Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File:                     FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier:          e+CUYGes8zLbxOToHW7vAglwikIJPRilGI4/Do5GVxk=
Subject key identifier:   52:BF:AF:9B:32:DE:A1:BC:EE:39:47:BA:E0:D3:80:3B:CE:12:D8:7F
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       49212FCAB309513ACF24EF01202E3ED7BB9D1573
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number:          5A
Signing time:             Fri 24 Jul 2026 05:45:30 +0000
Manifest this update:     Fri 24 Jul 2026 05:40:30 +0000
Manifest next update:     Sat 25 Jul 2026 08:48:30 +0000
Files and hashes:         1: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
                          2: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
                          3: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
                          4: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
                          5: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
                          6: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
                          7: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
                          8: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
                          9: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
                          10: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
                          11: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
                          12: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
                          13: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
                          14: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
                          15: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
                          16: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: iO0EOprL0cFpgv4Gj6NHpF72KglygBMy2gbOAAw/EW4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:21:2f:ca:b3:09:51:3a:cf:24:ef:01:20:2e:3e:d7:bb:9d:15:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: Jul 24 05:40:30 2026 GMT
            Not After : Jul 25 08:48:30 2026 GMT
        Subject: CN=52BFAF9B32DEA1BCEE3947BAE0D3803BCE12D87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:80:38:a1:28:22:a8:e8:4d:a6:e5:75:02:
                    eb:2f:f3:ff:3d:05:07:4f:d8:86:5a:d2:2d:d2:db:
                    01:f3:92:1f:13:81:d5:17:eb:d8:08:94:e5:c4:75:
                    0f:28:e1:e2:d1:56:dc:7d:9b:0a:45:72:5f:84:70:
                    75:69:fe:5f:4e:82:7d:10:41:30:c5:82:a1:09:71:
                    ca:fc:38:dd:0f:e4:43:e4:a5:c8:20:a3:90:e2:62:
                    18:6e:9e:d9:ac:61:90:03:50:5f:de:b7:a6:cc:11:
                    9e:5d:c1:d1:68:0f:9b:3c:97:c0:12:6c:59:b3:de:
                    08:0d:97:a1:8c:28:2f:09:2b:15:9e:62:c1:2b:33:
                    8d:aa:03:94:62:a7:63:81:ff:30:ee:f2:39:cc:ce:
                    a1:19:fe:19:f5:15:a7:31:20:c6:7d:f4:42:8a:96:
                    d3:a5:82:cc:84:b2:0a:df:8b:ae:0e:a2:87:0b:d3:
                    74:18:03:92:1c:96:d4:36:0e:d8:a7:fa:69:9a:7e:
                    c3:19:f9:d4:c9:4d:8f:a9:e6:f6:64:0c:63:8c:50:
                    0d:94:e1:b2:2f:c7:18:e3:4d:5f:52:c7:b0:43:0c:
                    ab:e4:b3:aa:a1:af:cd:20:b8:61:b6:9b:a2:30:af:
                    d0:f5:ac:e5:8b:96:2b:a3:47:42:f9:a4:1e:66:81:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BF:AF:9B:32:DE:A1:BC:EE:39:47:BA:E0:D3:80:3B:CE:12:D8:7F
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:ae:c5:fb:2e:36:96:38:df:e4:49:69:79:6a:83:df:72:
         c0:f4:85:74:28:ad:ee:e8:49:54:a4:c3:25:01:9c:c6:38:18:
         a8:4a:1a:bb:94:ac:62:8f:20:5d:ce:23:12:5b:c2:96:ca:61:
         77:be:e6:5f:65:99:d2:2e:bb:8a:65:d9:18:ee:ce:63:26:30:
         04:04:ee:e8:7d:c5:fd:7b:b3:50:12:98:1c:a3:6c:63:fe:ab:
         36:d1:35:13:df:12:c2:36:11:04:02:aa:96:21:7c:93:17:07:
         18:af:ab:15:cf:78:17:7c:54:3b:88:fa:d5:65:f2:b7:26:3a:
         9e:e8:d3:29:75:66:05:4a:9c:eb:65:8a:7c:60:1d:c9:2b:8b:
         ae:c8:32:10:ea:da:65:7a:f7:be:ba:fc:b5:71:9f:a9:f3:f4:
         08:b6:c0:88:06:33:44:19:de:55:4d:1c:41:c5:bb:d3:49:74:
         69:14:ad:b3:3d:86:03:e9:62:aa:7f:0c:ac:dd:41:2f:74:12:
         f4:bd:fb:19:e2:8c:67:6d:5b:cd:b6:71:4e:6f:b0:37:4c:fb:
         38:3e:8e:0d:0f:06:c8:fe:9e:57:35:75:15:1a:ea:19:be:e3:
         2c:fa:8a:c5:fa:96:b5:bd:13:d3:ce:57:67:43:42:25:ab:40:
         84:72:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:18 2026 by rpki-client