Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File:                     7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier:          OPBIHDqROq0CF2CLwHAsa78MKUehIysCAml5qr1NNpw=
Subject key identifier:   41:FD:62:B3:83:27:7F:D1:40:23:04:A1:6A:F9:3A:43:9C:A2:FA:B6
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       406EF5656CB61DE780EA4B4C566A90C6FF1A0EE4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number:          59
Signing time:             Wed 25 Mar 2026 21:18:28 +0000
Manifest this update:     Wed 25 Mar 2026 21:13:28 +0000
Manifest next update:     Fri 27 Mar 2026 00:59:28 +0000
Files and hashes:         1: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
                          2: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
                          3: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
                          4: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
                          5: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
                          6: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
                          7: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: OWQXkJqFE4KbE5xnLgy7xwaluzAX5NTv1iwE7qnCI2M=)
                          8: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
                          9: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 09:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:f5:65:6c:b6:1d:e7:80:ea:4b:4c:56:6a:90:c6:ff:1a:0e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Mar 25 21:13:28 2026 GMT
            Not After : Mar 27 00:59:28 2026 GMT
        Subject: CN=41FD62B383277FD1402304A16AF93A439CA2FAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:9d:32:24:c8:87:00:34:b2:12:ea:50:1b:
                    00:0f:32:98:00:2d:b5:28:21:e4:f9:a2:cd:15:66:
                    b8:ec:09:cc:ba:d1:87:f9:c5:a6:9d:7d:78:40:d4:
                    6d:74:33:f7:90:80:4d:10:2c:aa:85:25:de:48:a5:
                    48:1e:59:6a:31:95:dc:36:f3:18:1d:9a:95:83:50:
                    1d:4c:0e:66:00:7a:dc:0b:e2:ea:d0:6e:98:92:ce:
                    60:e8:af:0b:57:49:c3:55:83:42:ad:01:a1:95:b2:
                    01:42:59:d6:eb:5f:f5:50:93:93:c9:59:de:04:e4:
                    e1:a5:04:89:9b:a5:9f:ae:d8:82:6b:cc:ef:99:8d:
                    a2:7b:79:e3:a1:3b:bc:4c:73:b7:50:38:1d:ab:06:
                    77:9a:9b:17:dc:a8:37:d1:7b:57:ba:96:f5:20:bf:
                    86:c8:2f:8d:32:30:dc:89:4a:22:01:7d:c7:ba:98:
                    ce:04:ed:c0:3f:8f:59:c5:06:10:78:a7:de:8f:f4:
                    35:d4:3b:d4:da:19:bf:f3:98:d6:9c:6f:70:f5:36:
                    c4:69:2a:7b:a2:42:aa:80:f0:52:0d:43:08:76:23:
                    e2:06:bb:13:21:ae:99:5c:94:52:07:5a:d8:a5:db:
                    66:53:35:c9:3c:06:ed:e1:bd:09:a1:f1:26:23:4a:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:62:B3:83:27:7F:D1:40:23:04:A1:6A:F9:3A:43:9C:A2:FA:B6
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:57:b7:3f:45:31:be:03:4d:00:61:31:c4:48:7c:cb:d3:3a:
         81:da:cc:6c:e4:2c:5e:8e:ba:a6:ce:ce:93:61:6c:fe:61:a3:
         64:df:b1:c4:cf:9f:83:82:f8:ac:ff:69:c6:79:48:d5:70:d6:
         ec:16:21:cb:e1:2a:d9:3f:73:e6:95:83:c1:e1:77:83:c6:26:
         fc:f8:fd:70:6b:72:d5:78:f2:a1:fe:1d:48:52:2e:3c:a4:c7:
         cd:1e:d5:7f:98:dd:de:08:a0:08:30:0e:5d:db:c6:a1:9b:6b:
         78:ad:ba:b7:62:6b:66:df:de:15:11:9b:fd:2e:8c:01:92:14:
         cc:ee:d7:e0:ab:6a:bc:49:99:2f:75:49:6e:30:ac:66:8d:bb:
         11:a9:55:06:4e:ec:dd:27:8c:f3:26:98:15:78:cc:3c:0b:36:
         b7:58:0c:f3:f9:db:ce:95:45:e9:b5:1b:58:1f:49:f4:95:15:
         71:cc:27:30:47:5c:5e:7d:1e:30:27:8a:6d:26:08:fa:f7:7f:
         fc:b6:a7:be:fe:9d:ad:6c:96:66:f5:1b:48:4b:57:79:23:35:
         af:3b:78:b5:67:23:f2:e2:a7:d2:14:0b:63:a2:0e:9d:54:92:
         e9:3f:25:f5:ff:43:99:ae:34:a8:5f:39:cd:95:5a:cb:ec:d7:
         bc:63:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:14 2026 by rpki-client