Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
File:                     C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft (raw, json)
Hash identifier:          TtvajBhQ6FDVB2YJoNOvb9MgnBbS3BRSHVo9BwWG8aI=
Subject key identifier:   EA:4E:BB:6A:12:19:9C:0A:7D:EB:B4:54:C4:D9:0C:E6:F2:97:B8:0A
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       7A4C5F5511733453370449C4293FF380959640AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
Manifest number:          8A
Signing time:             Mon 27 Apr 2026 17:53:49 +0000
Manifest this update:     Mon 27 Apr 2026 17:48:49 +0000
Manifest next update:     Tue 28 Apr 2026 18:32:49 +0000
Files and hashes:         1: 3131302e37362e302e302f31392d3234203d3e203337393633.roa (hash: /Kq+hRQAsqDgn4v6EoPlalrT6bwlRVWqpcd1Axu+pfY=)
                          2: 3131302e37352e3232342e302f31392d3234203d3e203337393633.roa (hash: BBXrRq1dBs684+XzgxyxLmN3kZjKe3o4jkqpub3A5Vk=)
                          3: 3131392e34322e3232342e302f31392d3234203d3e203337393633.roa (hash: pT0hDyH/zxwSjEnZ+i5rzSaXvj++7CGl/ttNR0PKCJA=)
                          4: 3130332e35322e3139362e302f32322d3234203d3e203337393633.roa (hash: /e68HlPUv2dOjZkFKbuODFjZsrCs3tP2yL0LmD1eHOs=)
                          5: C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl (hash: WQ8IrpARJUhO7/eYez4MvwSrhi/tQVdskW5/Fg5Drxc=)
                          6: 3131302e37352e3132382e302f31392d3234203d3e203337393633.roa (hash: Ebg5Gac1KLUQyYv7ZNQ+SoINksfu4W2yKgqZOmTbJrc=)
                          7: 323430303a623230303a3a2f33322d3438203d3e203337393633.roa (hash: l9maJZAh3CM0hpVS+DdjyugaCIUwe15lRDZpwNeMGbM=)
                          8: 34352e3131332e34302e302f32322d3234203d3e203337393633.roa (hash: RYG1LzDNVXadniGjV2YPBkb1yZ+D8ilLeSbEwZV6Eak=)
                          9: 3131302e37362e302e302f31392d3234203d3e203435313032.roa (hash: KpbyfMQgiRPHc4JXVVcufeCDpffM9jStUuQqy7RhNDk=)
                          10: 3130332e34372e342e302f32322d3234203d3e203337393633.roa (hash: Sq3GVOKG+u2dIBV7WNDwNcIMqbeNWcAvXkgiKVYnvHI=)
                          11: 3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa (hash: NFziTk6S3pYvp6vnAmcz2xPZZtFK0ZCAJd4JgrivxjM=)
                          12: 323430303a623230303a3a2f33322d3438203d3e203435313032.roa (hash: pY2dZ6dqSTgOgh45AcxUkhaZzPeNVeg4WabnzY7sOHE=)
                          13: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (hash: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc=)
                          14: 3131302e37362e34382e302f32302d3234203d3e203337393633.roa (hash: LtC8RzHh7EbRr5/DXsPn3/kNp3I+Is8WPl/3olH7Ijs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 18:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4c:5f:55:11:73:34:53:37:04:49:c4:29:3f:f3:80:95:96:40:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Apr 27 17:48:49 2026 GMT
            Not After : Apr 28 18:32:49 2026 GMT
        Subject: CN=EA4EBB6A12199C0A7DEBB454C4D90CE6F297B80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:44:d1:83:3c:c9:0a:5e:a3:45:f7:ab:4c:
                    0c:29:2b:d7:3d:11:11:34:64:ab:1a:88:2d:f0:6b:
                    7d:d6:15:08:5e:03:06:1f:bf:ca:a4:f9:f8:57:52:
                    09:87:2e:4d:f1:a4:91:cf:a7:86:87:d0:a3:41:4d:
                    7e:a4:92:ce:42:47:70:4f:1b:d5:5d:f0:8a:b2:f2:
                    1c:80:59:fe:f1:b7:18:65:e3:57:47:63:4b:20:6b:
                    5b:39:80:9f:65:56:93:09:8c:07:5e:39:3c:f9:b5:
                    4c:6e:cb:92:70:96:88:dd:f9:84:70:22:66:30:e0:
                    fc:59:f8:38:ec:30:b7:e2:e9:09:3c:e5:54:1c:ee:
                    22:a6:b7:89:fc:e7:cb:e1:12:ef:be:79:c2:6c:dd:
                    fe:15:6b:27:be:3f:01:a5:83:6f:c5:2b:16:75:15:
                    12:63:ca:d5:73:4a:d4:d4:4e:36:07:8e:54:02:59:
                    fc:c9:d3:89:36:ff:4f:b8:c1:d4:b3:2f:4b:5f:35:
                    f4:a7:d8:06:16:67:3f:be:7d:91:a1:6b:b6:d2:4b:
                    ea:e3:71:3f:8a:16:34:3f:1e:de:73:41:ae:d6:33:
                    b0:0d:cd:d6:3e:5d:d2:7c:0e:7a:5f:f2:de:22:d8:
                    08:1a:23:e9:93:28:f6:e3:98:1c:29:99:ac:c5:4b:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:BB:6A:12:19:9C:0A:7D:EB:B4:54:C4:D9:0C:E6:F2:97:B8:0A
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:a9:32:56:7f:26:e7:1e:37:35:56:27:e9:05:76:24:40:
         f3:d4:33:18:42:f5:02:10:09:0e:30:42:a8:c0:c2:bc:c2:48:
         3e:41:0a:2b:96:a0:ad:58:8e:88:25:b6:21:0a:ba:60:68:1d:
         7a:d8:5a:c9:12:09:bf:6e:48:8c:9e:4d:d8:46:c4:55:ce:60:
         5a:07:6c:52:4b:88:d9:93:99:57:4e:3e:cb:0e:97:98:a9:13:
         ce:f0:3e:81:64:dc:b5:29:bd:a9:aa:2a:a7:0b:8f:fd:d5:66:
         ef:e6:c4:60:05:5b:81:40:de:47:f1:ac:35:5a:c5:80:1a:f9:
         34:99:d9:ff:58:c6:6d:30:76:d1:3c:43:42:82:b9:97:6a:ff:
         1e:48:80:c9:9f:e8:ea:7c:14:bd:95:1a:1f:7d:c3:bd:45:ee:
         1d:6d:b3:6f:e3:55:04:67:96:10:36:35:c5:4f:0d:ae:b1:c0:
         ff:b8:c1:ca:b0:66:18:42:94:77:06:10:7e:7a:9a:62:2f:60:
         ef:ac:6a:d4:1e:27:99:2b:9c:bd:b2:88:77:dd:2a:0b:10:b9:
         95:f1:c4:a1:e4:78:c8:c1:68:f6:ac:91:e4:e8:6f:56:5e:fc:
         05:e5:68:33:24:a3:b0:cb:8b:93:92:eb:6c:4b:54:d2:58:ad:
         55:6c:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:27:25 2026 by rpki-client