Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
File:                     7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft (raw, json)
Hash identifier:          ykhFbvoPsNS7yJ/dtURmoZxVvtEEz+wqUp1OGsJdzvs=
Subject key identifier:   DC:D8:E8:8E:8B:44:F8:6F:24:CB:37:55:C9:A1:54:D0:B7:26:92:59
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Certificate issuer:       /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial:       39B0958F73A6157CF813C2879B9B073E556C676B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
Manifest number:          58
Signing time:             Thu 26 Mar 2026 18:43:28 +0000
Manifest this update:     Thu 26 Mar 2026 18:38:28 +0000
Manifest next update:     Fri 27 Mar 2026 21:50:28 +0000
Files and hashes:         1: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl (hash: rWbgkD8MD26HeOFS/EpQTvrmXiTBjRAfYGGEXJak5Tk=)
                          2: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (hash: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=)
                          3: 3133392e3231372e3132382e302f31372d3332203d3e203538353933.roa (hash: gyaQRSP2K4Ar7mRLlvlWZj3SxsO0p/6gafUPCndYi6E=)
                          4: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (hash: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk=)
                          5: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (hash: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8=)
                          6: 34302e37322e302e302f31362d3332203d3e203538353933.roa (hash: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w=)
                          7: 35322e3133302e3139322e302f31382d3332203d3e203538353933.roa (hash: dzApubPVeFSkZdW4H5zf0mOm6a9a8hNkGDjx4j4dslE=)
                          8: 34302e37322e3235352e302f32342d3332203d3e203538353933.roa (hash: N+EpGWN+5eD7X8BPdHo0VUuyK/mruZfTCEv7P/4k7IA=)
                          9: 35322e3133302e31362e302f32302d3332203d3e203538353933.roa (hash: 9fmayBtgmtjpp4jzOoesECemG0iPag+LmUb3f7R4naw=)
                          10: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (hash: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU=)
                          11: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (hash: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I=)
                          12: 35322e3133302e36342e302f31392d3332203d3e203538353933.roa (hash: OprOlplssuamN3h94BT0AnEzNk6BvCRELQ3ohphCM00=)
                          13: 34302e37322e302e302f31352d3332203d3e203538353933.roa (hash: GZdXu8wxwSiGKPAoovUfq55Hmtnm5G22A4eA9cJCeZ8=)
                          14: 34302e37332e39392e302f32342d3332203d3e203538353933.roa (hash: 7R7fDqZf/5+3oxpf17LppS6FttEpLPqj/SRHzmBlL90=)
                          15: 34302e37322e302e302f31372d3332203d3e203538353933.roa (hash: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho=)
                          16: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (hash: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k=)
                          17: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (hash: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4=)
                          18: 3133392e3231372e302e302f31362d3332203d3e203538353933.roa (hash: TjfWShvYyMSe5iUDgDmO2D0KmAjdpi9YE3JeWe6558M=)
                          19: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (hash: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8=)
                          20: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (hash: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo=)
                          21: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (hash: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk=)
                          22: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (hash: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c=)
                          23: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (hash: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg=)
                          24: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (hash: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c=)
                          25: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (hash: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno=)
                          26: 34302e37332e302e302f31372d3332203d3e203538353933.roa (hash: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs=)
                          27: 34302e37322e3132382e302f31372d3332203d3e203538353933.roa (hash: p/W3urv9s6Mh0sKXJJNeu9I+tgf84ncaa3h8zoru8OE=)
