Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
File:                     7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft (raw, json)
Hash identifier:          oieQDMFXKv+7d8Cr9aiRKjdyJB2eIPDxwcFCsdwu6tU=
Subject key identifier:   8C:30:A3:41:E8:A3:C8:96:93:AF:DF:70:71:17:8C:AE:72:63:01:5D
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Certificate issuer:       /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial:       55C4ED253D98259FE47843B6C844DFF2AE016445
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
Manifest number:          3A
Signing time:             Tue 03 Mar 2026 20:03:20 +0000
Manifest this update:     Tue 03 Mar 2026 19:58:20 +0000
Manifest next update:     Wed 04 Mar 2026 23:26:20 +0000
Files and hashes:         1: 3134332e36342e302e302f31362d3332203d3e203538353933.roa (hash: T4vLezJn7xNu2bByphuJEu2Ig4ZD46V9jH6bAdcEpuo=)
                          2: 3133392e3231372e302e302f31362d3332203d3e203538353933.roa (hash: TjfWShvYyMSe5iUDgDmO2D0KmAjdpi9YE3JeWe6558M=)
                          3: 34302e37322e3132382e302f31372d3332203d3e203538353933.roa (hash: p/W3urv9s6Mh0sKXJJNeu9I+tgf84ncaa3h8zoru8OE=)
                          4: 34302e37332e39392e302f32342d3332203d3e203538353933.roa (hash: 7R7fDqZf/5+3oxpf17LppS6FttEpLPqj/SRHzmBlL90=)
                          5: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl (hash: FB73McmJaOWPf+ljnEnz8x597Qao9tgnb+x1OXZVT0k=)
                          6: 3133392e3231392e302e302f31372d3332203d3e203538353933.roa (hash: IVrHknvKkh8yROa4tiv3v+u48kSCR3yp5mlGRj7MBmg=)
                          7: 34302e37322e302e302f31362d3332203d3e203538353933.roa (hash: bA5WI7/KpYNhKJN4cMgSEIprY/S1uA3j47J24s7t+5w=)
                          8: 35322e3133302e31362e302f32302d3332203d3e203538353933.roa (hash: 9fmayBtgmtjpp4jzOoesECemG0iPag+LmUb3f7R4naw=)
                          9: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (hash: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno=)
                          10: 34302e37322e302e302f31372d3332203d3e203538353933.roa (hash: LYiQ73taquPSuSpTuy+vzJGoHi18mwv4asxbOTvv1Ho=)
                          11: 35322e3133302e36342e302f31392d3332203d3e203538353933.roa (hash: OprOlplssuamN3h94BT0AnEzNk6BvCRELQ3ohphCM00=)
                          12: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (hash: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k=)
                          13: 34302e37322e3235342e302f32342d3332203d3e203538353933.roa (hash: jVmLljqYigSR/3QuR32HfCR3CxY+RzXqqg+sV43pBR8=)
                          14: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (hash: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c=)
                          15: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (hash: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4=)
                          16: 34302e37332e3132382e302f31372d3332203d3e203538353933.roa (hash: CiPHFGZqvfKg4LSjdZddwLwpgrGQUYVCQQV/0MxCEaY=)
