Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
File:                     EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json)
Hash identifier:          eYiVfx8xgRntrbDpeC4dBZ7FcKDOY5cUHke3ZpiPo7U=
Subject key identifier:   F2:84:45:26:F5:5C:1A:3A:A0:9A:01:02:74:90:52:9D:E8:86:83:C9
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       6C6988587F696B04B55E6C0CAC4AE5BADACC4E28
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
Manifest number:          65
Signing time:             Tue 28 Jul 2026 14:26:59 +0000
Manifest this update:     Tue 28 Jul 2026 14:21:59 +0000
Manifest next update:     Wed 29 Jul 2026 17:33:59 +0000
Files and hashes:         1: 3130332e38332e34372e302f32342d3234203d3e2034383437.roa (hash: Y10Vqyb0XJ0HNTfHx0Vvch3nLgELGfJsukHkkTDyvyQ=)
                          2: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (hash: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8=)
                          3: 34332e3232392e3138352e302f32342d3234203d3e2034383437.roa (hash: Mk1ZRjdXSKbl1/uFe7FLy9RQ8B0w6L8obQIaBkMJHl8=)
                          4: 34352e3131332e3230372e302f32342d3234203d3e2030.roa (hash: CVagD8Z9yMPAdysjmCoIAoVUBTyn6Sqbck57pfmRU50=)
                          5: 34352e3131332e3230352e302f32342d3234203d3e2030.roa (hash: BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=)
                          6: 34352e3131332e3230342e302f32342d3234203d3e2030.roa (hash: azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=)
                          7: 34332e3232392e3138372e302f32342d3234203d3e2034383038.roa (hash: mQ/yWNZmDUQo9Pngz7MlnXAExe/cEgg0ErqD67vpet0=)
                          8: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (hash: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=)
                          9: 3130332e38332e34362e302f32342d3234203d3e2034383437.roa (hash: mdSscBSM9XKJNkb7F/9rJNPLkHKycB/dFizvvcw5fCs=)
                          10: 34332e3232392e3138362e302f32342d3234203d3e2034383038.roa (hash: OU4d1XrxVWrge7GzfV+WPEL0nCQEursBPS5TeT7CJmI=)
                          11: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: PC2WbFdCRDfPYVh3damS6v8BFYB3JPuZHDpu/Nzwv+U=)
                          12: 34332e3235342e32342e302f32342d3234203d3e2034383038.roa (hash: ZAMX0/tAb+nwZhAw4xAuQz3sFyhvrglPoAtPXFxaiOA=)
                          13: 3130332e38332e34352e302f32342d3234203d3e2034383437.roa (hash: +MbSziKgPrPl1SsyN4rJPpOURE3gwv64hE9pCH5hC7M=)
                          14: 34332e3232392e3138372e302f32342d3234203d3e2034383437.roa (hash: xMI16+K1Gz9Axy9BUqR6H93tK+fzxf3wumq2nZUQslk=)
                          15: 323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa (hash: Qzmbn7+BiqPdX+/uBh1aA5bogjMd1mjMZMN2yWhJeCc=)
                          16: 3130332e38332e34342e302f32342d3234203d3e2034383437.roa (hash: HO5MmtYJt5XtkkC6oFdIZjx3K0y//CdRIISyid2o6JE=)
                          17: 34332e3232392e3138362e302f32342d3234203d3e2034383437.roa (hash: lu4vogcuvhM57mFxv78YqTlqKjpnM4ATCJM3qXrRxuo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:88:58:7f:69:6b:04:b5:5e:6c:0c:ac:4a:e5:ba:da:cc:4e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jul 28 14:21:59 2026 GMT
            Not After : Jul 29 17:33:59 2026 GMT
        Subject: CN=F2844526F55C1A3AA09A01027490529DE88683C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:be:95:a6:b8:80:2d:09:cb:fb:88:7d:04:
                    16:23:10:6b:bf:ce:62:d2:91:89:af:9b:5b:cb:f4:
