Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
File:                     373B103C68D9B84455801815E437C49839794406.mft (raw, json)
Hash identifier:          ZZAx/fMMsVHnGpRei4dz5ykcONJueANLQDskZUTOUaY=
Subject key identifier:   80:EB:18:27:62:53:06:9E:BE:38:FA:BF:66:A9:47:1F:F6:16:B3:62
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       626E68C55FA7B4666DE4D75AA4C02BBBACF7BFEF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
Manifest number:          98
Signing time:             Tue 12 May 2026 18:00:37 +0000
Manifest this update:     Tue 12 May 2026 17:55:37 +0000
Manifest next update:     Wed 13 May 2026 20:40:37 +0000
Files and hashes:         1: 3131332e31382e39362e302f32312d3231203d3e2039383038.roa (hash: iCZ13LdMCPsgPGenpU0yejivjXbu4w697cmHXIMKfvM=)
                          2: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=)
                          3: 3131332e31382e3130302e302f32342d3234203d3e2039383038.roa (hash: 0vZ31zN+cOViGpd7YcM9R6wPzZDDWAwBfSOU88Ao/UU=)
                          4: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=)
                          5: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=)
                          6: 373B103C68D9B84455801815E437C49839794406.crl (hash: DinTM04DAlo6t20/Jx3fLEdX7bbOKCsx+Z0CrlCKm2s=)
                          7: 3131332e31382e3133332e302f32342d3234203d3e2039383038.roa (hash: FtaOncl8hw6IqyiRnTLeAIANe8pxQIcBCMKVNk8hJq4=)
                          8: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=)
                          9: 3131332e31382e3132382e302f32342d3234203d3e2039383038.roa (hash: 9AsiBmigy2vbYDDQyZ6WOWkfNuChEfj5I7lasWP8F84=)
                          10: 3131332e31382e39392e302f32342d3234203d3e2039383038.roa (hash: 9Y/sDtotXoDlI/YObldvB0C9bHYM+ONtY/ovPI1/CXw=)
                          11: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=)
                          12: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=)
                          13: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6e:68:c5:5f:a7:b4:66:6d:e4:d7:5a:a4:c0:2b:bb:ac:f7:bf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: May 12 17:55:37 2026 GMT
            Not After : May 13 20:40:37 2026 GMT
        Subject: CN=80EB18276253069EBE38FABF66A9471FF616B362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:ad:cb:1f:06:eb:f4:61:60:b6:84:6a:09:
                    ab:97:26:83:a9:7c:0d:ef:74:d3:a9:48:26:0c:f5:
                    34:39:d0:0f:21:8d:4f:f4:bf:48:65:34:de:93:c1:
                    f4:93:4f:62:fd:2f:27:2f:37:ef:04:72:2f:83:27:
                    72:f7:64:cb:de:53:70:6c:1f:9d:f3:b4:00:d2:19:
                    09:e8:8c:33:ca:74:0d:91:ca:1f:5c:37:9f:12:00:
                    72:7b:84:31:5e:1d:6b:f8:21:f7:ee:e0:a3:af:b8:
                    fd:37:2f:62:0a:19:a6:cc:63:fb:f7:76:50:db:3a:
                    9e:d6:de:aa:0d:7c:e9:82:6b:83:86:15:fc:09:f1:
