Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File:                     4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier:          D7uKcaK1xvVYoPZX7tRGYGbpQBnoruDhHmLpZyhC55k=
Subject key identifier:   ED:0E:8A:36:88:21:AC:E2:D7:77:D0:5F:4F:C0:4A:8D:EA:11:E7:AD
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       3382653D448C6FD70AEEE0B6B3436CA4EE45FE12
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number:          5A
Signing time:             Thu 26 Mar 2026 03:58:28 +0000
Manifest this update:     Thu 26 Mar 2026 03:53:28 +0000
Manifest next update:     Fri 27 Mar 2026 07:39:28 +0000
Files and hashes:         1: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
                          2: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
                          3: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
                          4: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
                          5: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
                          6: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
                          7: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
                          8: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: 1sL7Xprx0ctNZLPpceaGQMmRn1yb9TeObrKWPsnZpG4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 07:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:82:65:3d:44:8c:6f:d7:0a:ee:e0:b6:b3:43:6c:a4:ee:45:fe:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Mar 26 03:53:28 2026 GMT
            Not After : Mar 27 07:39:28 2026 GMT
        Subject: CN=ED0E8A368821ACE2D777D05F4FC04A8DEA11E7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:52:56:a8:59:e1:5a:0b:1d:87:7e:bf:12:
                    e1:fd:99:fd:43:c3:98:bd:9f:df:7e:a0:be:97:eb:
                    d3:b3:01:d7:3d:9a:53:13:76:dd:0d:b5:ac:57:4b:
                    d1:b3:54:80:7c:82:29:39:2a:22:df:f7:e3:7e:bb:
                    1d:06:a4:82:07:33:ac:ab:6d:ab:5c:9d:59:3c:33:
                    51:8e:b9:43:4e:ba:2e:c6:31:1d:63:2e:81:3e:f2:
                    d6:42:14:2c:26:f9:e1:32:8a:e7:b5:4c:88:24:6e:
                    c0:72:55:87:cd:eb:a0:5f:8d:e8:0f:4e:ce:a5:b3:
                    9b:5e:a4:0f:df:4e:61:d6:ce:a6:9b:de:7f:5d:9b:
                    a8:ea:cc:11:3d:a7:11:40:14:90:38:c3:0e:ee:e0:
                    41:20:1a:76:7b:aa:08:8b:5e:8f:6a:00:26:f0:b1:
                    e1:95:45:19:c7:36:bc:9a:c5:3b:0f:e3:6d:75:da:
                    6f:5e:02:6f:53:37:c6:0f:90:cb:9d:a0:9e:9b:3c:
                    06:cb:33:04:cb:45:36:93:40:5a:85:e2:7a:f2:09:
                    ff:9d:95:f7:9a:0d:e1:7b:a3:b1:96:82:a4:18:8a:
                    98:40:80:9e:a2:8f:8a:4a:7b:40:61:aa:13:3e:9a:
                    aa:b2:a4:70:ac:5c:7d:a6:bf:1f:07:11:5c:63:96:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0E:8A:36:88:21:AC:E2:D7:77:D0:5F:4F:C0:4A:8D:EA:11:E7:AD
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:07:01:bc:36:e2:bf:ef:45:fa:50:97:d3:54:de:9f:a2:
         89:5c:d8:02:c9:cd:c7:9b:f8:4a:77:4d:0d:37:fc:88:47:80:
         c1:b2:cc:70:0f:4d:c9:a5:a8:2b:a5:56:86:c8:5a:7a:45:25:
         de:72:f4:5c:00:e2:76:99:ac:4d:b7:9b:22:87:64:e1:c1:dd:
         4a:2b:a4:6a:55:aa:85:a8:7e:28:47:09:85:08:a5:47:58:6e:
         d7:90:a6:3c:ed:28:ba:71:0f:68:65:a7:2d:1b:85:66:1e:0a:
         18:38:da:db:a1:1b:be:1b:9a:91:92:c3:2f:4e:97:07:a8:2e:
         b4:74:2c:f8:f3:d2:ea:25:0f:17:27:d2:76:ec:0d:a4:2b:21:
         86:4a:a9:ea:a0:4d:c9:28:bc:c5:2e:be:fc:ac:62:62:8f:14:
         67:98:c8:2c:d1:d9:22:c4:22:6b:0c:8e:e7:4c:32:cd:76:c5:
         74:2f:aa:43:dd:68:49:5d:ec:bf:ee:2b:21:bb:38:f2:6f:e3:
         f9:95:fc:a5:73:f3:0c:df:bf:3d:39:5a:9c:ca:ae:a1:d9:4a:
         2e:b0:55:2c:a1:05:dd:2c:b5:59:65:33:98:0c:93:32:63:d1:
         e7:42:77:a4:73:d4:c0:be:01:ca:aa:11:12:83:1f:11:72:1d:
         10:e6:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:36 2026 by rpki-client