Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
File:                     8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json)
Hash identifier:          aPo3UFTWyOa8URBAIyYMcVZsYjCyo2C435uRkGZ/BQ0=
Subject key identifier:   50:BE:B8:51:75:6A:13:5D:DF:6F:66:A6:9B:0F:38:A3:DD:9C:C1:25
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       4FADF379C925FEDB848414DFC07BC15006D8C6F1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
Manifest number:          5A
Signing time:             Thu 26 Mar 2026 18:18:28 +0000
Manifest this update:     Thu 26 Mar 2026 18:13:28 +0000
Manifest next update:     Fri 27 Mar 2026 19:56:28 +0000
Files and hashes:         1: 3230322e34372e3131302e302f32342d3234203d3e2034383132.roa (hash: 9s3ic0lfpCLrK4v9PnYYThNn4W+qc6cqILtlqEH+bh8=)
                          2: 3230322e34372e3131302e302f32342d3234203d3e20313331333134.roa (hash: 7adlvrP3uQseRyYtxDXWA+mafTgc5oe8hKf0jnYmZ+k=)
                          3: 34332e3235342e3232392e302f32342d3234203d3e203435313130.roa (hash: hps40GthnEO7UU1qgDGV3g2kd4ewHW9K6snMzsnXMUw=)
                          4: 3130332e3230302e3232302e302f32322d3234203d3e203435313130.roa (hash: kzUThDj46vrC1FApvE33ujC68KuJ6SB7L3Mj3caB4S4=)
                          5: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: O/eMvederMgEQ+9FeP3eTjVBEfuUl3cv/aplRX7631c=)
                          6: 3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa (hash: hGhV4E3aYHsMwtwfUvLKZMNlkn0O1oh3hS56LmlwRss=)
                          7: 3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa (hash: z8k2fN2Pdv0kR4aQFAD9lFiI0sJXlm/SuhSkv2n308w=)
                          8: 3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa (hash: 1C/L6TcWpvNm22ZzgpqJuGe58/EqXsxE5aPKEEX53xA=)
                          9: 3131312e3131382e3230302e302f32342d3234203d3e203435313130.roa (hash: 7UiV6DH4n2sZpsx+39CMi75Cc+wLwjEg9xmZoNvX3OQ=)
                          10: 3130332e3230312e3139332e302f32342d3234203d3e20313331333134.roa (hash: NTqsPXAjXp48oI3AI/C13TIn2Piu3xDHuu7t6RAetGc=)
                          11: 3131312e3131382e3230302e302f32342d3234203d3e20313331333134.roa (hash: 7LSlu5OKw1qOtgyRN/pPG+VNMM4PDl4woSy90UEe4P8=)
                          12: 3131392e3136312e3132342e302f32342d3234203d3e2034383038.roa (hash: oJPzEgWiYmZnQp7PG/QBqGrmp02PI4wAhkJPWKQQ8CU=)
                          13: 34332e3235342e3233302e302f32342d3234203d3e203435313130.roa (hash: NorobvWdGqodbBj8OyFKQCHfzKeN5Tjtw/VqDHOHG70=)
                          14: 3130332e3230312e3139322e302f32342d3234203d3e203137363232.roa (hash: lUVldvkW7zrCmTl2I/FkaVLNraKUrCWh1zaOfF1v1bE=)
                          15: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383038.roa (hash: k4vFlUdiMCS0bd4s8LdyWoletvKxAr290jb6WY/LSgs=)
                          16: 323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa (hash: QaWug+cNDDzS9dvHPNuT1ZuZWisdg7F8igJGbDTVhns=)
                          17: 3230322e36352e39362e302f32342d3234203d3e20313331333134.roa (hash: cb/Gqb6qtrEFBWMmIIpCS2l1uWPq+vkVShzM0pl28qY=)
                          18: 3130332e3230312e3139332e302f32342d3234203d3e203137363232.roa (hash: 7ijKsPmNlgXx+WTxf4W4VN3Nq7WHyK2KRy4WnwP8l7o=)
                          19: 3230322e36352e39362e302f32342d3234203d3e2034383437.roa (hash: r6hYqYkKaLY2KUvN1UAoHdA/G53GRFVL962VLu1kVXw=)
                          20: 3130332e3230302e3232342e302f32342d3234203d3e2034383132.roa (hash: LIiH4yO0XiF6bKA9C6MKJWqsh+V2gF8apiHbu3m7f5Q=)
                          21: 3230322e36352e39362e302f32342d3234203d3e2034383038.roa (hash: XInuRiVmp2gchaX1GICHppoHhbgEn885ELkzy+trvsU=)
                          22: 323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa (hash: Jp2XGNH52ssQ0bdikTWGuqpgPCbzux6iZDhsBMPzYMw=)
                          23: 3131392e3136312e3132342e302f32342d3234203d3e20313331333134.roa (hash: trDdHL32FPMMe1Pupksons//b+AQDqoBfLL/Onzj3Lc=)
                          24: 323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa (hash: h8Dsp5I71swsmHii1MzitIcYsL+pqCT7SgdRcyTJX7I=)
                          25: 3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa (hash: 8eLHNRuQPDos/VQVqtrUan8VhqrgRT0eANeLwIl9R5A=)