                    75:b3:c9:ff:57:ad:ec:31:40:6f:0d:4b:31:d4:02:
                    8a:35:66:7a:6c:59:63:0a:b6:b2:90:3e:80:e7:67:
                    ed:bd:a4:23:12:54:4a:c3:51:95:64:32:2e:18:f2:
                    6f:1a:f8:12:cc:ca:12:ba:d2:d0:26:12:a0:e7:8b:
                    47:9f:0a:b9:ce:25:16:c6:a3:75:66:5f:58:67:39:
                    a6:e4:de:89:d5:c0:c9:ba:6f:78:1a:91:a8:e9:90:
                    30:e2:74:a7:71:43:42:84:2b:98:a2:58:bb:c5:cc:
                    7f:b7:9c:d8:20:83:87:63:4c:85:7c:e3:10:72:b8:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EB:18:27:62:53:06:9E:BE:38:FA:BF:66:A9:47:1F:F6:16:B3:62
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:70:db:c9:a6:a1:76:2a:44:b5:8c:f4:b5:60:75:f0:4b:3e:
         ee:81:d4:2f:a2:27:b1:94:ba:00:08:9d:f8:62:d9:74:ad:12:
         4e:2d:5e:fe:20:1b:24:d3:d7:b3:cb:54:27:05:bc:f1:9c:ff:
         c7:3a:0f:a0:03:92:0e:d9:8e:3e:35:34:9f:00:2e:5e:c2:2b:
         e5:91:2d:a9:69:9b:06:7f:dc:eb:9c:07:1c:4f:6b:b2:8f:53:
         18:a2:a4:98:6e:21:a2:b4:40:bf:a4:23:b4:4b:86:6d:2b:e5:
         dd:4e:b6:30:df:2d:0e:c0:9f:db:db:f0:37:c2:59:c6:41:4d:
         52:92:0a:5a:5a:a1:8b:fc:23:ef:5a:f7:bf:61:6d:26:b8:c5:
         8f:3e:ff:bb:61:51:ab:83:c0:5b:2a:8d:45:bc:ca:0d:eb:da:
         0d:cc:6e:cd:b5:02:68:15:59:b3:a3:21:75:a1:1f:e3:49:0a:
         27:3c:ad:1e:06:7b:e4:74:42:8e:b9:01:70:c5:3a:5e:5a:c6:
         fa:90:0b:c2:27:43:4b:2e:e4:90:86:bb:79:b1:f7:6d:e9:c4:
         94:37:6b:c4:f0:c8:94:68:82:33:8f:ff:8f:06:3f:ea:d6:18:
         54:4e:17:a7:2f:de:04:ed:5e:88:e4:6a:02:50:40:f4:26:4a:
         fe:e1:e8:d9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYm5oxV+ntGZt5NdapMAru6z3v+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz
OTc5NDQwNjAeFw0yNjA1MTIxNzU1MzdaFw0yNjA1MTMyMDQwMzdaMDMxMTAvBgNV
BAMTKDgwRUIxODI3NjI1MzA2OUVCRTM4RkFCRjY2QTk0NzFGRjYxNkIzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67K3LHwbr9GFgtoRqCauXJoOp
fA3vdNOpSCYM9TQ50A8hjU/0v0hlNN6TwfSTT2L9LycvN+8Eci+DJ3L3ZMveU3Bs
H53ztADSGQnojDPKdA2Ryh9cN58SAHJ7hDFeHWv4Iffu4KOvuP03L2IKGabMY/v3
dlDbOp7W3qoNfOmCa4OGFfwJ8XWzyf9XrewxQG8NSzHUAoo1ZnpsWWMKtrKQPoDn
Z+29pCMSVErDUZVkMi4Y8m8a+BLMyhK60tAmEqDni0efCrnOJRbGo3VmX1hnOabk
3onVwMm6b3gakajpkDDidKdxQ0KEK5iiWLvFzH+3nNggg4djTIV84xByuLcNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUgOsYJ2JTBp6+OPq/ZqlHH/YWs2IwHwYDVR0j
BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD
NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC
ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXDbyaahdipE
tYz0tWB18Es+7oHUL6InsZS6AAid+GLZdK0STi1e/iAbJNPXs8tUJwW88Zz/xzoP
oAOSDtmOPjU0nwAuXsIr5ZEtqWmbBn/c65wHHE9rso9TGKKkmG4horRAv6QjtEuG
bSvl3U62MN8tDsCf29vwN8JZxkFNUpIKWlqhi/wj71r3v2FtJrjFjz7/u2FRq4PA
WyqNRbzKDevaDcxuzbUCaBVZs6MhdaEf40kKJzytHgZ75HRCjrkBcMU6XlrG+pAL
widDSy7kkIa7ebH3benElDdrxPDIlGiCM4//jwY/6tYYVE4Xpy/eBO1eiORqAlBA
9CZK/uHo2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 11:19:08 2026 by rpki-client