Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          ua1zUScvSj+fdur2y3x2oy/4HT/fsURSXABg920bd1c=
Subject key identifier:   14:D7:CB:05:17:26:8A:B6:F6:13:2C:2E:07:2A:B4:17:1C:7C:54:33
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       4F1F5CE64BA92F8D35251CB9033003C59DDD43D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 11:56:04 +0000
Manifest this update:     Wed 13 May 2026 11:51:04 +0000
Manifest next update:     Thu 14 May 2026 13:55:04 +0000
Files and hashes:         1: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          2: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          3: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          4: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          5: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
                          6: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          7: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          8: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          9: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: c/xpIZK8F+pz5ahTW0MQIR3sWNrbw3O5uUOhz8/toLY=)
                          10: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          11: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
                          12: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1f:5c:e6:4b:a9:2f:8d:35:25:1c:b9:03:30:03:c5:9d:dd:43:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: May 13 11:51:04 2026 GMT
            Not After : May 14 13:55:04 2026 GMT
        Subject: CN=14D7CB0517268AB6F6132C2E072AB4171C7C5433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:74:d8:a5:31:a3:78:7f:54:f4:fc:c6:8a:
                    5d:09:0d:52:35:0a:c9:c9:0e:1a:f4:14:24:75:bf:
                    b0:c6:db:69:6e:93:5b:cc:d3:2a:b1:86:aa:6f:84:
                    ad:a3:23:9c:54:7e:c1:6c:f9:8c:64:9a:98:ee:f9:
                    30:2d:b8:7c:a1:4a:32:a9:87:f9:5b:94:b0:87:b1:
                    df:40:e2:2b:bc:21:26:ed:57:8a:66:1b:18:18:04:
                    0a:7c:44:c5:ce:fa:19:93:5d:28:05:e8:16:67:0d:
                    d7:85:cf:4f:75:ae:55:55:92:a3:ed:2f:28:77:65:
                    d2:d4:2a:3b:bb:08:8d:d6:20:1e:61:5e:00:c7:9b:
                    0c:ba:7e:80:be:a8:88:9a:3b:e7:e3:0c:fc:fe:55:
                    bf:f8:de:5d:a8:6f:28:da:df:10:c1:cd:8c:e8:3e:
                    17:c9:15:45:07:de:88:a4:80:6c:14:ed:75:88:ae:
                    58:cc:cd:a4:f3:9f:ac:5a:3f:cc:73:0c:44:e7:c6:
                    10:71:51:1c:80:b0:2a:ce:6d:f4:ff:1a:01:fd:a5:
                    49:d5:08:cd:56:2d:a6:19:8e:9e:d6:1b:48:70:04:
                    92:cf:56:03:d8:19:2e:54:5e:d5:3e:8b:e0:a1:ff:
                    0d:1d:23:bd:bf:74:99:c4:81:5a:91:f0:33:41:17:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:CB:05:17:26:8A:B6:F6:13:2C:2E:07:2A:B4:17:1C:7C:54:33
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:1c:2c:01:b4:ca:fb:8b:03:89:0e:2d:db:dd:a1:86:4a:
         f8:bb:50:7e:fc:d5:b1:f1:8c:cb:79:18:f4:78:5a:d3:8c:b1:
         32:a1:99:22:48:a3:bd:5e:eb:4c:82:ed:6e:86:94:68:04:d3:
         2e:66:dc:14:42:7e:1d:45:9e:10:75:d7:ec:3e:3c:20:96:5f:
         68:06:20:d1:de:57:7c:f2:85:55:d2:ae:0e:25:2b:98:2a:fc:
         86:ac:5b:8d:f7:d8:ec:80:86:2d:6f:4a:fe:76:d0:78:5c:34:
         c8:d4:b0:21:13:5c:ed:75:4b:79:e8:8d:22:45:33:4f:62:44:
         26:ea:c9:49:73:1b:af:a7:1e:98:7c:13:06:45:5f:b4:49:77:
         51:36:c6:c3:14:9f:76:f4:20:8f:75:33:de:8c:e9:0a:b0:e9:
         12:97:dd:51:41:cd:7f:dd:77:52:3f:d3:bb:1c:4c:b8:33:9d:
         21:32:65:66:05:e7:83:10:72:ee:1c:87:c0:97:4e:c6:5d:a1:
         b6:f1:fc:6d:f1:8f:56:98:be:fe:d0:55:bb:f3:be:97:96:08:
         cd:20:08:f9:cf:f0:04:59:fc:f8:da:d2:a2:fb:d6:c6:f1:db:
         77:30:36:20:bf:46:bf:dd:8d:a1:47:4b:a0:97:4f:5b:18:8c:
         24:43:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:55 2026 by rpki-client