Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
File:                     62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft (raw, json)
Hash identifier:          Y7go5hZxvvmJ6ha+B8T53o7k2hagVqN9+Hza6fTzUKQ=
Subject key identifier:   E3:58:21:4B:36:0A:B3:B7:57:B6:3E:B0:A5:FA:04:01:19:8C:D0:57
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Certificate issuer:       /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial:       7186FAFAAE5422371A4292196571245B257487F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
Manifest number:          17
Signing time:             Mon 27 Apr 2026 11:28:47 +0000
Manifest this update:     Mon 27 Apr 2026 11:23:47 +0000
Manifest next update:     Tue 28 Apr 2026 13:01:47 +0000
Files and hashes:         1: 3130332e322e3130382e302f32342d3234203d3e2034383038.roa (hash: eFmDShX0SCn55LBlBRwONvghGzn+bQasOw1NybACCu0=)
                          2: 3135302e3234322e3138342e302f32322d3232203d3e2034383437.roa (hash: Y8N5C50FvCCLn/xyY9rcQO6AKAgbj3XIBqIXbrEnKy8=)
                          3: 3130332e32392e31362e302f32342d3234203d3e2034383038.roa (hash: NZTsCMcy1d8h2SSnmv83bYWiZ5eRtyUrHm+R9VhcHt0=)
                          4: 3130332e32392e31362e302f32322d3232203d3e2034383437.roa (hash: 1/QrCM91cEAp0IFHVbI4BaSZ0Rh95G/CCmE65bEMxnY=)
                          5: 3130332e3233342e32302e302f32322d3232203d3e2034383437.roa (hash: 3Sf2cK0UGbpMwWCXP6aHaTDCxwRWV5EvpU9FnPvvEVw=)
                          6: 3130332e322e3130382e302f32322d3232203d3e2034383437.roa (hash: cydCGo2ReWdja/ncvFjWfPww6BkHCh4Zp8klqX6djZo=)
                          7: 3130332e3233342e32302e302f32322d3232203d3e2034383038.roa (hash: 1RwiW5PZ0dZNyR69uyotVAwJE13qo5GALu8AHBS1Pks=)
                          8: 3135302e3234322e3138342e302f32332d3233203d3e2034383437.roa (hash: VndDz1Y6QUjTwmmDnUsT1LkDL+jL6XzaDjRCKwyi4gg=)
                          9: 3230322e3138312e32382e302f32342d3234203d3e2034383038.roa (hash: OF5snOOzQ4QZvFF2ea5uLiwMV6UjymVMNgCG6edPl7g=)
                          10: 3130332e32392e31362e302f32342d3234203d3e2034383437.roa (hash: rTxX8Lm63872yMyTFDhE99npcKZQONNCC5ubifDKHEc=)
                          11: 3130332e37322e3137322e302f32342d3234203d3e2034383038.roa (hash: y0kAi5A0JlE2dyIdzp5K0xv84KpyLuvw+SOxgyrsAac=)
                          12: 62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl (hash: biBoWh0dFuOnBo+bGRVRydnp1ZMZwk6yELT9qXHTM7k=)
                          13: 3135302e3234322e3138342e302f32332d3233203d3e2034383038.roa (hash: XQXzyHnDzZIxmPYY4ZY3NAo3Bam3wXyVXD7ewPUr2U4=)
                          14: 3130332e322e3130382e302f32342d3234203d3e2034383437.roa (hash: UpJStsN0x9csFH+SpeM+wtkv4hreOMGlJvTo97F6t+c=)
