Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
File:                     5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json)
Hash identifier:          3sAENqGqLYlxIEV4Zi5H4F0Obta5UgBL7CB1ax/xd2w=
Subject key identifier:   75:32:9B:BB:5B:4F:5B:C2:60:EB:6C:F9:0B:D8:3F:CF:00:5E:91:2A
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Certificate issuer:       /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial:       2AD1FCFFAC7A718282D37B107C27DDC3A2F85B78
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
Manifest number:          0129
Signing time:             Fri 28 Aug 2026 06:58:28 +0000
Manifest this update:     Fri 28 Aug 2026 06:53:28 +0000
Manifest next update:     Mon 31 Aug 2026 12:26:28 +0000
Files and hashes:         1: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=)
                          2: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: Ty8/SpXiEEAt44QSb+bPSknZCMgG5JtPzrth2gDABpg=)
                          3: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=)
                          4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 12:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d1:fc:ff:ac:7a:71:82:82:d3:7b:10:7c:27:dd:c3:a2:f8:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
        Validity
            Not Before: Aug 28 06:53:28 2026 GMT
            Not After : Aug 31 12:26:28 2026 GMT
        Subject: CN=75329BBB5B4F5BC260EB6CF90BD83FCF005E912A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:a9:32:e7:fd:ee:7a:62:d8:7e:a9:31:ac:
                    5b:7c:3f:f1:32:75:8d:cf:1b:ad:95:b9:1c:c9:34:
                    7d:e9:a5:e4:bb:e2:64:ae:d3:21:d8:b6:a6:f9:73:
                    d9:c6:15:7f:1d:72:6a:07:67:5f:3c:a7:bc:6d:0f:
                    fd:4b:d9:41:6e:d7:35:3b:30:86:a7:ca:32:7b:7e:
                    9f:ae:90:65:b9:20:c1:55:31:bf:9b:ca:2b:bd:5c:
                    22:0c:d8:fe:23:26:47:39:73:b8:25:84:7e:81:ed:
                    fb:9a:65:41:83:47:fe:ee:c5:73:81:2e:28:8f:67:
                    d2:16:48:a8:85:85:18:80:68:f8:ce:16:23:3d:70:
                    4a:c1:03:6f:db:54:fc:3c:de:3b:e4:0a:70:f0:d7:
                    78:3c:21:d5:9e:e6:dd:c3:05:c6:47:d3:f5:0a:3b:
                    58:20:c0:e7:ac:1f:47:d3:08:20:bd:74:0f:7e:3e:
                    3b:bc:8d:86:4a:ec:a1:6f:5a:fa:36:09:b4:9b:ac:
                    1e:04:14:d3:24:1b:2a:40:ee:a9:49:93:b4:67:d2:
                    e0:7b:15:28:b4:3f:05:0d:5f:cd:b8:1b:f6:46:ee:
                    bc:e3:d6:3f:5f:16:5f:6c:a5:5b:3b:90:8a:15:aa:
                    8a:e9:cd:8a:9e:d9:0e:3e:7e:c7:70:11:e9:c1:77:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:9B:BB:5B:4F:5B:C2:60:EB:6C:F9:0B:D8:3F:CF:00:5E:91:2A
            X509v3 Authority Key Identifier:
                keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:78:c5:49:e9:f8:d5:66:64:47:80:50:89:2a:2f:b9:d8:
         70:f1:de:6f:ce:7c:85:bd:24:09:0a:37:5e:55:9a:03:54:75:
         42:0f:77:83:60:27:c4:64:c9:a1:82:9b:d8:6e:17:92:21:0d:
         19:44:88:89:00:0d:90:4b:f8:be:23:f2:0b:99:06:6e:16:5a:
         10:0d:fd:fc:b0:a2:72:58:aa:25:5d:c1:7b:98:bc:29:79:2e:
         d1:53:3d:66:93:46:77:9c:10:1e:73:b6:9e:83:70:10:1f:df:
         cc:41:ab:cb:fb:68:e3:8b:d5:8d:ba:d4:22:ab:8a:c5:ab:73:
         f7:00:15:bb:2a:fc:3b:a9:ca:33:3f:30:be:27:cf:44:40:e5:
         23:67:0a:c4:b6:98:ce:d2:aa:f1:e0:8b:e3:e0:9f:e8:c8:3b:
         09:e2:b4:cb:c6:37:02:a0:a0:aa:bb:e8:f6:9f:5b:d1:f1:0b:
         98:d8:96:a5:fe:9e:aa:80:c8:fb:02:50:cc:1f:78:cc:1b:a0:
         97:7a:65:2f:36:0b:f9:00:9c:3a:fa:96:1b:02:fa:b7:37:ea:
         e8:74:f9:db:81:ad:82:7f:b0:5a:5e:29:ee:c4:b5:44:1d:f3:
         74:1e:76:db:88:1c:68:0f:5b:f6:21:a9:a0:e2:b2:d7:41:80:
         af:d4:31:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKtH8/6x6cYKC03sQfCfdw6L4W3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy
MzQ0QkE2QzAeFw0yNjA4MjgwNjUzMjhaFw0yNjA4MzExMjI2MjhaMDMxMTAvBgNV
BAMTKDc1MzI5QkJCNUI0RjVCQzI2MEVCNkNGOTBCRDgzRkNGMDA1RTkxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eaky5/3uemLYfqkxrFt8P/Ey
dY3PG62VuRzJNH3ppeS74mSu0yHYtqb5c9nGFX8dcmoHZ188p7xtD/1L2UFu1zU7
MIanyjJ7fp+ukGW5IMFVMb+byiu9XCIM2P4jJkc5c7glhH6B7fuaZUGDR/7uxXOB
LiiPZ9IWSKiFhRiAaPjOFiM9cErBA2/bVPw83jvkCnDw13g8IdWe5t3DBcZH0/UK
O1ggwOesH0fTCCC9dA9+Pju8jYZK7KFvWvo2CbSbrB4EFNMkGypA7qlJk7Rn0uB7
FSi0PwUNX824G/ZG7rzj1j9fFl9spVs7kIoVqorpzYqe2Q4+fsdwEenBd0ZDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdTKbu1tPW8Jg62z5C9g/zwBekSowHwYDVR0j
BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5
MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2
NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhB4xUnp+NVm
ZEeAUIkqL7nYcPHeb858hb0kCQo3XlWaA1R1Qg93g2AnxGTJoYKb2G4XkiENGUSI
iQANkEv4viPyC5kGbhZaEA39/LCicliqJV3Be5i8KXku0VM9ZpNGd5wQHnO2noNw
EB/fzEGry/to44vVjbrUIquKxatz9wAVuyr8O6nKMz8wvifPREDlI2cKxLaYztKq
8eCL4+Cf6Mg7CeK0y8Y3AqCgqrvo9p9b0fELmNiWpf6eqoDI+wJQzB94zBugl3pl
LzYL+QCcOvqWGwL6tzfq6HT524Gtgn+wWl4p7sS1RB3zdB5224gcaA9b9iGpoOKy
10GAr9QxFg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:37 2026 by rpki-client