                          17: 34302e3132362e36342e302f31382d3332203d3e203538353933.roa (hash: Hub7TsuiHLAWEoiAunlBnvggqSEF/qF1dBxzvZVqGHk=)
                          18: 34302e37332e302e302f31372d3332203d3e203538353933.roa (hash: cadugSY+Rd6qeZvb4VDsR6/4DGyePb52mtwl/w4kXbs=)
                          19: 34302e3136322e302e302f31362d3332203d3e203538353933.roa (hash: f8MfVshx5lGzRK+oYYL4bZpTGfVrnynfJo9OIWhBK3I=)
                          20: 3133392e3231372e3132382e302f31372d3332203d3e203538353933.roa (hash: gyaQRSP2K4Ar7mRLlvlWZj3SxsO0p/6gafUPCndYi6E=)
                          21: 34302e37322e302e302f31352d3332203d3e203538353933.roa (hash: GZdXu8wxwSiGKPAoovUfq55Hmtnm5G22A4eA9cJCeZ8=)
                          22: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (hash: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk=)
                          23: 34302e37322e3235352e302f32342d3332203d3e203538353933.roa (hash: N+EpGWN+5eD7X8BPdHo0VUuyK/mruZfTCEv7P/4k7IA=)
                          24: 3133392e3231392e3132382e302f31372d3332203d3e203538353933.roa (hash: WvSyW7YTV1pD7rlW8kL0SgPBrbkm666YUP9aQtCGrCU=)
                          25: 3133392e3231372e302e302f31372d3332203d3e203538353933.roa (hash: mDztGBZGQDwnkeO355GRuWH/wTqbzk6W9oIP/6iNQwU=)
                          26: 34302e3132352e3132382e302f31372d3332203d3e203538353933.roa (hash: xvYQ7lwBaxHOGikSMgtXf4dBxT9LF60nwDMT1WLA8D8=)
                          27: 35322e3133302e3139322e302f31382d3332203d3e203538353933.roa (hash: dzApubPVeFSkZdW4H5zf0mOm6a9a8hNkGDjx4j4dslE=)
                          28: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (hash: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg=)
                          29: 3135392e32372e302e302f31362d3332203d3e203538353933.roa (hash: mNIQFZ7xCBM9upD56r+wfpao/kJgLgozsC1Q5YvTI1c=)
                          30: 3133392e3231392e302e302f31362d3332203d3e203538353933.roa (hash: 5/v1XCI+Wp9jyoAJYxMrFQ0MkUCnWejLKnHtIrf5Bp8=)
                          31: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (hash: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c4:ed:25:3d:98:25:9f:e4:78:43:b6:c8:44:df:f2:ae:01:64:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
        Validity
            Not Before: Mar  3 19:58:20 2026 GMT
            Not After : Mar  4 23:26:20 2026 GMT
        Subject: CN=8C30A341E8A3C89693AFDF7071178CAE7263015D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:56:b6:f4:ed:41:b2:07:57:d7:f1:f7:c6:
                    7c:e7:c4:e9:69:7e:53:12:4b:9c:32:89:29:6f:96:
                    13:35:16:e2:cf:2d:66:9c:6e:2c:d9:f5:9f:1e:8d:
                    52:80:0c:b6:c9:eb:04:f3:ad:a2:e7:c5:b2:14:20:
                    2d:3c:86:08:5d:0f:7c:b7:7a:d3:64:7a:cf:fd:67:
                    e7:e9:ae:f2:24:70:71:20:6f:7d:e5:60:fc:34:20:
                    50:35:b1:21:7c:3f:4b:40:b5:5a:26:e3:04:6e:e7:
                    ce:34:20:de:28:ec:78:f6:0f:67:aa:3e:ec:3f:09:
                    59:aa:cb:f6:5d:ff:85:e5:23:57:f9:e5:85:a1:d8:
                    cf:3b:28:de:a3:5f:5e:8c:57:3f:03:e3:4e:d5:45:
