Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
File:                     12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json)
Hash identifier:          zga/l17cKsUxts1e03Vowf0D4QKhU5n6Omn4/yZ1fDE=
Subject key identifier:   89:32:F1:A2:96:86:72:A2:98:51:B1:A8:6A:C2:4D:8E:19:5B:C4:19
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Certificate issuer:       /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial:       699C10A2A5EED6836BBA7E8FAE881089CCF5F5BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
Manifest number:          58
Signing time:             Thu 26 Mar 2026 10:13:28 +0000
Manifest this update:     Thu 26 Mar 2026 10:08:28 +0000
Manifest next update:     Fri 27 Mar 2026 11:23:28 +0000
Files and hashes:         1: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: ornj/DbtO8Z98wb4p9PZKh6dlEKHRM27gAGd8nmROAE=)
                          2: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=)
                          3: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 04:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9c:10:a2:a5:ee:d6:83:6b:ba:7e:8f:ae:88:10:89:cc:f5:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
        Validity
            Not Before: Mar 26 10:08:28 2026 GMT
            Not After : Mar 27 11:23:28 2026 GMT
        Subject: CN=8932F1A2968672A29851B1A86AC24D8E195BC419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:8b:1a:07:fe:3d:55:de:68:b1:97:7d:8b:
                    25:55:c8:d3:67:82:d7:e4:ee:74:2c:13:41:cf:92:
                    81:3b:c2:fc:22:56:52:da:32:63:8f:56:c7:ff:a8:
                    19:eb:63:db:95:0c:46:f9:da:0e:6a:4e:34:97:31:
                    10:98:9d:53:2f:27:8b:ec:67:d8:92:c2:fb:83:51:
                    94:ac:1c:65:67:4d:8d:6f:4f:3d:24:af:d0:ae:de:
                    be:2c:9c:1d:d4:97:cc:ac:8d:7b:3d:12:4c:7e:68:
                    69:5b:5a:46:47:fc:af:20:e1:35:7e:8e:b9:fc:53:
                    f7:54:39:6f:95:23:44:0b:8a:e1:c3:50:69:8c:db:
                    2f:35:96:bd:7c:72:34:c8:00:f9:57:a1:b4:4d:b9:
                    76:0a:1a:aa:f4:d2:8b:7c:31:6d:3d:e0:e4:22:0a:
                    03:6b:c8:d6:9f:ad:74:38:c4:29:7f:a3:4f:f3:bb:
                    a3:eb:ca:4f:be:a7:0a:c1:30:2c:04:a7:56:48:ec:
                    ab:02:34:ca:a4:44:38:53:2a:be:b5:4d:d6:be:55:
                    ff:74:af:55:ad:02:c7:4c:13:fa:7a:21:d0:ca:58:
                    fa:05:65:3d:ff:36:d8:6c:e7:0e:6c:49:a5:29:ce:
                    87:4d:0d:6e:ad:35:4f:71:8b:96:79:54:b7:8d:ae:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:F1:A2:96:86:72:A2:98:51:B1:A8:6A:C2:4D:8E:19:5B:C4:19
            X509v3 Authority Key Identifier:
                keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:39:38:4c:0c:83:2e:d9:5c:98:06:61:65:0d:8b:f6:ab:
         1c:34:b4:b9:8d:76:ab:d4:d3:72:3b:ca:81:fc:f0:ab:62:ff:
         d1:7f:2c:be:c3:fe:b9:7a:1d:e1:f8:34:56:b2:bb:37:d5:4b:
         1e:c8:0d:6d:7a:31:77:08:57:fe:72:da:0b:cb:fb:85:be:bd:
         2a:27:d6:ea:6a:8d:d9:6a:0b:ea:37:c9:c5:b0:5c:8f:9e:e9:
         c5:96:2c:a9:a0:f2:f4:0b:4a:02:74:f9:2e:4e:a9:40:c2:2d:
         b5:08:d2:e6:de:89:a3:4e:2e:ba:81:5a:d6:c7:56:c9:93:93:
         92:3c:7e:66:ff:ef:2e:ae:94:d3:cc:4c:09:67:c2:2c:60:25:
         b1:19:2b:83:90:5a:a6:bb:10:e2:82:09:39:b3:9e:2d:af:c0:
         e5:f9:4d:8f:17:e3:66:c4:ed:e1:a2:57:99:17:5f:1f:eb:3d:
         87:9c:5b:b3:3c:8a:17:32:f4:ab:cf:66:fb:cf:b0:a9:98:89:
         0a:15:6c:0b:a7:c9:47:87:ff:4e:f3:bf:2e:bc:41:59:64:f4:
         77:15:7b:50:48:20:94:f8:6e:1b:f6:45:9b:95:ee:68:b3:2f:
         ab:fe:56:bd:63:58:de:e6:34:fc:1a:44:fa:2c:1f:cb:ab:06:
         bc:4a:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:45 2026 by rpki-client