Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File:                     EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier:          F9dCT5SGxrqxmzjUjD8M4l6jbjcdJlNmKoJNu/PJKsY=
Subject key identifier:   80:46:41:35:27:2C:9E:7E:B8:A7:15:5B:90:3E:61:68:AC:5F:DD:42
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       08AB6CC9D2754BEDC033D040C4EDD9FCBC34B1F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number:          47
Signing time:             Thu 12 Mar 2026 17:03:39 +0000
Manifest this update:     Thu 12 Mar 2026 16:58:39 +0000
Manifest next update:     Fri 13 Mar 2026 18:00:39 +0000
Files and hashes:         1: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
                          2: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
                          3: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: eDYnMsOk5GgeRF9s4yQ/IsbM8LN0YC9kKitVgOhxfNA=)
                          4: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
                          5: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
                          6: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
                          7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
                          8: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ab:6c:c9:d2:75:4b:ed:c0:33:d0:40:c4:ed:d9:fc:bc:34:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Mar 12 16:58:39 2026 GMT
            Not After : Mar 13 18:00:39 2026 GMT
        Subject: CN=80464135272C9E7EB8A7155B903E6168AC5FDD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:05:36:46:ed:ef:63:f2:f9:9d:73:e1:c8:
                    ac:d5:43:0e:f7:18:96:63:bf:4a:28:4b:2f:89:2c:
                    74:f4:28:fc:6b:6f:52:8e:a0:98:83:e4:b0:6d:2d:
                    e7:b8:ab:d7:3f:70:a3:db:0a:61:49:9f:a1:7b:0e:
                    2b:2c:de:90:80:cf:4a:9b:32:1e:b3:db:70:af:8e:
                    0d:90:9b:0f:4e:86:18:dd:2f:3a:7a:50:27:88:82:
                    39:ba:20:28:48:97:81:70:9a:e3:df:36:b5:09:d4:
                    95:3f:b6:4f:24:5b:75:7f:38:1f:f0:aa:9f:5a:85:
                    ec:f9:ea:d9:3c:3a:c6:d4:08:3a:5d:b0:45:d1:39:
                    94:b5:34:8e:49:1b:ba:1a:63:f3:fd:f9:88:47:77:
                    4e:dd:f2:f2:fb:c3:ac:03:83:a1:ba:66:4c:b4:d2:
                    ed:b2:98:a6:96:97:7e:70:75:49:40:eb:1e:35:1e:
                    5b:fd:52:f7:a2:bd:f8:5e:18:a2:84:3d:0c:5e:34:
                    a3:3e:a5:08:ac:ee:19:a6:14:60:aa:d1:36:fc:1e:
                    10:62:6e:8d:b2:c9:a3:86:a0:56:7a:52:54:7c:80:
                    fc:15:ff:69:2f:54:35:14:eb:58:ba:c3:56:54:92:
                    74:42:5a:97:6a:7f:fe:9f:39:4e:3b:ed:57:57:97:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:41:35:27:2C:9E:7E:B8:A7:15:5B:90:3E:61:68:AC:5F:DD:42
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:1d:81:75:cd:3b:8e:4c:47:39:8d:db:88:85:64:f9:e3:
         ac:30:88:ce:ce:34:96:73:5c:13:88:a0:f7:79:23:31:a5:b2:
         ce:00:2a:0e:3d:a1:51:51:44:f0:4b:f4:58:62:98:ac:18:a5:
         b3:5f:2e:24:e4:ab:3c:16:ff:30:e5:95:ba:6b:a2:8d:b2:4b:
         db:fe:b0:4f:7c:d7:c4:46:38:8e:f8:b7:f8:99:03:72:fb:64:
         09:19:ea:b8:ee:49:56:9b:67:05:f3:a8:49:92:b5:b4:49:a9:
         7f:a7:98:c1:b7:0b:cd:73:1d:aa:bb:40:55:84:8a:2f:75:9d:
         83:d3:97:8e:69:df:ef:59:4f:a0:76:56:06:f9:aa:40:5f:0d:
         74:2a:eb:2a:68:98:28:4b:75:e1:97:3b:48:70:4b:6f:99:89:
         33:c7:0d:88:02:05:fc:5e:6e:42:bf:5e:d2:92:e7:5b:22:02:
         55:bd:0c:fe:38:2b:28:ff:6f:93:f3:ef:3c:89:09:3b:31:fc:
         59:5e:4b:dc:91:41:55:53:1e:9b:cd:b3:38:c2:2b:c9:fc:09:
         5b:b4:a1:fb:74:58:91:8e:0d:af:61:18:74:2e:d5:fa:30:83:
         11:d6:28:a4:f5:c6:1c:c1:b9:d4:a7:1c:0b:2c:e0:dd:29:d9:
         50:53:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:33:54 2026 by rpki-client