                          26: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383437.roa (hash: +SRL20ezVJ4xXC1XC6q4wh6WnZa2oCvwcc4Zp3ATaL0=)
                          27: 34332e3235342e3232382e302f32342d3234203d3e203435313130.roa (hash: FXoD21RBqOqwuywgeejLde35DBrBDAnRi0f85zG0xj0=)
                          28: 3130332e3230302e3232302e302f32322d3234203d3e2034383132.roa (hash: siVNgfCDj6bvBI1m5sUrrPq9lO+mtUIABZ24C9DCFF0=)
                          29: 3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa (hash: OM/Zbo4+rhmJKkNEv9SMrBBMuzephsrrlzSkkgmexNE=)
                          30: 323430333a396230303a363030303a3a2f34382d3438203d3e203435313130.roa (hash: ofTONHQ16mGQgbJs1sloxLXx4/7TSorjhpO9rnIwkh8=)
                          31: 3130332e3230302e3232342e302f32342d3234203d3e203137363231.roa (hash: Be3hReiEFACxV6iYJQwfzk9wHKiJznC6Do1PJiOGduM=)
                          32: 323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa (hash: P2kJYoqRoYD0SqfvYjbkoouF8EZfEcslMZdxFkbZVa0=)
                          33: 3230322e35372e3230312e302f32342d3234203d3e2034383132.roa (hash: utdVCY4l0dcFIG/TVJVwiWA21IYNF1kd1eD/Vknn8vs=)
                          34: 34332e3235342e3232382e302f32322d3234203d3e203435313130.roa (hash: xkTXCqdqeVI+Xrgo9PUO1HTTi3bx7XtcQJ8tsJy96KQ=)
                          35: 3130332e3230312e3139322e302f32342d3234203d3e20313334373733.roa (hash: 6BLYddYeEeDqDU8fdzI0rnVzDC05vTqwdK+2yfGMwzA=)
                          36: 3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa (hash: EMW00fnBuKVnoiTvKKxsVDW2WHDg0xhGk6Oa1ZO6SRw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:f3:79:c9:25:fe:db:84:84:14:df:c0:7b:c1:50:06:d8:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Mar 26 18:13:28 2026 GMT
            Not After : Mar 27 19:56:28 2026 GMT
        Subject: CN=50BEB851756A135DDF6F66A69B0F38A3DD9CC125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:dc:cc:55:42:ba:55:1b:0d:5c:6f:f9:6a:
                    a2:03:d3:f1:b0:ff:f5:1b:12:03:aa:8c:39:d3:b2:
                    b1:d1:ae:f2:cf:67:26:2e:fc:86:14:bc:81:2f:6c:
                    bd:00:d4:17:92:67:92:d5:9d:9c:54:a1:64:1a:57:
                    e3:3d:75:cd:e0:25:66:97:03:8b:af:2e:2d:92:74:
                    f7:19:25:06:01:9a:1f:ac:d7:6e:80:7e:da:a9:fb:
                    e6:1c:c0:34:7c:e6:29:2b:44:4b:07:37:b9:23:0f:
                    25:56:4a:49:70:da:c0:29:2a:cd:e2:45:f2:5a:0f:
                    81:5e:10:62:d1:67:57:b9:42:c1:90:29:9c:2e:9b:
                    b4:de:d4:63:bd:52:1d:21:d2:4a:42:51:e7:5f:70:
                    36:2a:5c:33:60:44:dc:fe:62:a5:56:82:5d:02:6c:
                    f0:7f:ba:b8:64:42:77:3b:40:69:b0:fc:c8:41:c3:
                    fe:2c:90:90:6a:46:17:01:58:55:8d:77:51:71:f8:
                    ea:8e:80:37:22:7f:21:87:ef:8a:1d:cb:71:4b:fb:
                    7e:49:ae:86:aa:13:1b:de:0b:c3:02:1f:57:37:eb:
                    b8:5b:2f:66:59:d2:5d:4b:38:dd:0d:5a:28:36:87:
                    60:77:6b:6e:d5:ec:02:15:91:05:24:d1:49:be:c8:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:B8:51:75:6A:13:5D:DF:6F:66:A6:9B:0F:38:A3:DD:9C:C1:25
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:83:8a:a3:cc:42:8e:fc:e9:41:b3:74:8e:02:53:ba:b7:
         bc:2d:36:db:47:f6:38:db:52:a8:fc:b2:8a:8b:bc:e5:6e:08:
         82:38:9d:66:5f:42:fe:aa:ef:70:cd:de:db:f5:cd:d3:9f:6f:
         c0:04:71:4b:23:e6:48:68:da:35:65:90:d5:e2:9f:14:2a:64:
         28:48:ac:85:e8:1a:2e:29:c6:62:09:f8:ea:7a:18:cc:da:b0:
         a6:61:f6:72:ee:cc:9f:dc:2d:a7:fb:d1:01:7d:4d:07:9a:8e:
         83:99:3b:fd:d2:11:df:34:f2:7d:82:9c:4d:33:fa:95:43:19:
         64:94:a3:14:38:86:07:af:45:9d:02:1b:02:27:82:ef:42:3d:
         1c:d0:b7:80:91:93:f0:c2:dc:f9:af:77:35:98:fd:c5:63:24:
         33:06:86:55:41:a8:dc:f5:9a:e9:a1:4c:2b:ce:c1:5d:56:f6:
         43:62:af:d9:e7:e1:0e:15:66:df:9e:4b:71:f0:b4:ca:62:fc:
         40:cf:8e:64:47:17:d4:65:06:cb:65:a3:56:1f:43:4b:3a:41:
         93:ee:e8:5c:aa:cf:68:1d:41:25:5c:0a:9c:20:e2:22:dd:7b:
         aa:18:21:a6:84:2c:c9:e2:8a:d8:28:e4:0a:63:2d:60:7d:94:
         1e:ef:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:11 2026 by rpki-client