Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          14SO27XUH3qNCTR+u58aqKU4OTbxQJ4KpCx98SHEoEA=
Subject key identifier:   98:8F:D2:8C:E0:86:A3:CC:C4:E5:87:D1:84:38:9C:55:DA:70:FE:E5
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       2D71D8B3F79E59424F5F2CF5A2FE296D83E50E82
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          98
Signing time:             Wed 13 May 2026 07:11:01 +0000
Manifest this update:     Wed 13 May 2026 07:06:01 +0000
Manifest next update:     Thu 14 May 2026 08:04:01 +0000
Files and hashes:         1: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          2: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
                          3: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
                          4: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          5: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          6: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          7: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          8: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          9: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: 1DJdflhR+OkadzuQVivhL/X3/gIkr/lFHhouCDFpywU=)
                          10: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          11: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          12: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:71:d8:b3:f7:9e:59:42:4f:5f:2c:f5:a2:fe:29:6d:83:e5:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: May 13 07:06:01 2026 GMT
            Not After : May 14 08:04:01 2026 GMT
        Subject: CN=988FD28CE086A3CCC4E587D184389C55DA70FEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:c1:2b:92:72:f0:96:4b:3a:89:8d:34:50:
                    c9:60:8e:d6:d4:61:0c:d9:af:1a:54:dc:23:40:34:
                    7f:b7:79:01:3a:cf:63:60:04:a0:f3:f8:45:27:78:
                    83:14:e1:54:20:cb:bc:1b:9f:fa:8c:6a:f7:9d:d6:
                    83:7a:27:a0:d3:6f:70:f9:15:27:5f:27:3c:42:1f:
                    de:ed:4c:d5:4c:7d:97:c8:f9:be:ac:c5:8b:a1:e8:
                    1c:9c:38:bf:f3:f0:d4:01:83:bb:bc:cc:6a:3e:10:
                    79:8b:52:bd:00:fd:83:71:5e:63:30:7e:7b:64:46:
                    8e:74:1e:6e:46:fe:04:d1:c3:59:f0:47:5c:a3:b3:
                    47:bf:3f:b8:8b:26:18:7b:4d:ff:b4:cf:db:a8:c5:
                    76:1a:49:60:1e:f6:f8:45:bf:b1:0d:e4:38:af:47:
                    49:f7:e9:eb:d0:d9:60:14:16:7a:12:e5:3d:e2:e0:
                    09:ba:3a:8d:08:0a:94:83:b8:d0:29:1c:b4:60:ee:
                    d0:98:d1:ad:df:ff:c2:53:d7:af:ba:68:f3:d1:fb:
                    84:b2:9a:e2:b3:30:e4:1f:1b:fb:45:d3:5c:4f:01:
                    4f:ea:c7:5d:94:03:c7:4b:66:16:e6:53:d8:56:57:
                    4a:cf:af:ee:2e:e9:a4:6e:68:54:0f:31:64:a4:af:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:D2:8C:E0:86:A3:CC:C4:E5:87:D1:84:38:9C:55:DA:70:FE:E5
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:8c:46:ea:33:9f:96:15:8a:bc:2b:d3:19:4c:35:2e:6a:
         5e:67:e1:9a:ca:ab:02:16:9b:d8:ee:30:a9:03:ed:2c:15:86:
         aa:d9:b7:71:3c:59:33:65:74:a2:ca:5d:12:89:29:c4:d0:3b:
         91:16:4b:04:0c:08:be:fb:02:41:82:a1:6b:fa:3a:2f:0a:bb:
         a7:5b:92:68:9d:ce:48:dc:70:d2:2e:97:b1:33:01:1a:2c:97:
         bf:c1:27:fa:6f:61:a5:0a:b5:b2:3a:56:98:ed:e2:49:7a:8e:
         a8:7b:c8:82:ee:9b:02:30:00:32:96:39:b7:62:53:2e:2b:d1:
         88:87:31:52:ab:9e:4d:73:9d:cd:d5:95:e9:aa:88:eb:18:d7:
         57:d9:0c:b7:d6:fe:c7:11:c7:c9:6e:ba:4b:e0:b3:58:ea:0e:
         13:87:90:c8:b0:e5:c1:70:3e:c2:e4:f2:f2:55:fe:30:40:9c:
         34:0e:43:e3:1a:66:0f:08:b9:d6:ea:35:75:cb:12:7a:8c:27:
         ad:51:f5:50:16:61:48:48:f9:03:ef:c4:cb:69:be:8a:3d:79:
         06:5e:f9:f6:68:54:69:9c:b2:81:60:ef:b0:06:62:22:ac:7f:
         bc:11:9c:9f:a1:73:26:cf:69:69:38:f5:17:5e:d0:f4:f9:6e:
         8f:5f:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:59 2026 by rpki-client