Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File:                     9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier:          qP/Fnd26uNqG9mGyoTyVdyJ+A807nsywMERRs4DsJtE=
Subject key identifier:   A8:B4:F4:9E:76:11:7B:58:60:48:6E:B7:99:20:AE:3A:14:68:74:E7
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer:       /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial:       5A003F736290971B3D04E502A48CEDC8B7790EE7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number:          71
Signing time:             Mon 13 Apr 2026 00:04:17 +0000
Manifest this update:     Sun 12 Apr 2026 23:59:17 +0000
Manifest next update:     Tue 14 Apr 2026 02:02:17 +0000
Files and hashes:         1: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
                          2: 3230332e38362e382e302f32312d3231203d3e20313334373734.roa (hash: A144V149IKn6Qi4/x1M+8pUQxQS7O0ZGJx1jG+EHdHk=)
                          3: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: 3eNH1e81CM3T85NHA5TrlYLEwpniIKPUEW6jeTz09Q4=)
                          4: 3230332e38362e32342e302f32312d3231203d3e20313334373734.roa (hash: Gx0RF4MR/MTf1oA626SK7F8XMwdk+bgKPzRfU9BS5w0=)
                          5: 3231312e3135342e3132382e302f32312d3231203d3e20313334373734.roa (hash: LtEKhx6SrMTuU+BHgQuF5pgXy7i9/kGQm1n3exdPLbc=)
                          6: 3231312e3135342e3134342e302f32312d3231203d3e20313334373734.roa (hash: b00SGrqNCrSgOMSqMzZMU24OV2/fsLAHoVpDiQIJ4No=)
                          7: 3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa (hash: v8/BtEjw5U99UDjVrIZbkxjssWK2itEHBVjELvk8Z6Y=)
                          8: 3232302e3233312e3136302e302f31392d3139203d3e20313334373734.roa (hash: F0++/gnpODO93cYKFA0Ho+k/V2Io+T3tARmtdXeIkp4=)
                          9: 3231312e3135342e3133362e302f32312d3231203d3e20313334373734.roa (hash: OgdyQ/JS8xXM/RF+AvHWqKuVyR9gZ3jtQSciVUtvCjU=)
                          10: 3232302e3233312e3132382e302f31392d3139203d3e20313334373734.roa (hash: KB4kEp+hbkXe+MaaY+P4anNDYi18HHg4smAZf4IaeH8=)
                          11: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
                          12: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
                          13: 3232302e3233312e3139322e302f31392d3139203d3e20313334373734.roa (hash: l8wLZP9XNh0NTjXqX+FDVXEdmYTncKNZvcGwf4xorA8=)
                          14: 3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa (hash: byAn39COUxaC7Cs5bPgXOGF7jH2c/8jROlnudnhtFIE=)
                          15: 3230332e38362e31362e302f32312d3231203d3e20313334373734.roa (hash: hBn9HwND7ivXhR1g5I22n8zaouOC7UhUVQgsZUZehuc=)
                          16: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
                          17: 3230332e38362e302e302f32312d3231203d3e20313334373734.roa (hash: 17szcJSTyT4O6wcgo8uI2gBQb3vjkv4WVEluy+xPuUc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:00:3f:73:62:90:97:1b:3d:04:e5:02:a4:8c:ed:c8:b7:79:0e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
        Validity
            Not Before: Apr 12 23:59:17 2026 GMT
            Not After : Apr 14 02:02:17 2026 GMT
        Subject: CN=A8B4F49E76117B5860486EB79920AE3A146874E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:25:12:70:8c:1a:d0:08:e7:c0:33:72:35:
                    f6:5b:72:52:6e:de:04:36:a7:46:a8:cb:66:22:98:
                    3f:e8:e5:2b:15:50:97:4b:80:f9:3e:69:20:8b:63:
                    62:82:ba:0b:ef:06:b8:25:b0:51:e1:5a:54:63:05:
                    8c:c4:9e:cc:59:a9:04:ff:f6:95:a8:77:0a:f5:0a:
                    d3:36:f0:65:9a:2d:8c:df:18:5e:58:5f:99:e1:db:
                    3d:61:95:84:77:4d:e3:21:4e:49:f2:a9:37:1d:9a:
                    a9:75:99:55:eb:46:e1:40:28:95:d5:f3:88:2f:1e:
                    23:95:a3:6d:78:7f:42:0d:a8:65:58:8e:3c:a6:61:
                    42:97:5f:c6:6d:5c:48:ea:59:4f:df:04:45:62:6c:
                    ca:a7:9c:b8:24:e8:21:b3:86:03:02:c8:3c:33:0a:
                    b5:23:4c:dd:d8:81:c2:e9:57:8c:88:3a:25:86:12:
                    0c:38:12:05:a9:b0:34:49:b3:c4:10:d0:4d:00:9a:
                    4b:6a:6b:2b:af:06:f5:eb:b4:d3:27:97:1a:40:22:
                    9a:fe:74:a3:76:c9:a9:1a:cf:3c:71:43:aa:5a:86:
                    c9:dc:95:84:3e:26:2d:47:be:b8:a3:80:65:44:61:
                    bf:c4:78:d6:28:7b:a3:20:71:ed:2c:ef:bd:2c:4a:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:F4:9E:76:11:7B:58:60:48:6E:B7:99:20:AE:3A:14:68:74:E7
            X509v3 Authority Key Identifier:
                keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:0c:af:e5:98:01:54:59:db:a3:ce:76:a1:92:9a:97:fc:
         14:12:3a:42:fe:e3:ab:bf:fe:f8:22:a5:f1:a6:ab:f2:96:b3:
         f1:02:fe:11:7a:c1:d1:9b:1f:3d:bb:3d:aa:0f:61:99:03:81:
         6d:89:3b:97:15:d8:2a:a8:05:10:c0:52:11:1c:88:99:fc:ea:
         5b:94:8e:9e:73:d4:05:97:3a:7b:da:81:15:27:65:c5:e9:08:
         65:2b:a4:86:dd:a5:28:97:f3:7f:54:83:f3:ec:7b:de:3f:37:
         56:92:53:2c:8f:a0:28:ae:9e:94:d6:42:72:8d:15:14:5e:5b:
         b1:de:a3:bb:b0:c0:10:3a:51:4c:1e:d2:42:0f:6a:cf:c5:50:
         46:05:8e:15:ec:30:e9:5b:93:36:c8:f8:88:d2:55:33:fb:01:
         38:41:12:53:47:1b:fb:3f:6c:56:e9:57:63:35:61:de:20:23:
         aa:d0:1d:a6:c4:8f:d2:61:cc:88:e0:74:24:ed:18:7d:e9:c6:
         eb:78:fb:41:30:f1:e8:17:12:67:9e:7c:91:08:9f:bf:ef:b3:
         a5:bf:d5:e0:eb:8d:3c:23:b7:5b:d4:16:8c:96:7f:3b:67:87:
         96:4c:f6:bf:1f:10:e8:ae:83:4e:e6:c1:a2:80:4f:96:6a:5d:
         89:0c:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:58:13 2026 by rpki-client