Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
File:                     CB0214A5C404D6F840433B120CACBB5B8C59E613.mft (raw, json)
Hash identifier:          0teB90mGRfUudB2Xf+/h+R66ijiHaUsyLE5ZViOhIVU=
Subject key identifier:   65:C6:5B:0C:50:DE:17:2F:CE:36:A0:7E:EE:2A:82:8E:12:EB:F1:C9
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       397DCC09D4CC025F96AF0B574911F8BF7130B7B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
Manifest number:          01A7
Signing time:             Wed 25 Mar 2026 05:59:29 +0000
Manifest this update:     Wed 25 Mar 2026 05:54:29 +0000
Manifest next update:     Thu 26 Mar 2026 09:37:29 +0000
Files and hashes:         1: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer (hash: G77qGupkauIQrFBZXdfNdvKoU0Rr9B8gDuOaNv3JueU=)
                          2: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer (hash: wteQerrrch7JWyMq6kXOLw8rQY8O02xVqBD1/zyV69E=)
                          3: AE296545389D949B88D36F0642F93E9C8AD9E79B.cer (hash: +aXRxKT2UQCZk8yDJCfMgAAkz6xGswU98zXh6gGrUKg=)
                          4: C95DC06ABAF176962C0E90D36D939FA729AAC050.cer (hash: WYn/y0DDbn2f1NXzcIOnv3pk0u0BfvdbUL6nm77SR/4=)
                          5: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer (hash: O5Aqpeq/kZcfHJ2H0u+k2L3bZ42gmrdlPUk2s6js8js=)
                          6: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer (hash: OTqmalJYnGJ1DvTbxRIarDwZkd61tTpbUOcIuEaKNCc=)
                          7: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer (hash: l5Fh8JRsthgDgewgC41E75W4ZViwpAqqnNTQLh3BoD8=)
                          8: 12292A8CE4276ED3C82E79BA376F7A0363A06716.cer (hash: Y45dw+Ui4l9/riPoo4kYKLvAXGqwM0C0pdrhrzW25PA=)
                          9: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer (hash: 1AaS6DqbRJFC0vtmE7vWy2PJmLa8/2N7Zg8/TCx/rgc=)
                          10: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer (hash: Lq6C1vmtdv5BgsyhnRa6Bc7nZJu3wqb8EfsqK8DPUn8=)
                          11: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer (hash: FhQekzTy7C6OxtpsQvxtzjCO7KZ8y0mP+yndGsKEkcI=)
                          12: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer (hash: MAtb9XjPHB5wojgWV3idOD+myk7+izc1kGjzNkP1wRM=)
                          13: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer (hash: YVREQUBkqSV8hbreZJSrO3JHQvND6MNTUJNavjT7H9I=)
                          14: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer (hash: VGmIVfwd1QqlPSzVPZYBBaVwijXnoGY70v4WB9xMBVI=)
                          15: A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer (hash: 0vGkmaTdF/cPG2QQ5aviW+cPg3IqrCLaFoM15NkMuJA=)
                          16: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer (hash: XNdbMO/qJ0ItrhogJqEeaWhMfM45eo5FJcgzxhcLcN4=)
                          17: AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer (hash: UQrVv+Fmb4MMvVnnHfddObJ+G/bIhYUpeR0dC8oRPWA=)
                          18: 97B5B7009501E4718F06B9B36D215369C958203F.cer (hash: oI1LEFu91SulHVjvAecB0WG+VtEvHu9KeaCtgF6QgGA=)
                          19: CB0214A5C404D6F840433B120CACBB5B8C59E613.crl (hash: +3BJh2TgJiGMoaB85qXoGXbDL7LtM10reQL5X+jUHhw=)
                          20: C47353D21D668838E2523770D8C0FD078215052D.cer (hash: oCx9k04rIQgohGIWZtJ6Rrco/ozT/+Os4ERvm23+OJc=)
                          21: BE564B2EFF08B30078A1960732464840B104EF35.cer (hash: QclbJTAbTChtpBmRHTORftsiuk21QB22Cp4nZcltPgg=)
                          22: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer (hash: PItaArSVk6NQh/k+8ZfYk4laxh0ev3jf4U9M4r425Yg=)
                          23: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer (hash: tMDDxvN5y/rRtdbqBnWdBeOYsc0y7N+j0k/Rz89Qv/4=)
                          24: D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer (hash: yaLbEp/Ox4j4gvJPdR9xu/NP9n1/yj4LD0OxDLQd6M8=)
                          25: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer (hash: NrpIcF6toAp1eMOj5hKOZthRQlcBgcBtKoUAveRUJ7w=)
