Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
File:                     056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft (raw, json)
Hash identifier:          BGHNFCskb1i17cGbyulgcTX4vRpA4ONnUMpA1P6fnRg=
Subject key identifier:   F5:0C:87:F4:3D:D6:D1:64:59:64:FD:EC:FD:9C:68:F9:2A:8C:F6:3F
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       09402A4AD63E2D5E263F96B1DF06EDF58346EE6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
Manifest number:          49
Signing time:             Thu 12 Mar 2026 15:48:39 +0000
Manifest this update:     Thu 12 Mar 2026 15:43:39 +0000
Manifest next update:     Fri 13 Mar 2026 18:20:39 +0000
Files and hashes:         1: 3132312e302e31362e302f32302d3234203d3e203337393633.roa (hash: +x/s0mRPr+VdXGDatwbKQtJ2PVIuzBlQdB7rnXp3y/o=)
                          2: 35392e38322e3133362e302f32312d3234203d3e203337393633.roa (hash: nvrBbCBZxiKHH4/w06YQmWfwNEM5VV1VM8cMrZ9eZm4=)
                          3: 34352e3131322e3232302e302f32322d3234203d3e203337393633.roa (hash: O50RoXkWuwqIp3tU4cqtQBbuC+H8D0RovNcoO+GmWt4=)
                          4: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl (hash: VIboIcWwACMyxhdRjS2CkH8NJmRNp5rOdEmq6ZMS/40=)
                          5: 3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa (hash: cR1QC3KffhOvNISYzseljtU/thjp7UdYL89Ej+QpRLg=)
                          6: 34332e3235302e31322e302f32322d3234203d3e203337393633.roa (hash: Axcsdv7wuYSOx59KjF/tPBAkwJMdYEqYj5y+PZH9YcA=)
                          7: 323430313a326530303a3a2f33322d3438203d3e203337393633.roa (hash: /RwznV6T7TO4h0JJgAYPjZsX2fs8UqUQOFdkYchCtjo=)
                          8: 3131302e37352e3139322e302f31392d3234203d3e203337393633.roa (hash: L9vKjxmTLgLvbIwQKj/ZG9VHpS0mWhg61joj+cGcGvs=)
                          9: 3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa (hash: PVj8AKXZGpqgnyXN3N+0GWqD3qDlP6MOzJ8PFhiOdb4=)
                          10: 35392e38322e3133362e302f32312d3234203d3e203435313032.roa (hash: IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=)
                          11: 3131392e33382e3230382e302f32302d3234203d3e203337393633.roa (hash: 1aHESw/nOTcL9zkX8b/2Way4ZXH0rcVYJtBS9uwyBGQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:40:2a:4a:d6:3e:2d:5e:26:3f:96:b1:df:06:ed:f5:83:46:ee:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Mar 12 15:43:39 2026 GMT
            Not After : Mar 13 18:20:39 2026 GMT
        Subject: CN=F50C87F43DD6D1645964FDECFD9C68F92A8CF63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:4e:5a:e6:69:56:54:3a:43:1f:a4:09:40:
                    f3:81:48:ad:c7:f8:cf:b5:ee:78:ec:ff:71:fa:ed:
                    85:da:7a:a4:0e:07:32:63:e7:c3:ae:72:a8:07:e8:
                    83:db:58:eb:8b:6a:17:29:44:5f:03:12:64:e2:0a:
                    28:4c:29:6e:8a:dc:f2:00:52:b9:70:b3:90:69:f3:
                    6e:02:13:d0:2b:f8:48:55:68:97:58:d3:34:60:f0:
                    f7:4b:92:f2:7e:72:35:22:eb:e2:5d:9e:df:96:7f:
                    37:c5:e1:b9:4f:f3:e5:60:34:c0:67:5e:a0:84:9d:
                    6b:81:a9:ea:01:79:ed:5a:bf:46:e4:f5:f8:03:b9:
                    bd:45:4d:e8:9b:c0:45:28:c3:1b:3f:d2:4b:b5:21:
                    0c:32:e7:35:88:ef:0d:0c:f1:a3:ac:17:90:a3:0d:
                    c0:a0:c2:13:73:43:f5:33:55:db:a1:14:9d:e7:b7:
                    25:a1:76:e6:4f:cc:43:d1:f6:19:8d:5b:89:78:cd:
                    0a:e6:ff:d5:b0:cf:da:76:a2:7f:f1:07:c7:ed:ca:
                    65:e6:f7:ac:14:c4:a9:ea:3e:88:e6:4d:a4:fb:92:
                    ad:e9:da:47:69:91:7c:7c:91:5c:19:fd:9e:88:53:
                    9d:ce:a4:59:7b:5e:2c:0a:89:d7:32:4d:d0:da:f2:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:87:F4:3D:D6:D1:64:59:64:FD:EC:FD:9C:68:F9:2A:8C:F6:3F
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:37:23:d9:50:57:d9:e3:af:09:38:3f:03:c6:1e:0c:7f:
         2c:ae:a0:37:15:54:1e:3f:13:13:1f:dd:1b:e5:4d:b8:f1:60:
         e3:4a:f3:5e:24:ec:ec:33:20:7e:21:b7:ed:2c:8c:1d:9b:f7:
         64:fa:9e:ed:26:f1:27:d9:50:e0:d4:15:8c:b7:c9:b6:a7:c9:
         5b:c0:f6:73:79:da:34:3b:82:bf:02:4a:f7:ed:2f:fb:1c:b8:
         f0:0e:9b:26:95:25:3a:0c:47:a1:58:00:e0:b9:8c:51:7a:b9:
         37:ad:a7:c5:11:c7:56:e2:bb:42:0d:2a:8d:7a:a8:33:cb:1a:
         0b:ff:a7:20:6a:49:59:f7:4b:49:1c:2d:3f:1e:fa:b6:75:78:
         61:67:92:2e:d4:73:7f:2c:fc:94:01:f3:d9:de:26:b9:cc:e4:
         c6:3f:42:8c:2a:25:4b:d4:fc:30:29:0c:4e:04:ed:93:58:20:
         5e:a6:aa:fb:63:a6:16:fd:78:9d:cd:d5:df:c2:c2:54:c1:97:
         31:6e:99:86:9b:ff:13:9c:af:7f:ab:60:d4:a9:33:62:30:05:
         76:04:26:fd:af:50:fd:47:d6:48:a7:ca:d5:f6:3b:0c:28:8c:
         f2:fb:27:ca:09:1b:70:29:74:0c:cb:79:30:45:a0:56:b5:24:
         0d:de:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:51 2026 by rpki-client