Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
File:                     056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft (raw, json)
Hash identifier:          eG2F1iULwclm7QOGv1TOe+91Fysb+D1rcxsxFHC9JhU=
Subject key identifier:   78:02:2D:1E:FC:FE:35:6F:5E:93:96:23:C9:85:C1:93:06:5C:82:D2
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       7F8F60C8C6A5DB33DB6301DA13642134F2501BA4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
Manifest number:          89
Signing time:             Mon 27 Apr 2026 18:33:50 +0000
Manifest this update:     Mon 27 Apr 2026 18:28:50 +0000
Manifest next update:     Tue 28 Apr 2026 21:45:50 +0000
Files and hashes:         1: 3131392e33382e3230382e302f32302d3234203d3e203337393633.roa (hash: 1aHESw/nOTcL9zkX8b/2Way4ZXH0rcVYJtBS9uwyBGQ=)
                          2: 323430313a326530303a3a2f33322d3438203d3e203337393633.roa (hash: /RwznV6T7TO4h0JJgAYPjZsX2fs8UqUQOFdkYchCtjo=)
                          3: 3132312e302e31362e302f32302d3234203d3e203337393633.roa (hash: +x/s0mRPr+VdXGDatwbKQtJ2PVIuzBlQdB7rnXp3y/o=)
                          4: 34352e3131322e3231362e302f32322d3234203d3e203337393633.roa (hash: 69IQrUPR3CxMCzv+VhlwIaldkkWWwAXv5x3ylXbpgh8=)
                          5: 34352e3131322e3230382e302f32322d3234203d3e203337393633.roa (hash: F831a+KKy9dtfnyP0ZQtRhGL7dpZz0ZWB2jMOP9pGjQ=)
                          6: 3230332e3131392e3132382e302f31372d3234203d3e203337393633.roa (hash: 4dPiVEIWMwNnjDFVe+7N27F9rWHSYbVtQLZRetNGi0o=)
                          7: 34352e3131322e3232302e302f32322d3234203d3e203337393633.roa (hash: O50RoXkWuwqIp3tU4cqtQBbuC+H8D0RovNcoO+GmWt4=)
                          8: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl (hash: DnGZVMjywt+JAOVLgMVQLasxGzgF9a/Y6U7gJ2HBJBY=)
                          9: 3130332e3231362e3130382e302f32322d3234203d3e203337393633.roa (hash: PVj8AKXZGpqgnyXN3N+0GWqD3qDlP6MOzJ8PFhiOdb4=)
                          10: 3135372e3131392e3234302e302f32322d3234203d3e203337393633.roa (hash: cR1QC3KffhOvNISYzseljtU/thjp7UdYL89Ej+QpRLg=)
                          11: 34332e3233302e33322e302f32322d3234203d3e203337393633.roa (hash: GyLL7fSBScqfTXcCR4SVo8rLkBgXu9tEDOUbiqv1bGU=)
                          12: 35392e38322e3133362e302f32312d3234203d3e203337393633.roa (hash: nvrBbCBZxiKHH4/w06YQmWfwNEM5VV1VM8cMrZ9eZm4=)
                          13: 35392e38322e3133362e302f32312d3234203d3e203435313032.roa (hash: IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=)
                          14: 34332e3235302e31322e302f32322d3234203d3e203337393633.roa (hash: Axcsdv7wuYSOx59KjF/tPBAkwJMdYEqYj5y+PZH9YcA=)
                          15: 34352e3131322e3231322e302f32322d3234203d3e203337393633.roa (hash: +HN/NfBruCrgd3/LLisaUcAGAPcs8E/rP9uQc/v+RME=)
                          16: 3131302e37352e3139322e302f31392d3234203d3e203337393633.roa (hash: L9vKjxmTLgLvbIwQKj/ZG9VHpS0mWhg61joj+cGcGvs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 21:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:60:c8:c6:a5:db:33:db:63:01:da:13:64:21:34:f2:50:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Apr 27 18:28:50 2026 GMT
            Not After : Apr 28 21:45:50 2026 GMT
        Subject: CN=78022D1EFCFE356F5E939623C985C193065C82D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:33:a3:8f:b2:6f:73:d8:73:18:bc:08:c7:
                    31:99:70:13:56:2b:46:63:9e:5b:46:06:98:ba:1d:
