Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          1TvD3atTTt0K08+7qs8PDIhgk3GTY60HszSkBguWx/Q=
Subject key identifier:   61:84:6B:9E:74:AD:D4:31:AA:5B:B2:CA:29:72:47:ED:15:61:45:5B
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       5596C9D485A0302C2089492FD1468DBC5FB88A89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          0127
Signing time:             Fri 28 Aug 2026 06:48:19 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:19 +0000
Manifest next update:     Mon 31 Aug 2026 16:24:19 +0000
Files and hashes:         1: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          2: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          3: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
                          4: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          5: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          6: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          7: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
                          8: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: A4Qa23vQ/5Ady3U8JZHB+eZQip9seBxI3Fb6Kq4AOE4=)
                          9: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          10: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          11: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          12: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:c9:d4:85:a0:30:2c:20:89:49:2f:d1:46:8d:bc:5f:b8:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Aug 28 06:43:19 2026 GMT
            Not After : Aug 31 16:24:19 2026 GMT
        Subject: CN=61846B9E74ADD431AA5BB2CA297247ED1561455B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:5b:41:0d:0b:c4:4c:ec:8e:02:4d:44:9e:
                    a1:4b:d9:0d:b9:08:8c:69:0c:07:77:1a:64:f1:20:
                    2d:4f:83:2d:ec:04:3f:40:3d:6b:05:44:2d:71:70:
                    77:d3:c4:e8:38:df:cb:32:1c:43:3e:93:2b:c2:75:
                    dd:ee:ae:4e:61:3d:5e:5f:5c:57:e8:24:fd:ea:e1:
                    99:f8:14:ca:4f:ec:fb:d1:85:a3:b3:05:c4:d6:9e:
                    42:04:b5:e1:32:2c:76:5a:9b:33:a2:7b:93:79:3a:
                    f7:15:51:96:29:b8:13:e9:d5:b1:94:56:dd:a1:ff:
                    16:87:4d:29:9f:8c:ff:2b:d8:39:80:de:ee:87:c7:
                    d1:3c:60:d9:99:91:a7:c4:8a:ad:45:36:30:82:c8:
                    5f:96:9b:d6:2d:5d:18:0c:e5:ca:26:d5:36:a2:f5:
                    ac:0d:88:ba:ef:8c:8e:76:8b:eb:9d:0a:aa:15:6a:
                    b5:c8:65:43:56:c4:18:46:b6:fd:b8:7c:16:59:7a:
                    bc:9e:b2:c3:9b:c0:95:fd:74:61:69:f6:87:90:88:
                    9c:a5:d2:09:ad:b5:77:3c:90:83:fb:69:95:06:27:
                    27:c9:ed:6e:73:73:43:a7:22:b0:78:59:4b:3b:ce:
                    ae:6e:d8:4a:0c:ba:dd:6d:f2:29:25:73:0a:81:cc:
                    22:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:6B:9E:74:AD:D4:31:AA:5B:B2:CA:29:72:47:ED:15:61:45:5B
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c9:37:13:cf:ef:20:a3:41:db:3c:d1:06:dc:1f:d4:da:85:
         50:1f:ba:68:f1:78:26:40:7b:00:ec:1e:cd:ba:39:88:fe:46:
         37:9a:e3:4e:7b:6d:bc:ce:d1:30:88:de:42:ed:3e:89:ec:5e:
         5b:0f:8a:3e:78:1b:8b:8b:6f:b2:b4:c6:c7:07:2b:8b:2b:9f:
         87:64:d6:91:76:30:04:51:c2:d4:b8:85:d4:d2:1e:17:05:87:
         12:1a:71:26:5a:83:27:db:c5:33:90:bd:90:31:ad:39:04:f1:
         26:b7:0a:0e:59:03:45:3b:29:35:86:1c:c1:23:12:e9:69:f9:
         d1:be:3b:3b:d8:ee:c1:b3:61:b5:1f:e6:71:30:9c:6f:24:8d:
         38:dd:44:6d:20:23:2a:8e:79:0d:d9:90:41:d8:92:71:a1:35:
         b7:5e:ac:7f:23:08:a7:a3:49:9a:dc:57:8e:be:a6:ab:cc:8c:
         c0:c5:e8:21:c8:25:72:1c:e8:72:c6:23:82:74:07:e7:73:67:
         7f:8c:e5:7d:d5:bd:61:2c:86:d3:ae:c0:49:07:c3:17:2c:d1:
         4a:24:28:7d:3a:1b:bb:c5:af:c9:85:6a:29:14:c8:c4:dc:da:
         7c:d9:44:3f:fa:fe:32:70:55:6a:7a:2c:93:3b:4a:e7:3f:27:
         29:d2:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:14 2026 by rpki-client