Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File:                     4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier:          /vazlgevFrJJH3lXPEy3PFuJb8WaeI8MxCVF2QlUX14=
Subject key identifier:   BE:DE:AB:27:9E:0D:20:77:64:7C:D1:4E:E8:05:B8:84:62:9B:25:1B
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       24527F9CEE5700F0272602546338E81DE6D601DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number:          5B
Signing time:             Thu 26 Mar 2026 23:43:28 +0000
Manifest this update:     Thu 26 Mar 2026 23:38:28 +0000
Manifest next update:     Sat 28 Mar 2026 02:27:28 +0000
Files and hashes:         1: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
                          2: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
                          3: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: rgiYGQyau4YcfCRb5E6x5WYPh2rksUgxyRl3r9B4XyQ=)
                          4: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
                          5: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
                          6: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
                          7: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
                          8: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 02:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:52:7f:9c:ee:57:00:f0:27:26:02:54:63:38:e8:1d:e6:d6:01:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Mar 26 23:38:28 2026 GMT
            Not After : Mar 28 02:27:28 2026 GMT
        Subject: CN=BEDEAB279E0D2077647CD14EE805B884629B251B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:c2:cd:13:3d:38:2e:27:37:0c:ae:bd:23:
                    c9:fb:ca:ef:f5:95:12:96:05:0c:24:64:d1:25:2a:
                    2f:d6:48:6a:0e:fc:c3:6b:51:f7:fd:bb:91:84:f6:
                    07:6a:d8:7d:1d:da:eb:cd:72:63:64:df:e5:83:c0:
                    0b:f0:6d:b7:2e:5e:2e:a8:c5:5b:7a:d0:d9:cf:d6:
                    b2:b1:e9:e6:4a:5c:34:b3:8f:48:4b:7b:bd:50:5f:
                    84:ae:7c:27:84:78:f6:9a:b1:52:2b:d0:31:ef:2f:
                    95:43:53:b0:cb:8c:30:54:67:0a:83:5d:d3:f9:47:
                    b9:47:95:2b:5e:f6:1d:ec:57:5d:63:08:97:7e:a4:
                    c7:0b:6e:11:ad:2c:e1:84:d3:83:83:a1:c4:2e:ab:
                    75:ad:99:22:b8:8d:8a:9f:5e:0d:89:2e:7b:5d:ba:
                    fc:c1:9c:ff:01:87:a2:a3:9d:0c:92:a1:9d:9c:df:
                    47:f2:a4:4b:40:29:f6:13:7a:37:09:b4:95:39:7c:
                    00:a5:fc:ed:95:c6:1e:f4:63:8e:35:d5:3f:68:df:
                    0c:a6:52:af:9f:a0:2c:aa:de:bc:47:75:82:b8:7e:
                    26:23:ca:52:8d:05:6e:df:64:bb:b9:92:e9:0c:02:
                    57:e3:cd:0b:1b:82:70:e9:ce:cf:32:cb:f8:75:b0:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:AB:27:9E:0D:20:77:64:7C:D1:4E:E8:05:B8:84:62:9B:25:1B
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:20:cd:b5:e2:bc:93:64:f3:55:57:24:91:e4:cf:4e:a3:
         36:ee:56:62:37:43:3e:21:6c:8d:8d:d4:b9:69:7c:56:cf:5d:
         5e:0d:16:51:5c:ec:e9:51:18:df:22:bf:66:4a:48:43:cd:f2:
         b5:04:e2:9d:53:ff:26:04:17:d1:97:c1:97:43:85:2d:9b:95:
         2b:94:2a:eb:3b:39:5a:df:02:5f:af:92:70:e3:e1:83:50:23:
         53:87:a4:b2:1d:c3:41:b5:6d:b6:45:5a:4c:e4:6d:45:44:56:
         fb:1e:a5:08:61:e9:f5:3d:a2:3f:e8:53:9b:44:68:30:35:ec:
         27:5f:30:df:b6:df:bf:05:67:8e:e4:fb:62:77:13:c4:a5:cf:
         24:86:d8:5f:41:be:69:1c:9d:0a:8f:bf:b3:a9:cc:00:a3:67:
         10:46:9f:fa:01:2b:7e:31:0a:ef:04:ae:c8:38:b9:b9:95:37:
         5f:ee:55:26:56:76:21:bf:af:5f:c0:2d:2c:f4:80:e7:0a:da:
         08:99:38:9a:84:f7:1f:fe:6e:a2:ec:52:02:8f:91:f5:84:fc:
         78:3a:1d:b5:e2:a2:ed:7c:b6:8c:be:ca:e8:ee:da:8f:6a:e5:
         0a:9f:49:4c:5c:89:4e:c1:fd:c0:59:9f:77:f0:b6:97:29:18:
         e8:b7:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:23 2026 by rpki-client