                    38:0e:d5:28:bc:32:57:77:80:b2:6c:2f:2e:5b:fa:
                    4d:c7:d1:9b:70:f9:e6:47:6d:e3:17:62:8b:39:95:
                    4b:97:ff:be:e5:99:50:47:8b:f9:c8:65:16:b5:b2:
                    15:5c:df:6f:c2:9d:fd:bb:e4:0f:6f:12:c5:a1:7c:
                    b9:ba:f7:32:3a:f8:7a:4a:43:ba:53:3c:00:e5:f2:
                    1c:f9:52:4f:ec:da:ee:53:02:7c:c0:52:72:ff:a2:
                    67:27:d7:09:23:6b:3b:4a:d9:dc:41:d3:e0:b3:1b:
                    b9:63:65:cf:98:5a:49:ad:18:05:d0:c8:a5:00:2d:
                    7e:55:44:cc:6f:cd:69:36:db:25:7f:b2:87:55:77:
                    a6:87:67:b5:10:85:dd:0a:a4:34:c3:fe:a3:ea:2f:
                    97:1b:78:e9:81:2e:b0:88:22:77:2c:c5:61:84:49:
                    90:f3:22:d1:bd:28:cb:e3:f1:10:71:34:72:71:02:
                    53:65:f8:e6:b0:bf:fc:44:8c:8d:ad:d1:cd:2f:4c:
                    0e:6b:38:2c:f4:f9:60:8d:c1:f8:ef:ed:ed:8b:b0:
                    d3:56:5e:35:2f:36:a2:06:87:77:7c:6d:cd:4b:48:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:45:26:F5:5C:1A:3A:A0:9A:01:02:74:90:52:9D:E8:86:83:C9
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:6d:76:d2:5f:bb:6d:e8:1c:6f:c5:05:08:30:99:7f:89:
         7f:8b:2b:76:ad:cf:e1:be:7b:db:17:d9:3f:7e:a5:71:4e:58:
         dc:9f:b2:fc:ed:55:a4:92:a3:e5:5a:7f:85:b1:fe:78:82:d8:
         de:92:2e:e8:4d:ec:d8:7e:40:cf:ff:d0:a5:13:0c:50:b9:26:
         bc:00:3e:c4:9e:b6:55:da:fb:98:24:e1:a8:15:63:aa:09:85:
         a9:19:59:bb:b4:40:2e:b0:0f:c6:c8:fe:7a:4e:c9:42:25:6d:
         b2:0c:7e:81:74:37:ab:73:46:22:84:40:b0:01:83:af:90:3d:
         63:48:47:8d:41:64:2a:80:45:ea:30:f4:f2:07:3d:65:8e:b9:
         6a:c4:ee:f9:4d:b7:0a:e9:f3:e7:16:8c:39:18:bd:4e:09:89:
         e7:d3:4f:aa:2d:d6:2f:b6:16:68:e5:ee:18:98:62:5b:e3:e0:
         38:3e:41:db:9b:94:31:61:74:b9:ba:f0:44:6b:49:0e:a0:b9:
         cf:f7:f9:d0:30:f8:43:22:67:bc:6a:05:8b:74:85:59:0f:a9:
         6a:66:14:fa:96:b4:82:53:22:87:fd:8f:44:43:10:59:91:15:
         3c:c3:b8:a1:a4:d6:33:93:98:66:09:2c:77:a9:58:51:19:fb:
         de:29:1f:0d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbGmIWH9pawS1XmwMrErlutrMTigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2
MjlEMEYzRTAeFw0yNjA3MjgxNDIxNTlaFw0yNjA3MjkxNzMzNTlaMDMxMTAvBgNV
BAMTKEYyODQ0NTI2RjU1QzFBM0FBMDlBMDEwMjc0OTA1MjlERTg4NjgzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQb6VpriALQnL+4h9BBYjEGu/
zmLSkYmvm1vL9DgO1Si8Mld3gLJsLy5b+k3H0Ztw+eZHbeMXYos5lUuX/77lmVBH
i/nIZRa1shVc32/Cnf275A9vEsWhfLm69zI6+HpKQ7pTPADl8hz5Uk/s2u5TAnzA
UnL/omcn1wkjaztK2dxB0+CzG7ljZc+YWkmtGAXQyKUALX5VRMxvzWk22yV/sodV
d6aHZ7UQhd0KpDTD/qPqL5cbeOmBLrCIIncsxWGESZDzItG9KMvj8RBxNHJxAlNl
+Oawv/xEjI2t0c0vTA5rOCz0+WCNwfjv7e2LsNNWXjUvNqIGh3d8bc1LSPdtAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU8oRFJvVcGjqgmgECdJBSneiGg8kwHwYDVR0j
BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB
MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDg2NTYyNzE1NTg0NDMwMjcvMC9FQkU4QjRFNkVBN0M1
OEIyRTU2RTNDNTk5Rjg2QTEzMjYyOUQwRjNFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5ttdtJfu23o
HG/FBQgwmX+Jf4srdq3P4b572xfZP36lcU5Y3J+y/O1VpJKj5Vp/hbH+eILY3pIu
6E3s2H5Az//QpRMMULkmvAA+xJ62Vdr7mCThqBVjqgmFqRlZu7RALrAPxsj+ek7J
QiVtsgx+gXQ3q3NGIoRAsAGDr5A9Y0hHjUFkKoBF6jD08gc9ZY65asTu+U23Cunz
5xaMORi9TgmJ59NPqi3WL7YWaOXuGJhiW+PgOD5B25uUMWF0ubrwRGtJDqC5z/f5
0DD4QyJnvGoFi3SFWQ+pamYU+pa0glMih/2PREMQWZEVPMO4oaTWM5OYZgksd6lY
URn73ikfDQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:38 2026 by rpki-client