Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          fNWk6s6t1wi8tiGTMYKDx1axWgIG2iCCJcMPHLY82BY=
Subject key identifier:   EB:15:DC:A0:07:FD:52:1B:E0:6B:12:A0:76:91:FC:45:7A:89:33:8B
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       3CE295A04FA5A6B3EB420C9AA80101304F852258
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          47
Signing time:             Thu 12 Mar 2026 05:23:39 +0000
Manifest this update:     Thu 12 Mar 2026 05:18:39 +0000
Manifest next update:     Fri 13 Mar 2026 05:46:39 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          2: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          4: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          6: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          7: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          8: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: aYBkWeiMZQDJf2BugrNdAnA1C/ji1dZDUJYAurCd+30=)
                          9: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          10: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 05:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e2:95:a0:4f:a5:a6:b3:eb:42:0c:9a:a8:01:01:30:4f:85:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Mar 12 05:18:39 2026 GMT
            Not After : Mar 13 05:46:39 2026 GMT
        Subject: CN=EB15DCA007FD521BE06B12A07691FC457A89338B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:31:eb:79:c5:77:6b:a0:d8:3f:32:2e:a1:
                    b5:e9:68:21:8f:ae:18:f5:5b:83:d8:23:00:f8:71:
                    3a:30:98:3d:6d:94:ff:53:f1:a7:59:4c:fe:4b:45:
                    b8:68:75:16:40:41:16:74:1c:58:29:2b:d5:64:d3:
                    00:be:12:70:49:e5:0e:85:0c:11:ba:51:ea:65:a6:
                    43:ae:53:7f:c7:61:61:85:be:03:32:d1:e3:1e:e3:
                    bd:ba:42:93:2a:f9:f8:0c:77:a2:88:7e:47:11:33:
                    b6:11:b0:4b:f9:9f:46:c5:c8:a4:0b:e2:56:64:70:
                    e1:d1:06:f8:a8:a9:87:2a:42:8f:33:50:40:f0:7f:
                    60:a8:d2:3f:f2:a6:4c:53:9f:dc:05:00:ef:d4:05:
                    7f:cd:03:35:a4:93:08:8e:45:82:5c:b0:21:a6:81:
                    75:95:84:c3:46:3b:78:9e:06:2c:06:90:6a:ed:e7:
                    2a:f3:47:8c:06:cb:00:ac:2e:d7:fc:f3:0e:f2:91:
                    2c:57:c2:69:33:e6:b5:60:91:c2:2f:61:4c:29:b0:
                    3c:31:36:41:a9:5a:5a:28:52:be:01:82:1c:08:25:
                    e0:5e:7f:a4:88:b8:69:23:87:cd:df:c9:26:84:49:
                    f2:d9:fe:9b:37:93:ba:28:32:5c:f0:ea:78:0d:59:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:DC:A0:07:FD:52:1B:E0:6B:12:A0:76:91:FC:45:7A:89:33:8B
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4b:4b:e6:86:dd:5b:7c:58:ad:5b:0e:15:2c:55:1d:9c:fe:
         14:a8:75:6b:9e:93:a2:d1:32:c5:62:8e:1a:ab:66:6c:3c:ef:
         09:8f:7a:b0:1f:8c:78:06:41:e5:0a:55:4e:a7:77:e0:1a:65:
         58:96:6b:f1:b4:72:a8:7c:f4:b3:18:cb:5d:fc:8f:2e:4b:81:
         b6:a3:5e:17:f8:d6:e1:30:1c:99:f7:0b:f6:df:87:d7:95:f2:
         ec:ad:a2:96:f8:40:61:a1:4d:c1:ee:e7:d1:a3:e1:9d:01:56:
         f4:1e:9d:7e:c3:4b:7d:6c:c5:ac:17:f8:b9:0e:34:40:15:97:
         39:ad:0e:c0:63:d6:5b:fa:55:ed:b2:bb:4e:75:5f:45:71:d7:
         2a:46:84:35:57:77:4e:64:8c:7c:0e:d6:52:f7:e4:1c:1d:02:
         eb:4a:54:d9:db:4d:03:4d:0a:06:6d:f2:28:b1:23:73:9b:aa:
         e3:86:3b:94:91:e8:ec:d8:ba:17:54:07:f0:87:3f:d6:1b:c6:
         f9:6e:3d:5f:b6:32:6a:ca:b8:f6:d5:38:c0:1e:4e:a9:29:24:
         2d:55:60:a0:51:b6:4e:a8:5e:bd:1e:df:61:23:34:ee:f3:6f:
         ca:2d:84:fd:13:dc:fc:a6:e5:c9:0e:9a:5e:a9:ce:f6:33:91:
         a7:40:f4:72
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPOKVoE+lprPrQgyaqAEBME+FIlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2
QUMwMkQwNDAeFw0yNjAzMTIwNTE4MzlaFw0yNjAzMTMwNTQ2MzlaMDMxMTAvBgNV
BAMTKEVCMTVEQ0EwMDdGRDUyMUJFMDZCMTJBMDc2OTFGQzQ1N0E4OTMzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqTHrecV3a6DYPzIuobXpaCGP
rhj1W4PYIwD4cTowmD1tlP9T8adZTP5LRbhodRZAQRZ0HFgpK9Vk0wC+EnBJ5Q6F
DBG6UeplpkOuU3/HYWGFvgMy0eMe4726QpMq+fgMd6KIfkcRM7YRsEv5n0bFyKQL
4lZkcOHRBvioqYcqQo8zUEDwf2Co0j/ypkxTn9wFAO/UBX/NAzWkkwiORYJcsCGm
gXWVhMNGO3ieBiwGkGrt5yrzR4wGywCsLtf88w7ykSxXwmkz5rVgkcIvYUwpsDwx
NkGpWlooUr4BghwIJeBef6SIuGkjh83fySaESfLZ/ps3k7ooMlzw6ngNWcehAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6xXcoAf9UhvgaxKgdpH8RXqJM4swHwYDVR0j
BBgwFoAUUKUXGUH3FfrNz53Ub6Z0BGrALQQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njk5NTcxMy8wLzUwQTUxNzE5NDFGNzE1RkFDRENGOURENDZGQTY3
NDA0NkFDMDJEMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2QUMwMkQwNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5OTU3MTMvMC81MEE1MTcxOTQxRjcx
NUZBQ0RDRjlERDQ2RkE2NzQwNDZBQzAyRDA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUtL5obdW3xY
rVsOFSxVHZz+FKh1a56TotEyxWKOGqtmbDzvCY96sB+MeAZB5QpVTqd34BplWJZr
8bRyqHz0sxjLXfyPLkuBtqNeF/jW4TAcmfcL9t+H15Xy7K2ilvhAYaFNwe7n0aPh
nQFW9B6dfsNLfWzFrBf4uQ40QBWXOa0OwGPWW/pV7bK7TnVfRXHXKkaENVd3TmSM
fA7WUvfkHB0C60pU2dtNA00KBm3yKLEjc5uq44Y7lJHo7Ni6F1QH8Ic/1hvG+W49
X7Yyasq49tU4wB5OqSkkLVVgoFG2TqhevR7fYSM07vNvyi2E/RPc/KblyQ6aXqnO
9jORp0D0cg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:21:03 2026 by rpki-client