Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
File:                     A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json)
Hash identifier:          wB89uMZeYNf+HyZHuuyOr3A/rcsZ7dpga7bNezKVx3g=
Subject key identifier:   BA:24:0B:D1:72:82:08:74:F4:2D:5D:C6:BA:E1:D8:91:6F:73:6F:37
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       47ABC595769D595A09C8E75330493F7F1FD8AA4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
Manifest number:          46
Signing time:             Thu 12 Mar 2026 08:48:39 +0000
Manifest this update:     Thu 12 Mar 2026 08:43:39 +0000
Manifest next update:     Fri 13 Mar 2026 10:12:39 +0000
Files and hashes:         1: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: 8R5zpmv4aDJtCWox2B0csSZQwGGFPYLhUyQj81PHsQI=)
                          2: 3132342e31342e312e302f32342d3234203d3e2034383132.roa (hash: XFRJp6zS1ERcSGN1XE2RvWKAzZUpGDHg4WQCg4nt+Og=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 10:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ab:c5:95:76:9d:59:5a:09:c8:e7:53:30:49:3f:7f:1f:d8:aa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Mar 12 08:43:39 2026 GMT
            Not After : Mar 13 10:12:39 2026 GMT
        Subject: CN=BA240BD172820874F42D5DC6BAE1D8916F736F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:d3:d0:f7:c6:b0:f5:3d:1d:3f:ce:60:76:
                    e7:20:b5:0d:5d:0c:6e:a2:68:a7:74:ce:d2:19:2a:
                    d9:c8:00:61:e1:73:a6:25:ad:5a:8b:c5:77:93:0b:
                    f0:51:20:8f:d2:69:31:4a:00:ef:2e:37:43:37:4c:
                    4b:b1:47:c2:a8:53:03:b0:89:ad:db:22:c2:c1:34:
                    1e:c5:32:d1:a6:a0:dc:25:b1:19:21:e9:c4:52:16:
                    82:cc:3c:35:39:64:a8:1f:b6:e1:63:69:db:79:df:
                    f4:41:c7:81:62:26:6a:5a:05:fc:7d:30:29:9b:3e:
                    cc:b1:31:0b:5b:27:c4:f0:01:c4:d6:fd:98:a9:29:
                    61:d1:5a:31:8d:be:92:82:41:65:55:79:64:f8:fa:
                    bd:58:ba:8f:ea:3b:3a:7b:21:e7:02:de:80:ee:26:
                    ed:bb:c4:0f:61:4d:c3:97:c7:19:a2:f3:91:29:59:
                    b3:ea:c1:de:9b:59:cf:4e:e6:52:42:78:61:d5:0b:
                    a4:8f:b5:9e:68:a6:3d:bd:4d:8c:ef:aa:75:c2:4a:
                    e8:bf:15:da:30:f1:c5:eb:2b:56:bf:be:a9:0e:b0:
                    55:fc:3e:b9:b8:57:3c:8b:d2:cd:47:3b:20:ec:ea:
                    65:30:f8:39:43:a6:06:14:65:79:a4:6f:4b:07:64:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:0B:D1:72:82:08:74:F4:2D:5D:C6:BA:E1:D8:91:6F:73:6F:37
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:97:bf:6c:1f:76:ff:28:52:fb:80:b8:df:02:22:eb:3f:5f:
         da:96:68:5a:67:34:c4:1a:7e:0b:ab:c6:f6:b4:b5:42:10:fb:
         07:ce:34:91:16:65:a9:c3:6f:c7:e1:8c:e5:cd:9a:0c:a0:ca:
         c3:92:dd:c7:49:63:d2:5f:a1:3e:05:4a:50:19:45:3c:91:b4:
         b7:32:ac:2c:f5:8f:90:32:6c:8c:6d:16:90:57:71:72:36:62:
         43:35:7b:22:99:c5:70:60:2b:ab:fc:c1:68:a8:c0:ac:4a:28:
         ca:ee:bf:9c:8e:77:bf:4b:71:57:7c:66:4c:34:f5:50:94:cd:
         e7:ac:34:52:22:9c:56:1e:3f:ae:87:b6:c9:e2:01:13:6d:e3:
         a7:5a:99:94:eb:67:40:70:2c:12:74:1d:55:1f:35:b2:c3:48:
         6a:df:51:bf:e2:9e:43:95:4f:3f:76:f9:ef:38:0a:33:79:ef:
         f9:5e:7c:76:ec:de:94:55:b5:89:46:36:b0:16:bf:dc:bd:e0:
         68:6f:4b:f7:6b:a9:2c:7a:06:47:36:75:c4:98:fb:be:fc:d2:
         9c:57:40:8f:19:57:44:be:c7:54:d9:f3:b1:71:59:36:79:3d:
         61:77:8d:40:6d:fd:bd:cd:c5:74:99:08:f9:bc:bc:45:97:90:
         2f:16:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:13 2026 by rpki-client