Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          14funIoIDpuFP7SJfrav5oOOlRuiK9rp4+zdnO2cqQU=
Subject key identifier:   8C:2C:B4:AD:6F:60:B4:4A:7A:8D:D8:B9:E2:34:99:DA:36:8D:CD:58
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       27A0F9682DB8E05C0977EBB4080175B6597CCBAD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          5A
Signing time:             Thu 26 Mar 2026 11:13:28 +0000
Manifest this update:     Thu 26 Mar 2026 11:08:28 +0000
Manifest next update:     Fri 27 Mar 2026 14:27:28 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          2: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: I8MpEfqP3Q3yYFzfJ3Hnbeo6jODQpPHEmmm3EU6mA6A=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          4: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          6: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          7: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          8: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          9: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          10: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:f9:68:2d:b8:e0:5c:09:77:eb:b4:08:01:75:b6:59:7c:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Mar 26 11:08:28 2026 GMT
            Not After : Mar 27 14:27:28 2026 GMT
        Subject: CN=8C2CB4AD6F60B44A7A8DD8B9E23499DA368DCD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:1c:50:2a:34:62:d4:0d:82:7b:ed:9b:b2:
                    a8:87:e0:16:4d:ca:74:d0:27:90:3f:d3:45:4d:11:
                    a9:96:da:d9:d8:b8:53:0e:32:40:45:14:32:77:72:
                    e0:14:3f:9b:e8:84:b4:71:2b:9c:39:cc:6f:03:c8:
                    b3:9e:5f:dc:d2:b6:0a:ce:81:4d:d6:b6:b6:1c:7c:
                    92:c0:1c:d2:3f:7b:59:8e:35:0f:99:22:fa:d3:04:
                    46:66:93:80:dd:27:67:e6:55:e7:04:4c:c1:9d:7f:
                    eb:be:bf:f2:30:95:20:52:ed:34:44:38:e7:4e:3f:
                    ba:fe:fb:74:a1:22:c9:80:0f:6e:ae:6b:7b:ce:48:
                    61:bf:37:a6:7b:c5:9c:a4:9f:0e:6c:fb:00:41:28:
                    fc:ff:29:e6:15:f1:ec:78:83:84:39:15:ec:88:f7:
                    de:24:52:ae:3a:95:16:91:26:82:43:71:72:5a:f4:
                    04:af:c3:d6:60:6b:7d:cd:af:cc:99:b2:ad:e1:5d:
                    c6:26:a1:67:54:c3:52:bc:42:8c:e4:e0:6e:8e:2d:
                    20:93:2d:62:88:80:f2:a6:46:ea:b1:5e:4c:4b:aa:
                    c2:6e:63:5e:be:d1:38:99:32:45:0e:48:12:e2:5c:
                    f8:f8:53:f5:2a:34:5f:08:92:fc:ec:25:9a:69:74:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:B4:AD:6F:60:B4:4A:7A:8D:D8:B9:E2:34:99:DA:36:8D:CD:58
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:18:af:29:38:0a:ba:72:2e:0a:75:82:4e:16:b4:a7:0c:4c:
         29:cd:d8:01:69:16:c4:e0:a3:4d:a7:bf:04:73:b3:97:85:ea:
         62:d0:30:ef:09:e6:b0:32:80:91:93:cc:64:38:fe:03:30:2f:
         86:b2:3f:13:1d:81:e0:7f:47:f5:88:f5:79:d9:65:36:e6:a8:
         3c:e7:4c:d1:81:42:39:71:f4:c1:8f:96:be:e0:b1:cf:b2:21:
         25:8b:83:fc:f9:f1:6f:25:84:37:80:c4:0e:64:2a:6d:45:f5:
         8d:24:45:0d:75:18:de:78:9e:a7:4b:27:b0:5c:ce:26:06:16:
         e7:24:29:86:d2:54:29:5d:e3:5f:cf:d9:ba:95:5c:a7:75:dc:
         5f:a8:5e:0d:61:c6:43:ee:ba:bb:51:f0:96:a4:14:8f:2b:46:
         c4:db:a3:ae:90:89:77:d9:87:29:c2:cb:9e:31:d1:d8:32:0a:
         b2:e3:5d:7d:fd:b1:88:cd:8d:bf:f0:1d:62:8a:e6:51:c5:07:
         37:9a:2e:fa:96:74:65:01:66:11:76:df:e7:33:40:d3:7a:d8:
         cf:d3:91:44:e9:03:66:d9:28:12:1c:95:03:19:2d:7b:f1:67:
         1e:1e:10:ee:9a:94:5f:53:1b:78:4b:68:2f:3f:6b:21:73:b1:
         2e:d6:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:31 2026 by rpki-client