                          28: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (hash: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=)
                          29: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (hash: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8=)
                          30: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (hash: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg=)
                          31: 34302e37332e3132382e302f31372d3332203d3e203538353933.roa (hash: CiPHFGZqvfKg4LSjdZddwLwpgrGQUYVCQQV/0MxCEaY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:95:8f:73:a6:15:7c:f8:13:c2:87:9b:9b:07:3e:55:6c:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
        Validity
            Not Before: Mar 26 18:38:28 2026 GMT
            Not After : Mar 27 21:50:28 2026 GMT
        Subject: CN=DCD8E88E8B44F86F24CB3755C9A154D0B7269259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:d9:75:a2:ad:1d:ca:03:09:12:fe:25:5e:
                    27:2f:75:fe:d4:ce:84:d9:14:87:fc:28:6e:60:65:
                    3b:be:8c:19:2f:7f:27:d7:b9:2e:d5:4a:46:73:f4:
                    7e:05:e1:e8:bc:54:41:7e:01:e0:a6:90:82:39:cd:
                    63:e1:f3:21:9b:5b:68:4a:9c:b8:4a:04:21:57:9f:
                    e1:f4:2e:e6:76:8d:3d:27:21:a9:90:be:fd:fe:c9:
                    99:83:da:c6:50:c3:ad:d3:36:27:33:72:61:1e:ae:
                    94:3a:6c:48:02:2f:47:61:d6:de:8f:8b:24:aa:68:
                    8b:71:6e:ad:6e:d3:0e:ec:f8:8b:56:39:be:b9:0c:
                    9b:20:8c:9f:73:75:00:74:d0:34:4e:ba:e0:fd:3d:
                    4e:7b:69:3a:4e:dd:9d:0b:46:02:2c:6c:d4:b7:1c:
                    3f:c6:32:9a:5b:5c:46:96:e6:77:00:3f:03:1e:e2:
                    ed:7f:97:5f:d5:0e:51:b0:ad:37:f4:c3:20:6d:b8:
                    68:ed:e3:1b:f9:b2:a1:e8:5d:82:b2:a0:7d:29:e8:
                    1f:b9:90:e9:06:02:55:7f:9e:e6:f2:81:5c:72:fb:
                    61:34:4f:01:1f:2b:7a:88:ce:f4:36:67:47:6f:de:
                    22:59:22:1f:d4:7f:63:8d:3e:d9:ef:8e:bb:88:9a:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:E8:8E:8B:44:F8:6F:24:CB:37:55:C9:A1:54:D0:B7:26:92:59
            X509v3 Authority Key Identifier:
                keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:a2:3d:40:50:a4:3f:ec:6c:97:9e:d9:33:30:3d:95:b0:
         05:22:31:02:0f:1f:82:70:b3:d3:81:f4:ec:a2:7e:99:2c:08:
         89:6e:82:e0:3b:19:91:b8:48:1b:d6:6b:a5:12:41:dc:04:7e:
         77:53:74:1b:60:98:f5:5c:e8:ac:e8:89:88:30:db:cc:7e:ed:
         b9:4d:7e:b4:92:64:b5:d5:96:11:2a:9a:63:ba:ee:3e:28:d4:
         93:f9:a6:f5:81:90:34:56:cc:5d:a6:ff:93:d1:07:66:fb:ac:
         3b:e3:35:af:26:67:8a:af:12:fd:54:2a:ed:eb:50:2c:bc:dc:
         8a:35:48:9b:c1:81:62:3d:cd:ae:5a:32:db:8d:b2:19:9f:0f:
         65:24:88:27:1f:69:6c:6c:fb:35:9c:96:6b:cb:4b:e4:75:38:
         1c:36:ba:d3:94:ce:39:a5:3a:1d:95:b9:b6:8d:a1:19:c5:38:
         ff:c0:40:c8:ca:59:3d:8a:fe:d6:9a:3b:9a:2b:f2:2a:3d:e7:
         60:f4:75:49:0a:eb:d4:6e:74:b5:df:f7:2e:bb:82:8e:25:90:
         78:9d:e2:79:6f:ae:ac:05:88:5c:3c:d0:a6:f0:90:c6:65:ad:
         56:24:2f:69:28:c6:a1:9c:e4:29:1d:47:b0:7e:f3:5a:c3:39:
         f7:eb:74:4e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUObCVj3OmFXz4E8KHm5sHPlVsZ2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy
ODQ4RjA1RjAeFw0yNjAzMjYxODM4MjhaFw0yNjAzMjcyMTUwMjhaMDMxMTAvBgNV
BAMTKERDRDhFODhFOEI0NEY4NkYyNENCMzc1NUM5QTE1NEQwQjcyNjkyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuH9l1oq0dygMJEv4lXicvdf7U
zoTZFIf8KG5gZTu+jBkvfyfXuS7VSkZz9H4F4ei8VEF+AeCmkII5zWPh8yGbW2hK
nLhKBCFXn+H0LuZ2jT0nIamQvv3+yZmD2sZQw63TNiczcmEerpQ6bEgCL0dh1t6P
iySqaItxbq1u0w7s+ItWOb65DJsgjJ9zdQB00DROuuD9PU57aTpO3Z0LRgIsbNS3
HD/GMppbXEaW5ncAPwMe4u1/l1/VDlGwrTf0wyBtuGjt4xv5sqHoXYKyoH0p6B+5
kOkGAlV/nubygVxy+2E0TwEfK3qIzvQ2Z0dv3iJZIh/Uf2ONPtnvjruImvWhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3NjojotE+G8kyzdVyaFU0LcmklkwHwYDVR0j
BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF
QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE4Nzc4OTEvMS83RUFDOUU0M0M4RkFF
N0VENUI2MTU5NDIzRDYwRUE3MzI4NDhGMDVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQyiPUBQpD/s
bJee2TMwPZWwBSIxAg8fgnCz04H07KJ+mSwIiW6C4DsZkbhIG9ZrpRJB3AR+d1N0
G2CY9VzorOiJiDDbzH7tuU1+tJJktdWWESqaY7ruPijUk/mm9YGQNFbMXab/k9EH
ZvusO+M1ryZniq8S/VQq7etQLLzcijVIm8GBYj3Nrloy242yGZ8PZSSIJx9pbGz7
NZyWa8tL5HU4HDa605TOOaU6HZW5to2hGcU4/8BAyMpZPYr+1po7mivyKj3nYPR1
SQrr1G50td/3LruCjiWQeJ3ieW+urAWIXDzQpvCQxmWtViQvaSjGoZzkKR1HsH7z
WsM59+t0Tg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:09:33 2026 by rpki-client