Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
File:                     2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json)
Hash identifier:          xr56y+mKdmouuj54+LVqCRyCXrvxJMdPLmbOE5qjZ0s=
Subject key identifier:   45:A1:AD:B1:F2:24:49:55:54:BE:41:94:87:30:73:0D:E8:EE:68:50
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Certificate issuer:       /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial:       4F20A0D25A06C06F61417AFD46E05A5F32859B14
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
Manifest number:          0F
Signing time:             Wed 13 May 2026 00:53:46 +0000
Manifest this update:     Wed 13 May 2026 00:48:46 +0000
Manifest next update:     Thu 14 May 2026 03:57:46 +0000
Files and hashes:         1: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=)
                          2: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: vSmUPwjVb1Cjb7bJ2N2xCtVxHyq08hHTcq80SqCP24o=)
                          3: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=)
                          4: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=)
                          5: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=)
                          6: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=)
                          7: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=)
                          8: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:20:a0:d2:5a:06:c0:6f:61:41:7a:fd:46:e0:5a:5f:32:85:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
        Validity
            Not Before: May 13 00:48:46 2026 GMT
            Not After : May 14 03:57:46 2026 GMT
        Subject: CN=45A1ADB1F224495554BE41948730730DE8EE6850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:8d:5c:66:01:c9:bf:35:3e:3a:a4:c9:11:
                    9b:c7:70:c1:d4:32:9e:d0:3e:69:2f:40:74:c2:3c:
                    4b:4b:66:24:f9:ed:0e:33:9f:ff:87:d3:75:9e:a5:
                    61:72:72:a0:c9:f8:19:fe:95:9d:0c:81:65:24:4a:
                    ab:ce:c3:4e:0f:f0:3e:65:06:a3:6d:fd:04:c8:f6:
                    82:13:1b:5c:8f:6f:58:ca:ee:aa:21:5b:a0:bc:7b:
                    01:2e:e1:02:12:8c:e6:62:50:8e:8c:3d:5b:8b:9b:
                    cd:10:ae:29:0a:85:d6:9d:30:6e:ab:da:a3:43:d7:
                    34:bc:dc:0f:bd:c9:67:21:f0:6e:90:a9:ea:3a:41:
                    fa:52:9a:69:96:17:ea:c0:de:43:f7:7d:0d:67:5c:
                    c4:cd:4b:a0:17:89:17:0d:ef:d2:06:50:53:f5:8a:
                    5a:42:68:98:76:ea:13:ae:f2:5a:f8:a0:3e:cb:33:
                    01:3d:63:11:70:9a:e0:bf:f3:13:3d:ce:57:b7:5f:
                    32:67:6d:ae:03:35:ee:1d:e9:c7:4a:bb:03:35:aa:
                    89:1e:d2:5b:1e:d0:aa:db:a5:76:b5:62:2b:14:1b:
                    3a:b0:3e:89:58:ae:30:f7:e4:ea:49:93:67:ee:8d:
                    13:d0:1a:19:e2:ae:51:24:1b:a8:4c:03:2b:06:ae:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:AD:B1:F2:24:49:55:54:BE:41:94:87:30:73:0D:E8:EE:68:50
            X509v3 Authority Key Identifier:
                keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:88:d9:1e:5f:3c:ec:4c:d3:3c:42:73:56:8c:e9:1f:ed:
         9a:c1:94:2b:e1:b7:56:3c:ea:cb:00:e3:3b:4a:60:d4:ff:45:
         99:3d:ac:d5:f5:07:50:a8:aa:1b:4e:fd:bf:17:0d:03:c7:f7:
         10:a8:65:91:ba:c9:3b:0d:f5:4c:b1:a9:7d:b8:98:a5:e2:ea:
         b9:c8:6b:38:77:00:c0:8d:16:63:01:fc:f8:27:56:64:d0:62:
         89:88:ef:12:c3:15:58:2d:0d:b0:52:5c:d9:99:54:b5:22:33:
         f8:c2:d2:db:e2:8a:8f:98:fa:62:eb:7c:1c:36:a3:ec:0e:ec:
         da:16:a8:1f:02:40:5c:51:b9:0e:36:ae:47:44:f7:3e:f0:83:
         17:6a:01:97:49:3d:fa:10:23:cc:4b:f4:6a:a1:af:14:b9:69:
         9c:48:7d:bc:23:3d:9d:92:15:97:ae:f7:76:00:5e:01:54:b6:
         2a:89:f3:3c:00:1a:49:86:fa:83:39:31:cf:c4:49:86:a5:0a:
         e5:4f:08:06:26:c4:19:2d:87:72:f7:f6:39:1a:19:c5:af:4a:
         4e:fb:c4:44:76:da:92:8d:e9:37:e1:96:bf:f2:d7:e8:6d:86:
         6f:99:b1:14:a3:64:b5:e0:14:0e:16:db:d2:c3:1f:f0:dc:38:
         09:fb:4d:c3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTyCg0loGwG9hQXr9RuBaXzKFmxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1
NUVBMEFBNjAeFw0yNjA1MTMwMDQ4NDZaFw0yNjA1MTQwMzU3NDZaMDMxMTAvBgNV
BAMTKDQ1QTFBREIxRjIyNDQ5NTU1NEJFNDE5NDg3MzA3MzBERThFRTY4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDo1cZgHJvzU+OqTJEZvHcMHU
Mp7QPmkvQHTCPEtLZiT57Q4zn/+H03WepWFycqDJ+Bn+lZ0MgWUkSqvOw04P8D5l
BqNt/QTI9oITG1yPb1jK7qohW6C8ewEu4QISjOZiUI6MPVuLm80QrikKhdadMG6r
2qND1zS83A+9yWch8G6Qqeo6QfpSmmmWF+rA3kP3fQ1nXMTNS6AXiRcN79IGUFP1
ilpCaJh26hOu8lr4oD7LMwE9YxFwmuC/8xM9zle3XzJnba4DNe4d6cdKuwM1qoke
0lse0KrbpXa1YisUGzqwPolYrjD35OpJk2fujRPQGhnirlEkG6hMAysGrkn7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQURaGtsfIkSVVUvkGUhzBzDejuaFAwHwYDVR0j
BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4
QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDQ2MDgxODgxMjYxOTk4MTUvMC8yNjI3QTU1NkQzN0JG
MzY5NkVGNUVBOUIwRkYyOEE2MTU1RUEwQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc66I2R5fPOxM
0zxCc1aM6R/tmsGUK+G3VjzqywDjO0pg1P9FmT2s1fUHUKiqG079vxcNA8f3EKhl
kbrJOw31TLGpfbiYpeLquchrOHcAwI0WYwH8+CdWZNBiiYjvEsMVWC0NsFJc2ZlU
tSIz+MLS2+KKj5j6Yut8HDaj7A7s2haoHwJAXFG5DjauR0T3PvCDF2oBl0k9+hAj
zEv0aqGvFLlpnEh9vCM9nZIVl673dgBeAVS2KonzPAAaSYb6gzkxz8RJhqUK5U8I
BibEGS2Hcvf2ORoZxa9KTvvERHbako3pN+GWv/LX6G2Gb5mxFKNkteAUDhbb0sMf
8Nw4CftNww==
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:40 2026 by rpki-client