                    e4:64:cb:bf:28:ea:88:1b:09:8d:93:26:6a:ab:cb:
                    c6:cd:1a:20:a6:6c:a6:53:4b:77:88:81:1d:1b:0c:
                    b1:3c:b6:20:90:b5:a0:53:5d:08:5e:c2:6d:84:74:
                    d8:1f:42:80:53:52:d3:c0:bf:f5:8c:aa:cb:cb:2e:
                    1e:ad:13:90:b3:26:23:36:f7:ce:8f:7b:83:42:fb:
                    56:0a:3b:1d:eb:45:d5:02:fc:d9:ad:f4:f2:4b:ec:
                    ed:bb:86:6b:5b:2c:17:1e:f4:13:1d:67:8c:15:c5:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:30:A3:41:E8:A3:C8:96:93:AF:DF:70:71:17:8C:AE:72:63:01:5D
            X509v3 Authority Key Identifier:
                keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:ad:e7:eb:9e:bc:5b:ed:be:ec:3c:5b:26:e2:8e:46:92:
         10:94:8f:00:0f:6a:b1:9a:1c:fb:f5:90:3c:94:fc:bf:3d:6d:
         bc:e8:c0:d1:0f:4e:71:52:56:85:87:54:98:1a:f9:ad:37:6a:
         11:d4:fb:9e:f8:13:10:ed:e3:36:cb:b0:06:0e:a5:63:79:e1:
         3e:34:23:aa:27:b6:4c:47:49:58:f7:e6:f5:c1:27:c2:72:e5:
         4a:ff:f7:b9:8e:ad:86:10:37:49:8f:25:b6:b2:dc:46:e1:ef:
         95:63:eb:1e:61:43:80:3e:95:c1:71:87:f8:6b:cc:b1:4d:1d:
         51:a4:b8:c0:8c:ae:04:a1:68:5e:6d:8b:34:79:9a:cc:e1:8d:
         b5:c9:73:ea:c1:33:fb:ab:92:0c:71:c8:57:a6:af:3c:32:ac:
         1c:40:99:c6:17:2a:1a:1d:5d:c7:c1:30:34:28:0b:9c:54:c6:
         ed:a3:b9:b1:e9:56:d2:a5:80:6d:5f:cd:3c:bb:68:89:0c:6c:
         b0:cd:71:3a:d8:07:cc:71:3d:80:c3:fd:dc:29:de:c9:e7:9a:
         5b:43:13:b9:59:00:16:09:ad:01:4a:00:10:f7:71:7b:e6:e1:
         86:5c:53:32:9c:02:c1:2c:d9:91:c5:7d:89:bb:b9:ee:2a:7e:
         0e:cb:f2:eb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVcTtJT2YJZ/keEO2yETf8q4BZEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy
ODQ4RjA1RjAeFw0yNjAzMDMxOTU4MjBaFw0yNjAzMDQyMzI2MjBaMDMxMTAvBgNV
BAMTKDhDMzBBMzQxRThBM0M4OTY5M0FGREY3MDcxMTc4Q0FFNzI2MzAxNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9J1a29O1BsgdX1/H3xnznxOlp
flMSS5wyiSlvlhM1FuLPLWacbizZ9Z8ejVKADLbJ6wTzraLnxbIUIC08hghdD3y3
etNkes/9Z+fprvIkcHEgb33lYPw0IFA1sSF8P0tAtVom4wRu5840IN4o7Hj2D2eq
Puw/CVmqy/Zd/4XlI1f55YWh2M87KN6jX16MVz8D407VReRky78o6ogbCY2TJmqr
y8bNGiCmbKZTS3eIgR0bDLE8tiCQtaBTXQhewm2EdNgfQoBTUtPAv/WMqsvLLh6t
E5CzJiM2986Pe4NC+1YKOx3rRdUC/Nmt9PJL7O27hmtbLBce9BMdZ4wVxXuLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUjDCjQeijyJaTr99wcReMrnJjAV0wHwYDVR0j
BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF
QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE4Nzc4OTEvMS83RUFDOUU0M0M4RkFF
N0VENUI2MTU5NDIzRDYwRUE3MzI4NDhGMDVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiqt5+uevFvt
vuw8WybijkaSEJSPAA9qsZoc+/WQPJT8vz1tvOjA0Q9OcVJWhYdUmBr5rTdqEdT7
nvgTEO3jNsuwBg6lY3nhPjQjqie2TEdJWPfm9cEnwnLlSv/3uY6thhA3SY8ltrLc
RuHvlWPrHmFDgD6VwXGH+GvMsU0dUaS4wIyuBKFoXm2LNHmazOGNtclz6sEz+6uS
DHHIV6avPDKsHECZxhcqGh1dx8EwNCgLnFTG7aO5selW0qWAbV/NPLtoiQxssM1x
OtgHzHE9gMP93CneyeeaW0MTuVkAFgmtAUoAEPdxe+bhhlxTMpwCwSzZkcV9ibu5
7ip+Dsvy6w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:09:30 2026 by rpki-client