Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
File:                     0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft (raw, json)
Hash identifier:          8/PHO7ISdGsbzUSvkwx2TiGa7LcTKmOzXq+OWgYc3BI=
Subject key identifier:   85:53:98:9C:26:79:C5:1D:3E:67:AE:C6:D5:D9:BD:8C:BE:F2:E0:B2
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       214317465E0EAB355EA7547A23FA534B1EB29320
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
Manifest number:          EA
Signing time:             Wed 13 May 2026 03:40:55 +0000
Manifest this update:     Wed 13 May 2026 03:35:55 +0000
Manifest next update:     Thu 14 May 2026 06:51:55 +0000
Files and hashes:         1: 3138302e3232332e36342e302f31382d3234203d3e2036303739.roa (hash: px4BXyXh04/ylXmyfBqf8cdjSmfyDgQF68eYVa2Xu3k=)
                          2: 3138302e3232332e38382e302f32312d3234203d3e2037303138.roa (hash: MTfFy+HdB68h59qD90AsfupZ0theJIznxec860wkTEM=)
                          3: 3138302e3232332e33322e302f32312d3234203d3e2039333034.roa (hash: QKJLtbov/NTBEBghqxNo6jMkTU9vfSQGKm7I0MGZi0k=)
                          4: 3138302e3232332e38302e302f32312d3234203d3e2037303138.roa (hash: MuhlRh5xdkl3cZbguJMCw0PlN6YYI6uB9gh+hV+4S8o=)
                          5: 3138302e3232332e37322e302f32312d3234203d3e2037303138.roa (hash: vNxoDW9oWcsEna5U4Dw1Ltrx0H2GaCjul95ywTnq5zI=)
                          6: 3138302e3232332e302e302f31382d3234203d3e2030.roa (hash: MwO4lHejsBrhN1Ug79HKcj2pqAcWoFhEP1qG4PpEWik=)
                          7: 0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl (hash: A8GsAlohRYA29th/A4lBuC6G1cqVGveoG7KV3nY5plY=)
                          8: 3138302e3232332e36342e302f31382d3234203d3e2034373636.roa (hash: B1ohpCOXx0XSWnU1OneB3V/loBXoKruHpBkUigZnte4=)
                          9: 3138302e3232332e33322e302f32312d3234203d3e2032393134.roa (hash: DWqLlB6oBO2t/pjZ3V5h8Fo18rtX864RyTzjmtiGN50=)
                          10: 3138302e3232332e36342e302f31382d3234203d3e2039333034.roa (hash: vWl0UEQaUtiIt+rGSc84aHN9aU6GHPOQMPwPodIArV4=)
                          11: 3138302e3232332e3132382e302f31382d3234203d3e2030.roa (hash: ZpYQyTkn0bCVI4Cnry27ThhKI2Ed9pn9ZU4xw4uKHnw=)
                          12: 3138302e3232332e36342e302f32312d3234203d3e2037303138.roa (hash: n/vnK7OH8uLWtb34AA7PaZRGjcsTwQP95XnNldaQrrc=)
                          13: 3138302e3232332e36342e302f31382d3234203d3e20333938373034.roa (hash: onxPksrDVBozAkzx7Hv9WVt5usg2eM2foE/EhxKZX04=)
                          14: 3138302e3232332e36342e302f31382d3234203d3e203138383131.roa (hash: qOPKR77eqM5H3vNCVcCFaUMG51XsMx8qzewTB3iWNAI=)
                          15: 3138302e3232332e33322e302f32312d3234203d3e2036303739.roa (hash: 79ii6ofHWHu62y+MTuI/hm29+8023VALeUViBIXws74=)
                          16: 3138302e3232332e33322e302f32312d3234203d3e2034353135.roa (hash: HznROOZleIbkjWjecyFFQ04dhfiyw6f5D4M8MY51FI8=)
