Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File:                     4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier:          ME6gGagFvrTNDuFkn2S6WftV9VwbZQcvfte2K0K18wo=
Subject key identifier:   15:46:BF:13:C9:D4:88:07:C9:B0:53:32:D9:2A:C7:61:54:53:A9:BB
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       07142A8EEA9612B6CF1AB829167CD46C0F439022
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number:          40
Signing time:             Fri 06 Mar 2026 18:43:21 +0000
Manifest this update:     Fri 06 Mar 2026 18:38:21 +0000
Manifest next update:     Sat 07 Mar 2026 20:11:21 +0000
Files and hashes:         1: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
                          2: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
                          3: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
                          4: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: GAOWHGR11QPGOPTZ/DILFVdeeRWdXUw9Yj3hb54OraQ=)
                          5: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
                          6: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
                          7: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
                          8: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:14:2a:8e:ea:96:12:b6:cf:1a:b8:29:16:7c:d4:6c:0f:43:90:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Mar  6 18:38:21 2026 GMT
            Not After : Mar  7 20:11:21 2026 GMT
        Subject: CN=1546BF13C9D48807C9B05332D92AC7615453A9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:f0:29:0f:56:69:f3:07:27:5c:4c:9c:35:
                    2f:10:92:42:d4:f6:54:3d:08:94:ec:6f:99:5f:27:
                    c4:27:72:1c:f1:fe:bd:d1:20:6a:91:e2:f5:ab:7f:
                    6a:05:6e:c8:41:a6:d5:f9:a1:76:eb:0f:c3:30:f6:
                    22:f4:0c:bc:bc:57:18:7f:0e:e3:41:e2:2a:4b:50:
                    85:7e:c7:13:3c:05:e7:74:d6:c9:12:9b:23:63:38:
                    9a:58:ab:70:c5:88:44:48:e6:18:72:29:48:c2:78:
                    78:bf:55:93:87:49:7a:ad:7e:ac:58:53:ae:a6:56:
                    77:72:08:0c:f4:17:eb:6e:45:37:bb:98:3d:de:c6:
                    ff:f4:19:3b:df:a7:43:13:f6:82:73:1d:e3:d4:c1:
                    e5:3b:a4:43:25:66:5d:4b:d7:e9:99:dc:cf:87:ad:
                    99:01:83:7b:f2:fb:85:1c:21:ac:18:a1:25:db:86:
                    3c:a5:3f:dc:6f:68:47:d8:52:33:04:4a:84:e1:3b:
                    32:cd:b2:12:ac:50:8c:36:b7:f3:a8:e8:b0:80:ee:
                    09:fb:20:ba:4b:88:56:ca:af:ce:fc:e8:5e:77:c7:
                    85:7d:49:e5:6d:d4:01:4e:f1:68:c6:0e:d6:a9:a3:
                    65:3c:d9:71:04:01:3d:46:f7:15:36:e1:57:0d:a2:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:BF:13:C9:D4:88:07:C9:B0:53:32:D9:2A:C7:61:54:53:A9:BB
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:30:42:0e:35:03:f4:72:93:12:a0:0a:d8:2f:d1:47:06:5c:
         ee:21:1c:32:30:a5:65:59:65:12:16:cd:d8:56:0b:bd:30:0d:
         58:3f:f5:c6:f7:94:1e:9f:79:9f:e7:74:9e:c8:4f:43:a9:12:
         cd:38:8d:c5:5c:f9:9f:45:c8:91:ef:55:82:ee:ea:af:df:33:
         d2:2a:6a:67:01:5c:fb:51:93:65:b9:7e:b7:09:6d:d5:a8:d8:
         3a:48:9e:ef:fa:18:5c:47:90:4f:56:dd:16:14:ec:da:1d:a9:
         c1:0f:03:85:af:a8:e3:c8:b8:3d:b3:88:52:f3:06:06:b1:73:
         53:f5:dd:66:23:4a:3f:db:a8:4d:6d:0c:97:65:98:d0:b4:48:
         8b:84:b7:fa:50:42:05:14:1c:c8:03:0e:66:d1:ff:89:09:9a:
         23:f7:f2:36:46:41:75:6d:35:92:7d:bb:af:4b:d0:68:4b:29:
         01:e5:3e:be:be:b4:c4:b1:3b:3c:e3:0d:42:fc:69:f0:7f:b6:
         8d:20:5f:95:48:ff:4d:51:54:43:fb:08:fc:5b:1a:c8:cc:de:
         4e:7a:df:c8:74:16:c9:d5:21:5b:51:5c:06:bf:da:13:4a:8e:
         f1:de:67:7b:3e:ed:5d:92:10:86:f7:6f:8a:e1:be:21:1c:38:
         3e:e4:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:26 2026 by rpki-client