                          26: 855381EC93CF009732540F616E4905D544D838C8.cer (hash: 9ZqWFHNj5yESQReKNEa/c29xnt6bqF7yJ+Gd9oV4dqU=)
                          27: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer (hash: MrCLG/KLDuK7N7aUbP0PVGdbBlDzseLqha7MU7CIhjw=)
                          28: F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer (hash: 1qt+cCCuDTlBXzYb1bgFUCarAsIMkBcy8I1HtsFXcZk=)
                          29: E9EED0187DAE9147812C7B516912D58FD976B964.cer (hash: KUS9LtzDrMOcNhZRLX4DYOLpBzaXv5N5PsPJyxrK1I4=)
                          30: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer (hash: ckmpKPzXuGym5mAuNNOL4egrUQ55CxGBmnQxt9ryPFs=)
                          31: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer (hash: gkIeOTGII3QU07zy2ZHE3HpgnQ0q+Dbn4e1HAV9b2k8=)
                          32: D850080623F8BDB006D1C2A5705B45346A8CA661.cer (hash: 1hqS2reNU6w6jabkJ89V24C370HZiqo537RLLWU8IjY=)
                          33: 1E52A9C4B7583314611765C8F6A599F283954B3C.cer (hash: WydUxs3SJNtQaRqZf83ZZ1wTRh68zDdJw6QGcpZFj4g=)
                          34: E3993DB092F827CDCF711046B493411A00A72701.cer (hash: 2qPLi1U2TT62RF34MIsQW/GPEV2zuHtJkZFaaQ4Bvbs=)
                          35: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer (hash: vczGN+X9UC4AtAh2Y2kCLy66ylIZtx3/NUmC2qe0cXs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 09:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:cc:09:d4:cc:02:5f:96:af:0b:57:49:11:f8:bf:71:30:b7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Mar 25 05:54:29 2026 GMT
            Not After : Mar 26 09:37:29 2026 GMT
        Subject: CN=65C65B0C50DE172FCE36A07EEE2A828E12EBF1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:ff:13:6a:7b:47:55:37:8d:8a:7f:df:3b:
                    ee:ec:50:0f:7a:12:68:e9:6c:8f:94:b6:44:f4:7d:
                    2a:1e:b0:80:07:57:f0:38:61:bc:fe:f5:8f:07:77:
                    92:ed:7e:e3:2f:3d:09:b6:39:57:90:68:07:54:36:
                    10:27:c1:b7:78:cf:49:63:0c:c4:fd:1a:e8:23:c8:
                    dd:36:ae:04:dd:1f:e7:4a:70:6d:b5:2f:04:4a:6e:
                    a6:ac:af:4f:37:28:c1:63:ac:35:fe:47:f6:69:2e:
                    4a:37:32:ff:4d:13:c3:db:82:ab:19:84:f7:f8:a5:
                    f8:54:24:00:de:f8:04:3d:5f:95:23:13:22:04:1e:
                    71:f8:a7:59:88:b2:db:e1:92:09:20:14:57:20:62:
                    80:ac:4d:25:8d:09:56:6d:14:54:9f:a1:e8:8e:5a:
                    6f:76:c7:c4:19:f0:0f:77:37:62:6e:52:46:b9:e5:
                    5b:8c:b9:34:d9:05:77:1d:74:98:f1:99:bb:50:05:
                    d2:99:2e:dd:0f:4b:42:78:06:8f:04:66:49:7b:a3:
                    22:f7:08:28:b6:06:92:56:db:49:07:2a:ba:65:d0:
                    ed:b7:65:13:4b:b8:6b:06:48:f3:b8:f7:07:52:1a:
                    c8:4b:d7:81:74:a6:3c:60:c3:93:25:94:ba:0d:1b:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C6:5B:0C:50:DE:17:2F:CE:36:A0:7E:EE:2A:82:8E:12:EB:F1:C9
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:89:f3:86:26:a3:a1:d6:3c:43:c0:cb:86:20:69:cf:1d:
         46:95:b5:f1:aa:d3:46:90:35:35:26:96:45:75:2a:98:85:91:
         c8:0c:0e:8f:55:be:8a:9b:a9:d0:10:84:f4:88:68:31:37:3d:
         98:f9:d3:10:f8:48:50:ce:71:45:0b:c5:3a:23:2e:4f:70:8e:
         1e:37:73:78:8e:f4:4c:05:74:5a:cd:6c:64:c6:48:10:29:0f:
         bc:34:e0:51:74:b7:ab:39:35:5a:65:a4:82:96:c6:b6:b2:04:
         ae:3f:d1:3a:d2:1d:26:c5:72:cc:10:47:a9:2a:fa:fa:ef:14:
         ff:fb:4f:5d:36:e0:a2:2f:e9:2a:f5:0b:01:ae:22:71:72:b0:
         b6:8a:d5:aa:96:e0:0e:b9:74:ac:1e:64:83:16:86:e9:3d:08:
         30:42:cb:4c:41:e9:fe:c7:e4:a1:15:b8:3c:ea:35:84:e3:b6:
         c3:f2:14:97:0b:43:e6:8c:1a:e1:f1:de:39:40:06:72:9a:1f:
         aa:55:7b:98:79:a6:43:25:af:d0:5e:0c:78:09:c4:3f:57:08:
         e0:cd:b2:11:ab:69:13:b2:43:3e:08:ea:67:f8:c5:44:ce:ee:
         fc:3a:c5:cc:30:54:33:55:a0:9e:f8:aa:d1:35:c9:5b:f6:c0:
         23:a6:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----