                    a3:fe:4e:26:97:b6:a0:1e:5d:4c:3c:b4:ba:68:58:
                    21:d6:10:82:c5:bd:ac:ea:82:8e:3e:b6:f5:f6:cb:
                    9a:90:95:6b:5f:7e:da:7e:2f:59:7e:44:47:9c:74:
                    54:17:68:a1:19:d0:b1:88:27:e0:25:ab:0d:bd:b8:
                    2e:5f:5b:37:7a:ec:23:82:e6:17:9d:5a:c4:71:fa:
                    86:38:c3:4a:30:df:13:ed:36:40:85:ff:17:fa:a4:
                    7b:d5:af:5a:7b:6a:48:ac:04:d1:47:b9:1e:32:be:
                    19:9f:af:b8:bb:4e:17:81:c5:c7:d2:fe:a9:11:3d:
                    bd:7f:58:ff:e3:bc:b7:e2:b1:19:a1:df:e6:de:68:
                    4f:16:11:2e:80:3e:20:a7:e9:f4:ec:49:53:bd:a5:
                    8c:f4:97:ac:90:74:7f:6e:69:4c:11:e9:41:4a:e4:
                    ec:c8:fc:0f:d2:18:33:5a:dd:ef:13:63:7c:a6:8f:
                    bd:4c:79:d5:f7:ac:6d:eb:15:62:66:9c:83:89:e0:
                    39:82:8c:7f:b9:34:22:87:66:e2:8e:13:df:63:fc:
                    ab:26:02:30:10:4d:04:39:91:b6:22:b5:9e:eb:f0:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:2D:1E:FC:FE:35:6F:5E:93:96:23:C9:85:C1:93:06:5C:82:D2
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:e8:6a:32:2d:ac:89:29:b6:96:90:03:94:ed:75:46:c2:
         b4:de:c3:3e:e2:a3:75:df:de:84:2f:af:02:1d:6d:a6:18:19:
         1a:2a:f0:b0:22:22:4c:34:fc:49:d7:fe:6e:fd:5f:fb:c5:6b:
         48:76:32:11:70:d2:31:ac:33:a0:6f:3c:54:9f:8f:b2:90:8f:
         91:79:f5:5f:55:18:96:61:57:37:d9:6c:f5:9d:a9:fc:da:35:
         3e:3e:47:63:45:f6:51:f4:b0:e3:ad:83:bc:d6:ba:f1:d8:11:
         2b:d1:e8:d7:cb:85:d1:14:3a:4f:76:ca:6c:30:56:f6:22:2a:
         c4:20:0f:72:6e:c8:52:4b:57:92:58:98:81:9e:51:00:87:13:
         4d:4d:00:ca:ee:8d:e0:88:06:0a:3d:5a:c0:c2:53:5d:7c:9d:
         db:b6:05:05:1d:a8:7b:cd:ec:11:74:03:b8:a4:17:45:8b:23:
         be:97:9d:c5:fd:5c:94:20:bb:40:aa:a6:c0:6e:f3:6a:5b:a9:
         81:05:63:2e:ba:7b:97:32:01:bb:7a:d5:a7:a9:2b:1c:f9:d0:
         94:33:84:c8:b8:e6:a9:1d:41:2b:f8:62:4e:84:cf:7f:6b:63:
         21:61:cc:2b:34:4f:09:fe:87:f7:c3:a8:ed:ce:75:e0:fd:24:
         0b:10:2b:dc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUf49gyMal2zPbYwHaE2QhNPJQG6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD
MENGMTU3RjAeFw0yNjA0MjcxODI4NTBaFw0yNjA0MjgyMTQ1NTBaMDMxMTAvBgNV
BAMTKDc4MDIyRDFFRkNGRTM1NkY1RTkzOTYyM0M5ODVDMTkzMDY1QzgyRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9jOjj7Jvc9hzGLwIxzGZcBNW
K0ZjnltGBpi6HaP+TiaXtqAeXUw8tLpoWCHWEILFvazqgo4+tvX2y5qQlWtfftp+
L1l+REecdFQXaKEZ0LGIJ+Alqw29uC5fWzd67COC5hedWsRx+oY4w0ow3xPtNkCF
/xf6pHvVr1p7akisBNFHuR4yvhmfr7i7TheBxcfS/qkRPb1/WP/jvLfisRmh3+be
aE8WES6APiCn6fTsSVO9pYz0l6yQdH9uaUwR6UFK5OzI/A/SGDNa3e8TY3ymj71M
edX3rG3rFWJmnIOJ4DmCjH+5NCKHZuKOE99j/KsmAjAQTQQ5kbYitZ7r8BzfAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUeAItHvz+NW9ek5YjyYXBkwZcgtIwHwYDVR0j
BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw
RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgzMzcxNTUvMC8wNTZGN0Y5RTAzNTg3
RERGRUM2QTA0OUVBMEYyMEZBMUMwQ0YxNTdGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgvoajItrIkp
tpaQA5TtdUbCtN7DPuKjdd/ehC+vAh1tphgZGirwsCIiTDT8Sdf+bv1f+8VrSHYy
EXDSMawzoG88VJ+PspCPkXn1X1UYlmFXN9ls9Z2p/No1Pj5HY0X2UfSw462DvNa6
8dgRK9Ho18uF0RQ6T3bKbDBW9iIqxCAPcm7IUktXkliYgZ5RAIcTTU0Ayu6N4IgG
Cj1awMJTXXyd27YFBR2oe83sEXQDuKQXRYsjvpedxf1clCC7QKqmwG7zalupgQVj
Lrp7lzIBu3rVp6krHPnQlDOEyLjmqR1BK/hiToTPf2tjIWHMKzRPCf6H98Oo7c51
4P0kCxAr3A==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:27 2026 by rpki-client