                          17: 3138302e3232332e36342e302f31382d3234203d3e2034353135.roa (hash: 2cOPOTHt6Bc7H7LR8I+kCJVpswLNls4Zh05Sc1p/oqc=)
                          18: 3138302e3232332e36342e302f31382d3234203d3e2032393134.roa (hash: ojeirpikaax28pp1ooeFlXb+tTRGHlflMzZMcEKM4N8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:43:17:46:5e:0e:ab:35:5e:a7:54:7a:23:fa:53:4b:1e:b2:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 13 03:35:55 2026 GMT
            Not After : May 14 06:51:55 2026 GMT
        Subject: CN=8553989C2679C51D3E67AEC6D5D9BD8CBEF2E0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:79:9a:35:2c:9b:60:cb:43:c9:71:5a:9f:
                    4b:d9:d2:08:0a:d0:7e:ac:00:4e:e9:65:25:e9:9b:
                    d6:4c:3a:38:b2:6f:53:d9:e4:95:80:87:ba:b5:ea:
                    14:b9:7a:f0:07:bf:4d:58:39:5e:61:cf:3b:36:6d:
                    52:57:1c:c8:95:2d:01:04:bf:f7:29:c1:22:24:fe:
                    04:de:39:a5:04:e6:c5:ec:4c:d8:ee:6a:7a:b2:cf:
                    83:e8:bb:81:23:11:ce:1b:6f:a0:ad:79:98:20:ee:
                    e7:47:aa:31:91:63:39:4d:b6:35:ce:a1:8b:ac:e0:
                    91:59:b1:21:b0:1f:8a:08:1c:e5:32:b5:1d:5d:ba:
                    c6:54:0f:f9:2e:4d:4f:fa:86:56:d4:2e:ac:1f:b9:
                    da:e7:00:dc:32:29:57:7d:be:bf:0f:92:47:94:3e:
                    95:b3:51:94:cd:f7:4d:3a:2b:0c:45:0a:a2:18:2c:
                    bf:ec:c8:10:c4:4d:54:da:24:fe:a5:fc:74:67:76:
                    ba:ac:d1:ab:ee:b1:59:fe:2e:78:5c:0b:fc:db:37:
                    07:81:d5:65:58:49:ff:7f:dc:ed:76:3e:f3:b2:89:
                    03:1b:5a:4d:c7:3b:ca:b7:83:63:24:9b:0a:e3:0e:
                    05:74:9a:65:dc:c2:06:ad:bf:cd:54:b2:9d:6e:c2:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:53:98:9C:26:79:C5:1D:3E:67:AE:C6:D5:D9:BD:8C:BE:F2:E0:B2
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:a2:e3:6b:bc:ec:33:11:99:6a:a5:b7:14:af:4e:56:91:
         6c:96:62:92:2e:6e:e9:ec:d6:92:88:19:c5:2b:55:b7:53:ae:
         9e:87:b3:3c:e6:45:fc:d4:84:3e:1d:98:f8:68:44:20:65:10:
         3d:7b:92:ad:7e:fb:2a:13:ff:d6:22:01:b8:db:af:f9:06:2c:
         65:25:82:19:d7:4b:9a:5d:d3:1c:2d:5b:90:02:5e:b4:76:ae:
         d6:1e:d5:9f:07:5d:66:ac:4c:01:bd:52:74:9a:af:23:dd:a4:
         f3:94:29:00:5e:81:f4:d8:00:38:fe:08:2a:d0:d4:da:4f:8d:
         85:ba:c1:7e:40:25:5a:bf:9c:3c:6e:2a:62:c5:ec:44:76:87:
         0d:d4:89:b9:a5:98:da:05:86:2c:2f:19:9b:bf:12:7f:8f:4e:
         d1:7a:a2:54:ac:2d:30:5c:95:08:6a:64:8e:d3:04:51:45:28:
         8b:b1:75:00:90:bc:81:35:a9:41:3a:26:ab:cb:7d:55:69:2e:
         ee:f1:be:3c:41:cd:b9:12:90:d4:05:6b:68:a9:b7:fb:84:6d:
         41:a4:a0:e8:84:69:77:fb:e4:f4:57:78:4d:21:4f:04:8f:d5:
         c0:65:f3:51:bc:dc:ed:cb:39:96:d4:60:93:b4:29:2b:41:9d:
         5f:75:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:09 2026 by rpki-client