Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
File:                     C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft (raw, json)
Hash identifier:          WrO0Y7eK/aboSL1+KynsoBN2rUxmq9zsItbYVwxXAfg=
Subject key identifier:   73:AE:E3:0F:F0:36:5F:E2:78:B3:7E:6A:F5:02:90:EA:91:8E:B4:FC
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       28081ECF3954018D4D0ECB0E07BB8932AE721273
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
Manifest number:          CF
Signing time:             Fri 29 May 2026 06:57:42 +0000
Manifest this update:     Fri 29 May 2026 06:52:42 +0000
Manifest next update:     Sat 30 May 2026 08:06:42 +0000
Files and hashes:         1: 323430313a643065303a333a3a2f34382d3438203d3e20313334373638.roa (hash: TNbj5NXZ3BfRUhxVBRN8SjedKPyEfL0pBmaY01EmYD8=)
                          2: 3130332e3233362e36382e302f32322d3232203d3e20313334373638.roa (hash: sN3HNrLlIe1pF12HRsnwPkq9GhOgaLOK0OFpqeNqDJM=)
                          3: C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl (hash: kGQfzVjj4xr5qmighnhWZoaHPRWHnd3BiCg3F0GKGNQ=)
                          4: 3130332e3233362e37322e302f32322d3232203d3e20313334373638.roa (hash: lZTY+RjT9I2mnvGGe2e+RkDMPRVFvuGz/QpkMfot46Q=)
                          5: 3130332e3233362e38342e302f32322d3232203d3e20313334373638.roa (hash: 9SHqvVYPUbO3dLD+jTjW+imtI2Acr3G8QsyhyvTorsI=)
                          6: 3130332e3233362e38382e302f32322d3232203d3e20313334373638.roa (hash: HmKTEynkwJNY27vtlMK52XNhpOmzam9n76ECrzYLsdU=)
                          7: 3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa (hash: l8BiSjdm/v4L+Lk4AWpSFB7YqYeNE63RZbUpZObgJC4=)
                          8: 3130332e3233362e37362e302f32322d3232203d3e20313334373638.roa (hash: gJ9jvlC244kMuMFYa7r97Mgn6661kQ5LMrX3/d1fgVU=)
                          9: 3130332e3233362e39392e302f32342d3234203d3e20313531323730.roa (hash: VKjVQFSn3nY3H4Irpv2WfKYOL5kzIRrBAcqGMRC6bDM=)
                          10: 3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa (hash: 6csy52r/oDieMavBe94L6XVKY6JeI8A0+LvrsQfB0Z0=)
                          11: 3130332e3233362e38302e302f32322d3232203d3e20313334373638.roa (hash: mk9zLY/hRPvbRURhi9lZJkqmY1Nw8vh0nZlzit8Jpd4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:08:1e:cf:39:54:01:8d:4d:0e:cb:0e:07:bb:89:32:ae:72:12:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 29 06:52:42 2026 GMT
            Not After : May 30 08:06:42 2026 GMT
        Subject: CN=73AEE30FF0365FE278B37E6AF50290EA918EB4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:95:cf:14:80:85:c1:b4:44:c9:59:7e:5b:
                    0a:ef:43:68:e6:85:49:c6:54:5e:ec:50:07:48:e5:
                    02:94:f0:8a:c3:a5:ad:e8:d2:89:94:2d:6a:4b:cd:
                    9f:ca:b7:d5:ce:3c:13:cf:00:3c:ec:a4:72:eb:9d:
                    d5:cf:27:09:c2:b6:c2:35:71:37:d9:73:07:d8:a4:
                    c1:ef:28:64:21:00:23:2e:78:49:24:47:03:94:3b:
                    42:37:c1:20:ff:0d:16:ab:79:3e:6d:f9:af:b8:1d:
                    c6:a2:60:f9:10:98:a7:cc:1e:02:82:88:51:97:38:
                    0f:4b:30:9f:11:87:c8:b4:45:75:fd:0e:a3:5b:e9:
                    43:70:b7:bc:b4:c4:b2:b7:83:c6:04:0b:84:57:82:
                    ee:13:99:b9:19:39:fb:9c:72:43:f8:95:e6:b4:0a:
                    82:19:bc:58:cc:0f:42:d7:07:e6:2c:29:b4:8f:ea:
                    9c:f9:5c:4d:db:0e:f6:f2:05:a9:77:d6:ba:8c:c0:
                    91:86:d5:51:10:e4:bc:33:f9:ce:e3:c7:c7:f1:fc:
                    bb:92:e7:34:1f:23:e4:35:b3:a6:e3:87:8a:41:08:
                    cf:f2:10:20:9e:6b:30:40:72:e0:d4:8a:e1:cd:b0:
                    3e:cc:28:76:fb:7a:50:95:cd:1f:32:c0:89:9a:e1:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:E3:0F:F0:36:5F:E2:78:B3:7E:6A:F5:02:90:EA:91:8E:B4:FC
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:ce:b0:43:d5:37:1d:99:2e:c5:88:4b:1e:a5:44:77:39:
         31:db:6c:e7:eb:92:d3:0d:24:8c:18:c0:08:4d:ab:9c:31:72:
         64:aa:b0:21:09:48:86:b3:0d:07:45:57:03:c7:5f:5c:48:1e:
         ac:84:a1:d5:57:9b:1f:8f:27:d8:9f:fb:75:c6:4d:80:b0:af:
         7d:b1:7d:b5:7d:ec:c3:e8:0f:79:38:0d:e9:66:91:94:5d:7c:
         8e:57:db:5e:6e:ce:1c:ca:ad:26:0d:46:da:f5:61:93:77:3e:
         bb:21:d2:f3:a3:cb:9c:e0:7c:24:ea:e2:90:34:ec:6d:c9:65:
         8b:6d:67:4a:99:ef:7f:e7:93:fd:1e:28:ae:d0:63:e2:cb:8d:
         5d:ed:8b:32:89:9d:e0:9f:b3:c0:70:81:09:d0:1a:e9:25:17:
         69:07:a3:a0:17:5c:04:91:6f:ad:3d:5a:b1:0a:b8:93:e7:dc:
         b7:6c:a0:da:61:04:47:6e:ff:0f:c6:b9:5e:a5:55:26:45:8a:
         25:a5:8c:2c:2f:f6:0f:55:c1:fb:5e:af:9f:19:80:d1:f0:28:
         be:81:8c:fd:14:b5:52:54:08:a1:b9:0b:27:e8:c6:bb:d1:09:
         5b:54:9e:ec:00:ac:90:98:6d:e0:ac:c4:8b:ee:c7:5f:d5:d7:
         aa:0d:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:32 2026 by rpki-client