Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
File:                     57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json)
Hash identifier:          oY+DflsgZgxIQtIU6FdpUl60HniPdYVXoPmqo4a767c=
Subject key identifier:   D8:31:B0:19:F6:AB:0E:F8:DF:41:17:FA:2D:35:74:20:BB:6E:C9:43
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Certificate issuer:       /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial:       4BD64163EF63845CF54CDBCE605418322FF69276
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
Manifest number:          012A
Signing time:             Fri 28 Aug 2026 06:48:16 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:16 +0000
Manifest next update:     Mon 31 Aug 2026 11:41:16 +0000
Files and hashes:         1: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=)
                          2: 323430313a376530303a3a2f33362d3336203d3e203338333535.roa (hash: aKmhFp9xXN13SrJmpZLgk6u8O9Vm0OBVE6ERJGr76Bc=)
                          3: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: swaMLVQb5INcso484txMJnyfGnvad6DQ3hu+0xGwEWg=)
                          4: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=)
                          5: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=)
                          6: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=)
                          7: 323430313a376530303a3a2f33322d3332203d3e203338333535.roa (hash: ehMU3S2JCPT5vg3hKKo4ROHo5igNX1sYoyqjVpMh6WA=)
                          8: 3132352e36322e34392e302f32342d3234203d3e20313436373838.roa (hash: LNEhmHCp10qCUFCDAGMIVGvXtcIDgvLqYw5r6nwi1B0=)
                          9: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=)
                          10: 323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa (hash: B4BJlhUus8tyirjIaFKqqMplYcSijSoV1lH0TWBWjNw=)
                          11: 323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa (hash: ZVOiXJmXMUUoqcqPt09Dq1VOfAp9Wv0un73gutc12gs=)
                          12: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=)
                          13: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=)
                          14: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 11:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d6:41:63:ef:63:84:5c:f5:4c:db:ce:60:54:18:32:2f:f6:92:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
        Validity
            Not Before: Aug 28 06:43:16 2026 GMT
            Not After : Aug 31 11:41:16 2026 GMT
        Subject: CN=D831B019F6AB0EF8DF4117FA2D357420BB6EC943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:b0:52:61:22:04:18:7c:47:3a:9f:c5:e6:
                    45:e0:45:29:d5:67:76:f3:09:85:89:41:ba:b9:d7:
                    fc:3b:b0:69:44:56:1b:62:eb:04:71:13:fe:42:be:
                    71:6f:87:ed:44:ac:f4:5f:da:72:08:b3:1c:08:19:
                    18:90:cf:5f:e4:08:b9:f4:20:1a:ab:ba:d5:b4:6f:
                    3d:cb:86:e0:2f:a3:e3:0e:7e:55:19:1a:73:62:c0:
                    9d:23:19:31:00:8e:a7:5e:cc:08:d0:72:b6:e0:16:
                    cc:39:96:25:b7:af:3b:4c:64:e9:79:26:b4:a8:2f:
                    af:cd:d9:78:d3:7f:99:8f:d1:35:0d:47:49:c6:66:
                    15:c8:cd:2d:c3:d3:40:18:89:21:63:1c:52:93:66:
                    c0:dc:f7:5b:5a:e5:66:ac:5d:e9:8a:64:0d:11:55:
                    a4:b2:e9:5a:c1:f7:66:9b:1d:d9:18:1f:24:46:68:
                    ba:07:e5:c1:4e:b1:2e:ba:b9:03:cc:98:97:22:09:
                    c6:80:3b:2f:b5:3a:18:34:79:e6:09:0f:03:a0:8e:
                    9e:7e:94:3d:d3:f0:8f:29:a3:f9:f0:44:89:85:48:
                    12:a9:d2:62:79:fb:84:d3:8f:f7:2d:6e:7a:6a:5d:
                    91:66:e2:07:15:01:09:f1:1e:fc:8b:c3:92:3b:a3:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:B0:19:F6:AB:0E:F8:DF:41:17:FA:2D:35:74:20:BB:6E:C9:43
            X509v3 Authority Key Identifier:
                keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:42:90:0a:c9:6d:67:0d:05:e1:5d:cb:d5:e5:7a:85:1f:
         c8:25:71:02:8d:f0:c5:05:64:ee:f9:5b:a7:8c:55:41:21:80:
         35:57:be:5c:78:e5:7d:17:3f:4c:5e:d5:d7:1a:f8:56:00:5b:
         f4:c3:14:bb:bc:3d:c6:3e:90:eb:06:88:59:23:d6:e8:03:d6:
         9c:45:f7:cd:96:3b:21:c1:1d:d4:ac:35:15:d1:36:c6:d1:c3:
         87:11:ab:1a:73:a3:e1:01:7d:26:95:b0:cb:73:25:92:81:aa:
         ca:be:74:e2:68:9e:91:15:10:8d:8c:04:d0:f9:94:31:98:8d:
         ea:75:e4:dc:ea:99:d8:6f:ce:9a:28:c7:4f:50:b0:34:3d:d3:
         f4:db:29:0a:c7:ce:05:53:59:aa:f4:0d:a9:39:67:86:86:21:
         6f:e9:37:93:20:1f:a3:19:d2:04:05:14:e4:69:98:70:50:80:
         3a:52:c4:a8:20:c0:29:a4:f0:06:5e:b0:9c:2f:58:d5:78:0a:
         01:4b:39:07:c3:1c:62:da:62:0c:43:f6:dc:2b:1d:51:55:7c:
         fa:d0:7d:d4:b6:44:47:dc:f8:13:77:a2:7e:13:83:92:ca:9e:
         6e:8e:ee:b6:67:40:95:1c:87:46:71:34:60:29:2a:59:9e:5f:
         52:32:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:45:20 2026 by rpki-client