                          15: 3130332e3230342e3233322e302f32322d3232203d3e2030.roa (hash: HqIVSqkOsbbEX3Dc1xZtrC0n0abYQxfwgJWCK7b459o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:fa:fa:ae:54:22:37:1a:42:92:19:65:71:24:5b:25:74:87:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
        Validity
            Not Before: Apr 27 11:23:47 2026 GMT
            Not After : Apr 28 13:01:47 2026 GMT
        Subject: CN=E358214B360AB3B757B63EB0A5FA0401198CD057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:84:c4:27:25:a2:69:e3:3f:06:75:cb:ea:
                    b6:8d:db:96:d3:0f:88:f5:8b:a4:c7:26:5e:d1:a0:
                    78:2a:65:48:a9:9b:8d:b2:92:cd:01:de:9d:77:7c:
                    cb:58:6f:90:a2:de:59:0c:04:72:92:93:34:5a:32:
                    66:a4:f8:72:29:b4:57:ba:9d:25:9e:b3:73:b7:8b:
                    15:63:23:cd:47:09:17:26:04:1d:04:d6:56:b5:6c:
                    50:52:09:49:55:dc:bc:e0:9e:49:0d:6b:5f:02:df:
                    07:a2:4e:0d:dc:84:54:d3:49:70:f5:25:c3:77:c0:
                    f7:0a:52:27:1b:6c:ab:1a:c8:01:2d:b4:91:88:a8:
                    13:9c:ae:5b:7b:d7:1c:bf:01:3c:30:f7:18:bf:65:
                    58:05:d0:b6:45:aa:e7:f3:74:6c:1c:28:f1:d4:e6:
                    c7:95:16:a5:7c:85:c1:4a:88:b8:38:ec:ce:0c:28:
                    b8:2d:f8:c9:d8:5d:3d:8c:d0:b7:02:c6:fd:76:1d:
                    90:d1:0f:31:9f:83:f2:77:99:c9:58:87:5f:cb:97:
                    8b:45:c9:fb:8a:d2:58:ff:96:10:b2:3b:71:2e:40:
                    81:57:47:65:da:99:50:7a:be:0e:41:23:64:b5:12:
                    ff:aa:ae:99:a5:ae:12:23:66:bf:6e:27:9c:c8:9f:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:58:21:4B:36:0A:B3:B7:57:B6:3E:B0:A5:FA:04:01:19:8C:D0:57
            X509v3 Authority Key Identifier:
                keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:3f:8f:eb:3e:f9:14:52:68:be:18:c4:ff:cd:04:d0:6c:9b:
         7f:0d:94:85:d6:ef:b5:6b:cd:aa:d3:45:9b:ff:aa:1e:53:5c:
         d5:d2:0c:82:25:b7:f6:1f:eb:32:1d:43:32:43:20:10:76:aa:
         83:22:f0:fd:d4:00:05:39:a2:c8:1f:74:4c:9a:3f:d3:2a:ce:
         d6:56:aa:ae:9c:e4:26:38:18:30:8f:9d:59:ee:d7:b9:6f:dc:
         9c:2c:92:59:59:b3:f0:80:b0:3a:93:cd:da:25:03:aa:fd:fb:
         a8:59:18:11:4a:92:e1:5f:2f:e0:19:8d:73:c8:e6:f3:d5:c0:
         48:8f:ad:e6:de:60:c6:e0:c9:2a:f2:d4:fd:fc:06:5a:c8:e8:
         93:0b:ba:b2:b9:3c:52:10:09:a2:b9:42:f3:10:26:9d:e7:f1:
         76:50:76:c6:a3:b7:3d:c4:86:cf:2f:95:69:b5:2b:8f:24:00:
         2f:d9:ce:34:3e:f5:e0:9b:4b:70:d6:54:dd:48:da:08:75:4a:
         9a:af:12:49:e2:8e:f7:7f:ad:a3:a4:9b:57:70:e5:4e:a8:2d:
         04:46:90:0f:07:74:d9:38:09:bf:aa:14:01:17:c3:32:fa:57:
         6b:2f:14:20:a6:d4:e1:ff:e2:b6:0e:f6:02:3c:9d:73:eb:e7:
         3b:f8:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:03:03 2026 by rpki-client