Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          hwcf5paPICicpTwn/UsWXOJRHhucNy64x0APIFZ7JBI=
Subject key identifier:   3C:F9:6C:72:18:A3:74:90:E8:0F:FD:EB:8E:1A:18:83:57:8E:BB:6E
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       0D1C909FD7AE8F589655C2A51FF7DD3A856DFB9B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          59
Signing time:             Thu 26 Mar 2026 15:33:28 +0000
Manifest this update:     Thu 26 Mar 2026 15:28:28 +0000
Manifest next update:     Fri 27 Mar 2026 19:07:28 +0000
Files and hashes:         1: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          2: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          3: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          4: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          5: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
                          6: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          7: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: +t83LWtcGP+NC914tolCuW9iW9u8o6ZoBfVDRdoEFcw=)
                          8: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
                          9: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          10: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          11: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          12: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 19:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:90:9f:d7:ae:8f:58:96:55:c2:a5:1f:f7:dd:3a:85:6d:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Mar 26 15:28:28 2026 GMT
            Not After : Mar 27 19:07:28 2026 GMT
        Subject: CN=3CF96C7218A37490E80FFDEB8E1A1883578EBB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:18:a9:00:85:d5:e6:04:d7:fe:0a:a0:b4:
                    2e:6d:58:e1:70:00:d9:14:50:04:4b:c6:3f:75:da:
                    f8:68:13:89:67:98:0a:a1:06:92:3a:3d:e0:eb:b4:
                    f5:43:7d:6a:16:ee:27:93:41:91:65:7b:7c:f7:60:
                    85:72:eb:2c:b7:9a:81:d4:95:3e:d9:38:b0:4a:52:
                    1a:7b:44:18:30:88:22:86:e5:17:b6:99:8b:ce:5a:
                    7b:a7:88:0b:b0:66:79:95:aa:94:21:22:c3:1e:70:
                    ca:e7:29:8c:63:d9:a8:eb:2c:97:d6:bf:5e:d2:3a:
                    f8:32:cc:34:81:80:7e:77:b5:92:54:dd:4d:0d:55:
                    66:95:ae:9d:9b:51:53:55:e8:e6:d6:de:aa:77:4d:
                    ad:34:de:60:2d:a3:96:12:5d:b8:c1:81:b0:96:c1:
                    78:35:b1:ee:b3:3f:8c:02:56:66:a6:61:3d:ca:f1:
                    a8:93:66:e8:e5:a2:fa:2e:39:21:d7:df:ae:6c:e9:
                    6e:93:ea:bb:de:cf:21:c3:de:52:8b:e0:fb:c0:25:
                    a1:7a:69:74:94:20:e4:a3:53:25:33:ab:15:cc:72:
                    73:24:6e:7c:c3:4a:12:b8:70:cf:92:30:f3:ee:0b:
                    0f:e5:32:36:69:17:e0:20:be:e5:1f:e3:d9:63:3c:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F9:6C:72:18:A3:74:90:E8:0F:FD:EB:8E:1A:18:83:57:8E:BB:6E
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:06:52:bb:40:90:7d:0f:7d:3c:b2:70:1b:13:18:5c:85:94:
         56:f3:99:41:98:f0:a6:8c:05:03:5c:8c:f8:55:3a:04:30:60:
         77:71:7f:5d:8f:8c:dd:c2:a8:34:97:f1:19:4f:33:03:d8:b7:
         21:2c:a5:a4:f5:dd:0c:3b:0c:f0:42:92:c8:48:2a:46:cc:3d:
         f7:81:0a:57:f8:a9:5b:cb:8d:70:13:71:63:d5:6f:58:0f:a7:
         fc:95:6f:30:29:b7:c7:95:31:64:74:ad:e9:2d:3a:e8:f9:07:
         43:88:02:21:9b:bd:d7:e7:34:1a:11:44:79:66:b3:d0:db:64:
         16:b6:62:a3:4b:08:da:08:4c:87:c3:07:f6:e3:89:7f:e1:2c:
         4c:11:8c:55:11:3e:77:4f:5f:70:98:4a:09:8b:56:8d:bc:55:
         9d:ab:0b:21:94:3f:b4:f4:95:c0:51:97:f2:19:d3:af:b5:98:
         f5:95:11:94:5f:c0:4a:74:d7:7d:2b:c3:c6:d1:c3:30:d6:64:
         23:7f:fb:d9:a7:cc:91:09:f7:d3:13:46:03:af:2e:a6:53:84:
         8d:1f:4d:64:76:c4:ba:a1:91:52:45:0f:f9:c8:0e:22:06:ae:
         2d:4f:33:e8:c5:58:64:ff:6c:19:5f:5e:49:ca:7b:76:bf:56:
         45:df:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:07 2026 by rpki-client