Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
File:                     558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json)
Hash identifier:          lp9XJ/yEw7ZdXQeRsjA43wYbGVkO2VAToKtAN0QiFiE=
Subject key identifier:   F5:12:2D:81:D6:37:9B:83:C8:CB:84:A2:85:EB:A9:CB:4B:C6:C1:E8
Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
Certificate issuer:       /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Certificate serial:       2F17234E29A6924BE0BCB082B7C25AD4EF2E65D1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
Manifest number:          7F
Signing time:             Fri 28 Aug 2026 06:48:10 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:10 +0000
Manifest next update:     Mon 31 Aug 2026 09:02:10 +0000
Files and hashes:         1: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=)
                          2: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=)
                          3: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=)
                          4: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: br/fo3VwfD5TZh8ZitwjMF7xOLcusj6BbjX0S3nBP6s=)
                          5: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 09:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:17:23:4e:29:a6:92:4b:e0:bc:b0:82:b7:c2:5a:d4:ef:2e:65:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
        Validity
            Not Before: Aug 28 06:43:10 2026 GMT
            Not After : Aug 31 09:02:10 2026 GMT
        Subject: CN=F5122D81D6379B83C8CB84A285EBA9CB4BC6C1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:a3:3d:b7:3a:e3:44:0f:59:a3:98:ef:80:
                    13:6f:72:fe:d5:1e:b2:9d:be:e2:15:65:1e:cf:d1:
                    5e:96:e0:dd:d7:d5:15:d6:02:56:7f:dd:e5:18:3a:
                    b3:ee:20:6b:9b:1f:a4:47:ae:1c:92:9c:c6:04:b2:
                    3d:5a:d2:c6:d5:d5:86:ae:7d:5f:ea:2b:4e:03:d1:
                    8c:36:63:18:74:0f:93:30:b0:09:f8:54:3a:c9:a5:
                    0f:5d:83:d6:57:4a:af:d1:14:1a:ae:e9:92:32:69:
                    5c:df:89:2d:be:33:db:c4:73:c4:5e:7a:b1:11:0f:
                    99:da:6b:87:c9:1a:55:28:8b:14:0a:3d:31:aa:ee:
                    a6:06:97:4c:a5:31:37:41:13:b1:1a:99:2d:32:56:
                    2a:3c:0a:d9:3f:f2:30:18:98:2f:d2:10:98:34:56:
                    71:05:9f:0a:90:c7:48:4a:f6:37:0a:c5:76:00:e5:
                    1e:a5:90:85:8d:8f:8d:b2:db:2d:e0:42:47:4c:3b:
                    e0:90:8c:61:3d:e6:9a:d5:29:f8:4a:55:07:bb:e2:
                    c0:cd:ab:5a:c2:0d:0d:7d:55:60:69:ff:0e:3e:bd:
                    a3:2b:a1:89:d8:16:a6:6f:fa:7a:ff:d4:9e:f8:b2:
                    6d:41:1c:87:93:3b:df:91:17:c0:00:7f:dd:12:68:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:2D:81:D6:37:9B:83:C8:CB:84:A2:85:EB:A9:CB:4B:C6:C1:E8
            X509v3 Authority Key Identifier:
                keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:26:3e:2c:93:14:68:19:2d:44:2e:b9:32:e5:f1:d8:b9:04:
         83:d4:1a:2f:93:f7:1d:8e:21:f6:2e:8a:9e:63:3f:15:26:37:
         9d:f6:80:99:84:93:6c:51:95:d9:af:b8:fe:96:e2:54:72:a3:
         4f:af:87:66:2c:09:bd:0d:b8:c5:e5:71:45:8a:83:54:cb:50:
         f5:16:0b:86:6e:f4:34:f0:93:68:46:57:ec:7e:60:ab:fd:0d:
         c0:f1:6f:eb:52:46:ab:5c:53:d9:0f:e1:f3:11:36:c0:44:59:
         48:6b:be:49:f4:f7:d5:7d:98:d6:a2:04:51:86:31:f3:83:18:
         ee:18:24:32:5c:5a:90:34:e9:fc:6a:eb:dd:ba:7b:74:15:79:
         f4:4a:19:99:74:90:db:af:c3:7d:00:ad:ce:94:ac:dd:e0:98:
         ef:7b:50:71:3e:0d:be:cf:38:e5:ef:3f:68:24:20:41:39:ca:
         7c:7d:17:c1:de:c1:90:e2:67:81:1c:03:a7:77:53:b8:35:6d:
         9d:0b:6f:dd:2f:d5:72:09:f1:10:c7:48:07:91:c6:36:a4:90:
         4a:85:72:bb:09:9a:ee:fb:e1:a2:ce:e2:64:ca:8e:de:c1:71:
         a4:39:03:5a:6c:2a:ca:0e:2b:0b:0d:41:ad:4b:1a:11:8c:41:
         fb:ae:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:54:45 2026 by rpki-client