0f:a7:4b:4f:99:ff:ec:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:1A:82:26:9C:80:EA:0B:02:A1:A4:7A:14:98:C0:08:CE:69:A9
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f3:f7:07:10:e0:b6:5e:53:db:0a:fb:c0:3e:47:97:52:b6:
         94:bd:9f:06:d7:0e:76:b7:39:5d:3f:7d:0c:7a:c2:ad:a5:fb:
         2c:ff:9c:c8:b9:9d:d7:03:27:39:c4:c8:b0:23:5f:53:97:7b:
         cf:81:75:86:95:7c:5d:36:b5:01:14:a6:f1:14:37:ca:91:8d:
         43:1f:17:03:0f:94:37:9c:66:0a:ea:4b:fb:48:2d:cd:cb:83:
         82:f9:bf:84:13:be:78:de:89:52:84:6a:63:a6:4d:17:13:3b:
         6a:03:04:10:b6:36:f6:5d:eb:39:e4:20:e7:83:56:2d:31:c6:
         ae:1c:64:2b:5a:13:f7:b4:62:11:ca:aa:d3:8c:e3:be:a8:df:
         68:34:4f:ca:c6:84:b4:58:73:83:67:e4:aa:27:1d:a9:fa:9c:
         10:c1:aa:b1:a8:e3:9a:97:c3:97:99:7c:36:54:4e:e8:23:83:
         d5:b4:ee:17:b3:3a:b1:89:41:d0:fa:73:77:f6:ba:32:3a:a5:
         9a:17:bf:77:87:32:82:ab:14:b3:dd:dd:55:f5:1a:04:13:8a:
         33:e9:eb:95:85:bf:07:92:42:b0:0e:87:1b:a6:4e:85:52:27:
         2e:8e:cf:42:14:f3:45:d9:54:f3:de:e6:3f:58:e0:62:71:56:
         be:c0:c8:fc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbXbt5LacoobbRMtghXx8jo3XKWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3
M0JGNUZCRjAeFw0yNjAzMDIwODEzMTdaFw0yNjAzMDMxMTEzMTdaMDMxMTAvBgNV
BAMTKDU0QkMxQTgyMjY5QzgwRUEwQjAyQTFBNDdBMTQ5OEMwMDhDRTY5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa86JroeL+luWhwOnq1ZUBuFGX
yiJ9SlkGL8IgderDe5dhLdt/cT5Z5VU/MyhoASvLMvcmrngRTDv+u2o94N01IzBD
CF88DqBh08OzuwoecpIRwzFCi9DrSGMboDS5WbLQyc+SEFRv1asiYtzTt3UHwX+o
AQrUQV8q2LAU1SFHCnMoTNih+dA5kgWWUmv8DhCgHDoX+3pPUeTRbHOgV6sZ8Ynt
U0AR9xPrlLmIA4fOlLf1Fgn0EwO61fAFrGr1EnRKB//zPe0rklHy/Bp+9vWApL/Z
jzfEp5/ekqL0wQG1c85GXyeU/10+JVIihpAuehGhbG5ZowtYD6dLT5n/7IlpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVLwagiacgOoLAqGkehSYwAjOaakwHwYDVR0j
BBgwFoAUi3wtHAHuzzOR8Bd3kVxh5HO/X78wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTk4NDAwMy8wLzhCN0MyRDFDMDFFRUNGMzM5MUYwMTc3NzkxNUM2
MUU0NzNCRjVGQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3QzJEMUMwMUVFQ0YzMzkxRjAxNzc3OTE1QzYxRTQ3M0JGNUZCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5ODQwMDMvMC84QjdDMkQxQzAxRUVD
RjMzOTFGMDE3Nzc5MTVDNjFFNDczQkY1RkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfP3BxDgtl5T
2wr7wD5Hl1K2lL2fBtcOdrc5XT99DHrCraX7LP+cyLmd1wMnOcTIsCNfU5d7z4F1
hpV8XTa1ARSm8RQ3ypGNQx8XAw+UN5xmCupL+0gtzcuDgvm/hBO+eN6JUoRqY6ZN
FxM7agMEELY29l3rOeQg54NWLTHGrhxkK1oT97RiEcqq04zjvqjfaDRPysaEtFhz
g2fkqicdqfqcEMGqsajjmpfDl5l8NlRO6COD1bTuF7M6sYlB0Ppzd/a6Mjqlmhe/
d4cygqsUs93dVfUaBBOKM+nrlYW/B5JCsA6HG6ZOhVInLo7PQhTzRdlU897mP1jg
YnFWvsDI/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:39 2026 by rpki-client