Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          hWNC4ReLanEpRkLSiQoT1ZzBCRxqd2x/oIe+3DKp7MA=
Subject key identifier:   00:C8:AC:D8:1C:BB:68:1A:1E:3D:4F:D2:2E:51:2F:7B:A6:8E:08:43
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       6B886A5564CADA38459322710112291CDBCBF6FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          5A
Signing time:             Fri 27 Mar 2026 04:03:28 +0000
Manifest this update:     Fri 27 Mar 2026 03:58:28 +0000
Manifest next update:     Sat 28 Mar 2026 05:59:28 +0000
Files and hashes:         1: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          2: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          3: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: 4Gd/VrbfCyxTSZ5B7pLTrwhODheZtt3sIihFjI+oGV8=)
                          4: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          5: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          6: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
                          7: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          8: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          9: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 05:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:88:6a:55:64:ca:da:38:45:93:22:71:01:12:29:1c:db:cb:f6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Mar 27 03:58:28 2026 GMT
            Not After : Mar 28 05:59:28 2026 GMT
        Subject: CN=00C8ACD81CBB681A1E3D4FD22E512F7BA68E0843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:49:75:a9:c0:ef:54:2d:1e:61:35:f4:28:
                    7e:34:f4:82:0b:80:ed:4d:f7:e6:6e:63:1e:02:66:
                    e8:dc:1f:32:1f:45:67:23:26:db:c9:b5:fa:fa:c3:
                    4a:ef:a7:0e:9a:cc:3e:be:2f:f1:fe:35:f9:81:ae:
                    a8:00:b1:d6:2f:3a:b9:7d:27:2d:ae:7c:39:7f:fe:
                    52:a0:40:26:d5:98:24:3e:86:5b:50:d0:ff:21:81:
                    a4:47:ee:38:c4:70:24:63:19:03:d0:77:04:f8:79:
                    38:82:86:3d:37:2a:af:2f:fe:b9:b1:3f:3c:36:f4:
                    d2:63:89:8d:28:61:55:46:29:db:69:5a:c6:af:ca:
                    a4:2c:5d:58:8b:93:94:5c:42:90:27:64:d7:5b:7e:
                    73:41:60:8f:69:81:5b:91:09:e0:90:47:65:0c:e9:
                    46:71:81:ab:82:1e:21:6c:19:74:31:48:e7:47:a7:
                    af:17:3b:b6:6a:0e:b1:9a:03:cc:e7:3e:8b:24:35:
                    76:91:aa:ad:d0:bb:74:84:6b:9a:8b:80:10:3f:4f:
                    4b:99:67:cc:2a:c6:b4:02:e8:e7:38:b0:2c:f9:9b:
                    41:af:c9:b7:cd:59:73:4c:7a:19:5b:aa:e9:b7:d1:
                    37:ec:9d:2a:51:e2:2c:98:e9:08:e7:f8:1e:5a:79:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:AC:D8:1C:BB:68:1A:1E:3D:4F:D2:2E:51:2F:7B:A6:8E:08:43
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:13:e8:8b:92:d8:d3:cc:33:cb:38:cf:05:8b:98:56:54:
         39:ef:20:f1:5e:64:83:9c:eb:72:1c:18:5e:ae:1b:d9:05:8d:
         f6:70:12:f2:1b:f4:c4:08:b8:49:23:17:93:be:f3:da:0d:cc:
         05:93:84:d2:17:0c:c3:07:78:b7:73:75:c7:69:42:c2:66:0f:
         d8:58:32:5d:c8:61:76:4e:1b:71:d8:e8:bf:34:22:77:a1:1e:
         85:02:5f:2d:50:30:9b:3a:38:37:8e:98:14:c2:7e:a5:13:a6:
         14:a1:b2:aa:2d:0e:08:71:d6:38:c9:9f:31:71:18:18:a6:67:
         fa:fd:1d:30:c4:0c:9d:45:91:0f:21:c0:58:ca:5b:f5:19:39:
         b7:d1:0b:23:5a:82:b5:fd:36:d8:49:5c:53:86:18:3f:65:3c:
         af:c9:fb:1c:e8:b5:cf:4f:4a:26:d8:a1:78:13:92:ac:8e:81:
         89:6b:a4:2e:72:bb:38:fe:1b:6b:d8:5a:92:8b:c0:50:b0:75:
         3e:95:21:3d:9f:2b:6c:63:27:c2:4b:c4:d6:ba:8c:1e:23:1b:
         0c:c6:01:27:72:d0:ba:e5:d3:9c:38:9d:ad:57:0e:e4:d9:44:
         0e:c7:37:b5:16:00:23:09:60:97:f3:55:48:1a:4f:51:ed:20:
         d2:42:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:10 2026 by rpki-client