Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
File:                     B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json)
Hash identifier:          0L0hLPa8iXJhERlIsY97t5r54tdRtI4WacYa/Q0lCN8=
Subject key identifier:   D2:14:66:4E:3E:CE:69:5F:A4:4D:C1:E7:15:91:9F:A1:83:7B:20:9D
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       5509E80D2C87255A32F6F04232C680C12654F4B2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
Manifest number:          0131
Signing time:             Fri 28 Aug 2026 07:28:32 +0000
Manifest this update:     Fri 28 Aug 2026 07:23:32 +0000
Manifest next update:     Mon 31 Aug 2026 10:30:32 +0000
Files and hashes:         1: 34332e3139332e36352e302f32342d3234203d3e203130323036.roa (hash: 6m6sraX2wercPUwc5ViicNvbpVzyOKO2UCe0QtoYQwQ=)
                          2: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=)
                          3: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=)
                          4: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: e+MfIz2Q+5NIqlMDkB7v6KV3QZgDr7Q/iKl1HeZWZbQ=)
                          5: 34332e3139332e36352e302f32342d3234203d3e20313335363239.roa (hash: MwVN3taj66Ka8e6zM6DN8RrX4mecL96iDgmUhMFQ9x0=)
                          6: 34332e3139332e36352e302f32342d3234203d3e20313334373631.roa (hash: vtB4q26rJZnPT0HeksyyQ09N0xJbQpfDhBpPOrG+qEE=)
                          7: 34332e3139332e36352e302f32342d3234203d3e2039383038.roa (hash: V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=)
                          8: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:09:e8:0d:2c:87:25:5a:32:f6:f0:42:32:c6:80:c1:26:54:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Aug 28 07:23:32 2026 GMT
            Not After : Aug 31 10:30:32 2026 GMT
        Subject: CN=D214664E3ECE695FA44DC1E715919FA1837B209D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:af:12:41:e8:5e:03:a1:41:86:ca:59:0f:
                    8e:a3:41:f3:4e:36:81:8d:6b:7b:e0:81:e4:a0:d5:
                    1c:00:1c:c3:96:1c:7f:4b:b4:82:0c:6c:76:3a:6a:
                    0d:37:9d:c5:2e:7f:65:34:6e:ad:28:b5:33:21:df:
                    12:55:b7:ab:9b:37:7c:72:66:70:ec:d8:75:8d:86:
                    ee:39:89:ef:3c:c1:f4:19:43:a0:6a:87:c6:3a:06:
                    1a:cf:6c:39:a6:80:30:71:13:34:ab:c9:ef:e7:a9:
                    ec:ae:05:e9:39:45:4b:ae:35:d1:10:80:c4:54:e6:
                    b9:ce:ad:53:ee:1f:e1:af:7f:75:5e:82:a6:e7:90:
                    31:fa:57:f6:f9:0d:6d:98:34:c5:81:f2:0a:a6:af:
                    4b:f7:89:46:70:a3:c9:cd:21:6a:32:f8:2c:b7:86:
                    ab:4d:57:21:b4:94:0a:87:6c:0b:6b:11:a4:aa:83:
                    c9:23:04:36:e5:c8:b5:25:ad:be:1d:e7:ee:7b:70:
                    fe:45:30:e8:95:ba:42:48:ab:0a:43:55:01:6c:cb:
                    95:90:36:58:b0:66:58:5a:48:eb:92:50:0b:55:16:
                    df:dc:81:55:61:87:b7:d1:5d:c4:4b:5e:70:da:1c:
                    ff:8b:f3:ea:ac:15:38:c1:be:78:ba:49:8c:c0:4c:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:66:4E:3E:CE:69:5F:A4:4D:C1:E7:15:91:9F:A1:83:7B:20:9D
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:6c:5a:f3:a2:90:7f:ff:49:97:14:51:03:e4:70:e0:ae:47:
         33:ae:24:21:7a:9d:06:91:ca:15:21:95:02:82:ba:f7:f5:d1:
         e4:02:61:27:2e:11:f3:bb:32:9b:6e:87:a1:ab:e9:34:49:bc:
         3d:16:ad:8b:5e:07:62:0f:2f:6b:e3:a4:20:23:fe:e9:29:bd:
         40:ab:48:eb:a9:2a:85:7f:f7:f2:80:11:43:cf:32:0b:1a:95:
         76:9c:a3:82:ba:8c:16:d2:a3:3f:5c:08:5f:54:65:c1:f6:62:
         4a:17:ec:45:0e:29:4d:ba:78:5c:cb:5f:37:e3:55:31:56:13:
         61:8f:d2:ae:b9:c9:9d:09:60:ea:4b:c1:f7:9e:df:12:68:f2:
         81:be:34:9f:49:29:20:39:b7:0d:d6:05:9d:01:f1:f8:63:0a:
         a9:e1:0d:b2:f3:31:a1:0c:3f:24:4c:3f:c5:a9:e4:d5:cf:f9:
         91:a3:59:93:c0:1b:aa:2e:f2:95:77:a9:f5:57:f2:77:b2:04:
         9f:eb:7b:ad:45:e0:c3:4e:10:e9:a4:14:87:d8:5e:bc:b0:4c:
         36:05:b9:b2:1e:9b:22:4e:42:9e:1e:e3:b2:11:70:e5:fb:56:
         ec:50:2c:3b:d1:eb:3f:f1:19:0c:57:18:f4:28:2f:50:40:c0:
         6e:9d:59:1c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVQnoDSyHJVoy9vBCMsaAwSZU9LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0
ODVDOUNERjAeFw0yNjA4MjgwNzIzMzJaFw0yNjA4MzExMDMwMzJaMDMxMTAvBgNV
BAMTKEQyMTQ2NjRFM0VDRTY5NUZBNDREQzFFNzE1OTE5RkExODM3QjIwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRK8SQeheA6FBhspZD46jQfNO
NoGNa3vggeSg1RwAHMOWHH9LtIIMbHY6ag03ncUuf2U0bq0otTMh3xJVt6ubN3xy
ZnDs2HWNhu45ie88wfQZQ6Bqh8Y6BhrPbDmmgDBxEzSrye/nqeyuBek5RUuuNdEQ
gMRU5rnOrVPuH+Gvf3VegqbnkDH6V/b5DW2YNMWB8gqmr0v3iUZwo8nNIWoy+Cy3
hqtNVyG0lAqHbAtrEaSqg8kjBDblyLUlrb4d5+57cP5FMOiVukJIqwpDVQFsy5WQ
NliwZlhaSOuSUAtVFt/cgVVhh7fRXcRLXnDaHP+L8+qsFTjBvni6SYzATOG1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU0hRmTj7OaV+kTcHnFZGfoYN7IJ0wHwYDVR0j
BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky
NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF
QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5mxa86KQf/9J
lxRRA+Rw4K5HM64kIXqdBpHKFSGVAoK69/XR5AJhJy4R87sym26HoavpNEm8PRat
i14HYg8va+OkICP+6Sm9QKtI66kqhX/38oARQ88yCxqVdpyjgrqMFtKjP1wIX1Rl
wfZiShfsRQ4pTbp4XMtfN+NVMVYTYY/SrrnJnQlg6kvB957fEmjygb40n0kpIDm3
DdYFnQHx+GMKqeENsvMxoQw/JEw/xank1c/5kaNZk8Abqi7ylXep9Vfyd7IEn+t7
rUXgw04Q6aQUh9hevLBMNgW5sh6bIk5Cnh7jshFw5ftW7FAsO9HrP/EZDFcY9Cgv
UEDAbp1ZHA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:32 2026 by rpki-client