Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          ZApdh0P4axGYrxq8K/PNkusBM92b/VtKQ2MfmSht9cM=
Subject key identifier:   AA:ED:30:5B:E8:56:DF:D2:BB:AA:E4:3B:C4:B9:09:02:2B:7B:57:63
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       4D606332C0C6876AFD0654CAB1CF0E7034C6B99C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          59
Signing time:             Thu 26 Mar 2026 10:23:28 +0000
Manifest this update:     Thu 26 Mar 2026 10:18:28 +0000
Manifest next update:     Fri 27 Mar 2026 12:02:28 +0000
Files and hashes:         1: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: zKDzyPbQUeoHAdZBKVyEdr+Tvl0EYufxKAbUeueQ1uM=)
                          2: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          3: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          4: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          5: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          6: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          7: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          8: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          9: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 12:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:60:63:32:c0:c6:87:6a:fd:06:54:ca:b1:cf:0e:70:34:c6:b9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Mar 26 10:18:28 2026 GMT
            Not After : Mar 27 12:02:28 2026 GMT
        Subject: CN=AAED305BE856DFD2BBAAE43BC4B909022B7B5763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:04:71:5f:38:c8:4c:02:cc:af:63:25:10:
                    45:8d:3a:fe:68:14:5e:01:46:61:9a:86:a0:35:7c:
                    5e:ce:05:65:44:e2:cf:9f:1f:15:1f:0a:c6:9d:e2:
                    b8:3d:63:26:3a:f4:44:ed:55:84:48:46:79:22:13:
                    ea:bf:f2:b5:13:1a:40:5f:26:70:c7:30:7e:46:43:
                    a6:ca:53:ae:39:92:2e:a9:2f:d5:34:a8:1f:fc:99:
                    fc:6c:a9:27:f8:dc:30:77:d5:97:9f:05:b2:8b:5f:
                    af:54:ad:45:66:9f:8c:ac:8b:4b:92:8e:a9:fe:85:
                    62:4c:11:70:f9:17:26:52:0f:e6:9c:34:4e:85:6d:
                    e9:2a:54:04:1e:fd:2e:ce:c2:c7:91:a8:78:15:b4:
                    32:ac:1e:b7:ee:5e:de:88:44:4a:e4:a8:65:11:2b:
                    ce:e2:21:79:14:c6:1a:3a:21:02:5e:13:c5:28:74:
                    8a:38:09:35:5b:48:d3:ab:b9:f6:d0:56:43:af:68:
                    86:f4:61:3a:fb:c8:b0:6f:43:c8:ea:ca:e4:d5:79:
                    6d:fe:09:e4:b8:b9:53:2f:d9:59:8f:6e:f0:f7:da:
                    79:a7:6d:59:cc:36:0a:25:ca:74:2c:e0:46:ab:a0:
                    41:af:21:d3:40:00:d1:6f:a8:c3:88:bc:6f:bb:cf:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:30:5B:E8:56:DF:D2:BB:AA:E4:3B:C4:B9:09:02:2B:7B:57:63
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:03:51:15:80:1b:e5:1f:0f:0a:81:51:5c:88:de:f5:01:c3:
         50:1b:9c:8d:e5:4c:9f:9d:ce:5e:03:b7:45:31:70:14:30:03:
         21:85:be:b6:66:96:47:e3:ff:54:78:12:a3:2f:7e:ee:55:ff:
         4e:38:b2:25:e2:74:fc:a8:97:ef:c7:f5:ac:8f:4a:45:5d:f4:
         1a:c1:ea:25:c9:69:90:be:3c:e4:c3:02:13:85:90:bf:23:36:
         41:45:40:88:41:98:9e:37:41:8d:fc:fa:00:15:28:f4:62:67:
         c5:75:67:a7:b2:55:66:f0:03:6b:a1:6f:7a:0e:0e:0d:b3:f1:
         99:7f:d5:4f:ef:ea:56:d9:0b:cf:f3:28:43:4f:1a:80:82:0a:
         f0:b2:3e:6f:35:49:2c:39:15:19:d2:6c:b2:7e:4f:01:46:b7:
         c8:6c:07:0b:a3:9c:6b:4d:8b:49:16:ee:f4:58:bb:fa:52:ae:
         2f:a4:29:86:00:19:49:ae:34:40:cd:3c:8b:bc:db:36:9e:a7:
         b4:8b:c5:94:ef:20:ee:fa:95:21:02:8b:11:d8:16:ba:dc:c4:
         c2:3f:5c:4a:ea:8e:b7:17:70:1d:92:d2:68:28:9a:4a:97:47:
         7a:28:56:5a:41:74:5d:d4:45:a8:8c:8b:ff:1a:32:e5:d5:d6:
         d6:56:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:40:06 2026 by rpki-client