Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          gUw6EClu1dfYFM7Jp+8iTOKyfnJlUJCdr/toPfmxDQY=
Subject key identifier:   09:91:C7:43:07:B3:C6:C0:E2:5A:63:AE:22:6C:59:E2:42:A5:BB:26
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       7BD7457BB75363737282320002D58D803AFDEABF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          83
Signing time:             Mon 27 Apr 2026 08:48:45 +0000
Manifest this update:     Mon 27 Apr 2026 08:43:45 +0000
Manifest next update:     Tue 28 Apr 2026 12:11:45 +0000
Files and hashes:         1: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          2: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          3: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          4: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: nLmDw/XTV5vNTNQKXz6KMZ3UZ7RfV4RMj+AzJd0GGz8=)
                          5: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          6: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
                          7: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
                          8: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          9: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d7:45:7b:b7:53:63:73:72:82:32:00:02:d5:8d:80:3a:fd:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Apr 27 08:43:45 2026 GMT
            Not After : Apr 28 12:11:45 2026 GMT
        Subject: CN=0991C74307B3C6C0E25A63AE226C59E242A5BB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:a1:cf:b4:5c:f5:68:eb:77:bb:17:19:57:
                    50:30:0e:7c:4d:fa:8f:55:7f:4f:4a:c7:df:88:8e:
                    fe:a6:a8:15:fb:06:90:cc:3f:13:e1:d9:d6:38:c7:
                    91:ba:1e:99:c5:c6:07:e5:b2:75:b6:f1:22:ea:f3:
                    3e:e3:bd:31:22:67:47:da:c5:05:15:93:8b:4c:67:
                    80:22:7d:fa:4d:da:4c:ce:e2:92:71:a6:09:10:5b:
                    fe:2c:55:c9:2d:87:16:46:07:b2:0d:cb:54:d7:c1:
                    e3:e2:dc:2e:9e:4f:a4:31:87:c4:32:81:c3:ae:34:
                    c8:d9:bd:07:ae:88:33:39:95:87:e7:e5:78:22:c7:
                    a0:fe:d0:9e:9b:80:ad:9f:e8:db:85:ae:87:48:b1:
                    21:f6:5b:90:42:6b:73:13:d4:f2:e5:0c:05:80:3f:
                    bf:64:f2:30:bb:6b:a5:1b:12:ae:64:d4:3a:1b:db:
                    7d:c8:5b:92:8b:ba:9f:c8:ce:24:d8:58:36:7d:fb:
                    22:76:65:50:a1:4b:c9:2b:39:b1:0c:03:27:48:bd:
                    dc:23:a8:1b:04:b0:93:44:e6:35:09:8d:23:06:5b:
                    ce:99:d0:83:5c:30:17:d6:42:27:7a:33:31:e9:ea:
                    63:08:31:2b:68:0c:af:30:31:8b:b1:87:02:01:c4:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:91:C7:43:07:B3:C6:C0:E2:5A:63:AE:22:6C:59:E2:42:A5:BB:26
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:ab:c9:60:ca:f8:d0:af:99:13:8b:59:60:ca:29:ff:cd:
         84:e1:8e:3e:a5:09:85:34:09:5c:4c:50:b9:c3:48:4e:fe:92:
         a6:b1:77:6e:8f:39:83:03:4f:e7:c2:db:43:d5:ea:d8:b2:e1:
         85:91:7f:45:fe:c6:32:09:c9:be:fa:cd:92:35:bb:f0:65:0a:
         aa:eb:76:3c:fb:3a:6c:fc:2d:a1:07:01:3e:89:a9:d1:91:4b:
         2f:05:95:1b:b5:3c:88:5b:4e:d7:80:75:25:bc:c8:a6:8d:f9:
         6e:de:e3:1d:36:46:d8:16:20:09:42:be:95:24:35:0f:09:92:
         2a:18:28:a1:ee:a1:0d:5e:3a:ba:e5:0d:aa:15:9e:c1:de:c9:
         29:9f:42:d2:d1:99:3a:6d:44:b1:c3:54:89:80:7b:55:8b:74:
         82:c3:43:4c:0e:b3:3b:d1:fe:46:23:c4:ca:8b:ce:23:8e:9e:
         0c:64:78:57:8c:80:bc:29:61:c0:b9:c9:76:02:cf:3d:05:ae:
         ae:d0:bb:d6:a4:64:51:31:5b:dc:32:48:0b:a0:5f:8b:06:8a:
         79:b1:0a:24:24:f1:10:a4:e3:af:56:6d:0f:50:aa:ab:3c:18:
         a3:6a:4f:77:6b:69:c9:8e:3c:32:99:41:48:6e:86:e0:9c:b6:
         88:7f:a9:fc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUe9dFe7dTY3NygjIAAtWNgDr96r8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5
RDgwRjE2NDAeFw0yNjA0MjcwODQzNDVaFw0yNjA0MjgxMjExNDVaMDMxMTAvBgNV
BAMTKDA5OTFDNzQzMDdCM0M2QzBFMjVBNjNBRTIyNkM1OUUyNDJBNUJCMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdB6HPtFz1aOt3uxcZV1AwDnxN
+o9Vf09Kx9+Ijv6mqBX7BpDMPxPh2dY4x5G6HpnFxgflsnW28SLq8z7jvTEiZ0fa
xQUVk4tMZ4AiffpN2kzO4pJxpgkQW/4sVckthxZGB7INy1TXwePi3C6eT6Qxh8Qy
gcOuNMjZvQeuiDM5lYfn5Xgix6D+0J6bgK2f6NuFrodIsSH2W5BCa3MT1PLlDAWA
P79k8jC7a6UbEq5k1Dob233IW5KLup/IziTYWDZ9+yJ2ZVChS8krObEMAydIvdwj
qBsEsJNE5jUJjSMGW86Z0INcMBfWQid6MzHp6mMIMStoDK8wMYuxhwIBxI1HAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCZHHQwezxsDiWmOuImxZ4kKluyYwHwYDVR0j
BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE
RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC84Qjc1MTYzQTU3NTUy
M0VFNDA4RDJBMkY1OUY4REQ1MDlEODBGMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9iryWDK+NCv
mROLWWDKKf/NhOGOPqUJhTQJXExQucNITv6SprF3bo85gwNP58LbQ9Xq2LLhhZF/
Rf7GMgnJvvrNkjW78GUKqut2PPs6bPwtoQcBPomp0ZFLLwWVG7U8iFtO14B1JbzI
po35bt7jHTZG2BYgCUK+lSQ1DwmSKhgooe6hDV46uuUNqhWewd7JKZ9C0tGZOm1E
scNUiYB7VYt0gsNDTA6zO9H+RiPEyovOI46eDGR4V4yAvClhwLnJdgLPPQWurtC7
1qRkUTFb3DJIC6BfiwaKebEKJCTxEKTjr1ZtD1CqqzwYo2pPd2tpyY48MplBSG6G
4Jy2iH+p/A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:34:09 2026 by rpki-client