Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File:                     37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier:          5qQYsNpoTR2ZRdiIOVyDcoyfxgwkNzxgz/qV/Gsi2I8=
Subject key identifier:   06:4D:83:ED:33:05:E3:05:7F:AF:26:BA:02:DA:26:8E:79:67:1A:39
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       48237F4CF09704CE5276F2A8C426FA274416521B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number:          46
Signing time:             Wed 11 Mar 2026 23:53:39 +0000
Manifest this update:     Wed 11 Mar 2026 23:48:39 +0000
Manifest next update:     Fri 13 Mar 2026 02:33:39 +0000
Files and hashes:         1: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: mx/Ujmnu/iB7WAvyUbDyT2c3MvfBRUNG6HdVPegTQNg=)
                          2: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
                          3: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
                          4: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
                          5: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
                          6: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
                          7: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
                          8: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
                          9: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
                          10: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
                          11: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
                          12: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 02:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:7f:4c:f0:97:04:ce:52:76:f2:a8:c4:26:fa:27:44:16:52:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Mar 11 23:48:39 2026 GMT
            Not After : Mar 13 02:33:39 2026 GMT
        Subject: CN=064D83ED3305E3057FAF26BA02DA268E79671A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:99:e0:f5:ac:fb:59:a4:b2:36:f2:61:51:
                    b7:16:df:7c:44:6d:10:6a:c2:bb:09:a3:b5:12:7d:
                    10:1f:eb:99:4a:bb:68:ca:c4:0c:38:f4:12:5a:b0:
                    82:05:bd:d4:7c:39:4f:be:9c:93:a9:04:9c:4d:7b:
                    95:f5:b2:14:86:41:ef:91:d6:3b:a4:7e:d1:6a:ed:
                    75:a1:02:9b:82:f3:83:53:b5:e6:61:da:c8:f1:5e:
                    8c:6a:d6:e3:ea:40:2a:2f:26:ce:12:46:2e:ff:3b:
                    a0:b3:36:68:8a:d3:f7:c9:24:5e:54:89:f0:d9:4f:
                    e1:4b:5b:ed:c9:a2:ef:e4:41:2a:22:3f:91:e4:4d:
                    0d:ad:a5:53:a8:92:62:cb:81:80:d3:e1:dc:48:fa:
                    ba:35:26:71:5e:fb:87:1c:d6:aa:71:95:94:fb:68:
                    03:18:83:b0:19:c8:70:56:e8:ed:0a:d3:05:a3:a9:
                    18:f1:e8:00:19:d1:7a:bb:be:42:c8:b2:fe:90:94:
                    06:6f:d1:7f:e2:39:6d:f3:92:88:04:d3:7f:79:9b:
                    26:78:5c:72:84:c1:08:73:a2:91:c9:1f:7d:ac:eb:
                    36:bb:41:e1:a2:1a:41:94:0d:b6:24:41:35:c1:e1:
                    9e:3d:82:40:dd:66:14:9a:19:32:04:ba:35:6c:a5:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:83:ED:33:05:E3:05:7F:AF:26:BA:02:DA:26:8E:79:67:1A:39
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:82:9f:49:67:43:46:f1:1f:10:92:ee:2f:f5:21:dc:48:
         93:c0:25:e7:b7:61:c6:8f:f6:8e:8d:06:05:60:8e:7b:e3:ae:
         cf:b2:dd:77:ce:73:1a:b5:77:ba:a2:64:09:02:60:ee:17:a4:
         b6:85:f7:b9:42:de:aa:c6:c1:b9:a8:ca:b0:4a:68:34:d7:6a:
         3d:ed:93:fb:53:78:b8:73:53:32:f6:3a:e1:be:b6:4a:62:37:
         08:21:a6:ee:04:f1:3c:63:cb:80:1b:a6:f5:18:e2:75:0b:b0:
         cd:2f:1e:6b:ee:d8:09:e1:37:bb:a3:29:a7:4c:30:4b:30:4e:
         f5:91:fd:2d:a3:0e:b5:9e:9d:d4:36:ee:f9:eb:65:b1:20:2b:
         09:02:88:b8:db:1e:59:fa:7e:eb:d4:ef:59:6f:95:a9:9d:e5:
         00:d8:84:19:6e:dd:2e:37:20:56:97:f9:bb:03:33:dc:86:cb:
         52:4e:4e:b1:4f:b7:96:27:62:71:6b:d4:5c:46:9c:c8:4d:dd:
         29:b0:9f:73:8c:88:78:b7:b1:50:df:e7:7c:d4:69:7f:19:c6:
         bd:6a:cd:d6:2a:2f:e6:3d:19:1f:ab:71:e0:d6:c3:ae:ed:a4:
         8d:10:c0:4e:85:a0:06:04:67:62:ce:d9:8d:a4:83:be:b7:30:
         33:c5:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:20:16 2026 by rpki-client