Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
File:                     BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json)
Hash identifier:          qI8EDS7OQysXU/92jo7XSkM8PYN7hSAfAnRqUtr5Pyw=
Subject key identifier:   95:96:7B:9D:F2:14:54:93:9B:CF:9D:A9:88:54:03:A4:F7:69:A3:0E
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       3D0FD5E6D06DDC9C9417E254409BF55ADB873FED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
Manifest number:          52
Signing time:             Tue 12 May 2026 16:50:37 +0000
Manifest this update:     Tue 12 May 2026 16:45:37 +0000
Manifest next update:     Wed 13 May 2026 19:07:37 +0000
Files and hashes:         1: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=)
                          2: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=)
                          3: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=)
                          4: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=)
                          5: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=)
                          6: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=)
                          7: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=)
                          8: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=)
                          9: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=)
                          10: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=)
                          11: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=)
                          12: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=)
                          13: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: g7GviBtQOtNSVjNfNdS+uLqN8nsvqd/y94Q9otgd1lE=)
                          14: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=)
                          15: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=)
                          16: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=)
                          17: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=)
                          18: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=)
                          19: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=)
                          20: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=)
                          21: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=)
                          22: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=)
                          23: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=)
                          24: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=)
                          25: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=)
                          26: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=)
                          27: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0f:d5:e6:d0:6d:dc:9c:94:17:e2:54:40:9b:f5:5a:db:87:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: May 12 16:45:37 2026 GMT
            Not After : May 13 19:07:37 2026 GMT
        Subject: CN=95967B9DF21454939BCF9DA9885403A4F769A30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:68:7a:43:b7:71:a8:60:8f:00:5f:22:83:
                    ae:cc:a5:cd:b9:5f:48:f3:2f:ed:89:84:a7:ea:97:
                    a8:ca:2c:0b:7c:4f:8f:fa:99:e5:39:af:d4:78:2a:
                    34:be:be:1e:2e:ef:65:3a:fb:ec:b3:b0:5c:36:75:
                    ef:1b:6c:83:9b:5e:71:07:6b:f8:da:5a:39:d4:19:
                    4d:04:98:c8:fd:99:b5:6f:4e:4f:f4:7f:9a:e6:12:
                    30:57:4e:0d:e2:65:43:5d:3a:c3:83:13:8f:95:21:
                    6d:e4:c4:d8:77:61:31:8a:66:15:4d:3c:f4:27:37:
                    58:c8:1a:86:28:9b:51:26:a6:84:e4:5d:53:8b:6b:
                    05:75:68:be:d9:18:ae:e6:90:5b:bd:16:d2:1a:56:
                    59:b4:8f:67:11:f2:06:24:d8:3a:cf:d3:ce:89:2b:
                    17:83:bb:ff:6a:c7:ac:1f:1c:39:aa:66:90:df:ef:
                    2e:d4:28:0f:17:f0:09:db:64:b1:3c:c4:8b:ef:f7:
                    44:89:29:52:c5:f6:ae:ec:5b:25:64:d3:80:8e:85:
                    a1:e5:fe:e1:7d:84:f0:30:eb:7a:9d:07:55:48:fc:
                    22:2f:d4:82:e1:c2:a3:9d:47:5e:cc:9f:3e:a5:85:
                    0e:cb:6d:86:b6:3f:2d:b9:c2:a4:60:8b:f0:bf:72:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:7B:9D:F2:14:54:93:9B:CF:9D:A9:88:54:03:A4:F7:69:A3:0E
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:da:f8:8a:e1:8b:10:9f:98:08:d3:73:49:38:cf:91:e3:75:
         46:b3:41:0a:d0:e1:5c:f2:39:b4:fc:0b:a1:da:26:fa:46:d2:
         1e:58:56:3b:62:00:98:99:2d:1c:d9:a7:27:e4:5c:73:db:53:
         86:1e:83:26:81:7c:9f:16:5c:2f:31:1b:38:f3:0c:7f:ee:ac:
         90:8f:b5:dd:8b:9c:dc:75:ec:71:79:db:66:eb:e0:0d:f4:6f:
         59:fb:4c:9a:b5:3b:8b:f0:df:28:9b:15:17:45:71:88:42:0d:
         17:34:b1:a0:8b:0d:f4:2c:7e:78:d5:97:20:8d:0f:7d:4e:97:
         aa:fb:6a:9a:8b:08:a8:22:8e:01:b3:db:f6:da:a5:5c:32:7c:
         01:48:00:94:04:60:a0:fd:aa:97:d0:e5:d8:36:f5:b7:53:4b:
         8b:63:cd:17:77:ab:46:23:28:be:54:3a:fa:ba:df:fd:17:61:
         b9:cd:f3:0c:9f:ee:09:d6:38:99:d1:72:0a:a5:55:cc:ab:6d:
         54:99:af:c4:8a:13:9a:1d:80:a3:21:66:40:7b:d4:21:14:a0:
         67:1c:f0:a2:bb:01:3b:4f:2b:21:9b:a8:f5:e8:b5:0d:40:be:
         47:48:41:90:8e:9b:d3:5e:06:bb:d7:dc:07:eb:97:5d:49:63:
         3a:dc:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:15 2026 by rpki-client