Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File:                     FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier:          myGQA0lGoFuImVTuitWfIMjQLg9gmDJKoi2lLhz1f2E=
Subject key identifier:   B8:D4:5E:CB:5A:FF:FD:02:D8:D4:D6:92:B8:2B:1B:C8:79:46:48:E5
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       58934B9D5351C0E5F4E1D42ECCC821F492EF09E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number:          0F
Signing time:             Fri 29 May 2026 08:08:29 +0000
Manifest this update:     Fri 29 May 2026 08:03:29 +0000
Manifest next update:     Sat 30 May 2026 09:53:29 +0000
Files and hashes:         1: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
                          2: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
                          3: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
                          4: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
                          5: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
                          6: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
                          7: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
                          8: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: kYn4+sAtWcgKLFInjUk8GFY0xIsypIRT5MXmdEa322M=)
                          9: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
                          10: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
                          11: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
                          12: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
                          13: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
                          14: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
                          15: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
                          16: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:93:4b:9d:53:51:c0:e5:f4:e1:d4:2e:cc:c8:21:f4:92:ef:09:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:29 2026 GMT
            Not After : May 30 09:53:29 2026 GMT
        Subject: CN=B8D45ECB5AFFFD02D8D4D692B82B1BC8794648E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:b5:65:06:13:28:93:14:47:4a:e1:a4:07:
                    64:34:f4:e4:fe:44:de:07:f5:91:e9:24:7b:55:92:
                    d9:6a:26:ac:65:47:b8:77:b0:26:ad:f2:47:91:fa:
                    f0:73:c4:64:ba:6d:55:f2:e7:08:44:68:d5:49:32:
                    4e:d5:30:48:7c:d7:27:e7:d8:17:e2:3f:a7:1d:8f:
                    10:5c:d0:15:07:6f:15:e7:68:c1:ae:20:0b:f5:58:
                    b8:96:72:99:fa:67:86:57:46:22:f7:e2:d4:9f:68:
                    90:51:89:e9:08:45:3b:b4:cb:16:6f:8e:7c:8d:1b:
                    8a:40:b1:80:68:b8:4f:cd:1b:aa:50:ce:68:47:1d:
                    6a:8c:9c:bd:e0:1e:63:47:29:df:7a:ce:22:17:eb:
                    53:a0:59:09:38:db:9e:4d:5b:77:37:67:df:ed:8a:
                    0a:a6:71:20:f0:a3:fe:b4:f5:4e:06:da:87:7e:95:
                    6a:a7:3b:46:82:54:38:26:e0:bb:91:11:68:82:20:
                    d0:ab:ca:58:93:19:1a:85:31:23:df:16:22:51:8b:
                    62:99:27:d2:56:64:47:62:94:55:97:f7:da:b6:63:
                    1f:98:24:70:5d:a6:a5:0a:1f:4c:f5:bd:01:0f:6e:
                    3a:6d:d8:da:a3:3e:7c:f0:c4:85:b7:ca:04:87:f1:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:5E:CB:5A:FF:FD:02:D8:D4:D6:92:B8:2B:1B:C8:79:46:48:E5
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:f1:82:c7:83:78:fe:c0:42:f5:86:61:f0:e4:02:76:ea:
         4a:6e:29:27:9f:ce:48:90:01:47:2f:54:35:88:7f:30:e4:b2:
         e5:f8:cf:40:b0:8a:b0:d9:b4:ba:b8:23:00:b0:f3:60:8d:9d:
         c6:7f:b3:ed:a3:ce:3f:8d:7c:c0:82:08:d5:2d:4e:18:10:a6:
         1f:5e:47:5c:ae:03:27:b4:b3:c1:18:34:00:02:cd:a9:d5:d1:
         d6:e4:6d:ac:22:06:82:d8:df:62:bc:ca:ff:da:5e:75:21:b5:
         91:35:29:81:bd:b8:10:4a:a4:db:3b:25:fc:7e:c1:be:8c:f3:
         61:04:c0:b4:d8:4e:50:16:31:06:9d:6c:21:13:12:06:93:0f:
         65:70:97:ce:d9:33:71:b9:58:ee:4f:a2:22:a4:ac:d3:7d:a8:
         af:ba:9f:ab:e3:f4:b9:eb:1a:9d:3c:72:22:5d:13:b2:99:2d:
         7e:61:fa:42:58:b5:69:df:f9:8c:1b:dc:4b:1b:b5:e8:11:b8:
         d3:69:f9:3d:72:76:86:f8:38:72:ec:74:5e:3f:23:45:e3:10:
         c6:8e:fc:a4:12:6b:04:dc:19:d4:3f:f5:63:de:dd:42:ee:19:
         fe:e5:cf:60:28:14:1d:7b:75:de:f5:d5:e7:3a:a0:08:e9:9f:
         d6:6d:72:44
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWJNLnVNRwOX04dQuzMgh9JLvCecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBB
NDlEQTI5RTAeFw0yNjA1MjkwODAzMjlaFw0yNjA1MzAwOTUzMjlaMDMxMTAvBgNV
BAMTKEI4RDQ1RUNCNUFGRkZEMDJEOEQ0RDY5MkI4MkIxQkM4Nzk0NjQ4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17rVlBhMokxRHSuGkB2Q09OT+
RN4H9ZHpJHtVktlqJqxlR7h3sCat8keR+vBzxGS6bVXy5whEaNVJMk7VMEh81yfn
2BfiP6cdjxBc0BUHbxXnaMGuIAv1WLiWcpn6Z4ZXRiL34tSfaJBRiekIRTu0yxZv
jnyNG4pAsYBouE/NG6pQzmhHHWqMnL3gHmNHKd96ziIX61OgWQk4255NW3c3Z9/t
igqmcSDwo/609U4G2od+lWqnO0aCVDgm4LuREWiCINCryliTGRqFMSPfFiJRi2KZ
J9JWZEdilFWX99q2Yx+YJHBdpqUKH0z1vQEPbjpt2NqjPnzwxIW3ygSH8Z4lAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUuNRey1r//QLY1NaSuCsbyHlGSOUwHwYDVR0j
BBgwFoAU+mJYjDtNPN9Uch0CQduYMKSdop4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjU3NzEwNjU0NzU3Mjc1NS8wL0ZBNjI1ODhDM0I0RDNDREY1NDcyMUQwMjQxREI5
ODMwQTQ5REEyOUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBBNDlEQTI5RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI1NzcxMDY1NDc1NzI3NTUvMC9GQTYyNTg4QzNCNEQz
Q0RGNTQ3MjFEMDI0MURCOTgzMEE0OURBMjlFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai3xgseDeP7A
QvWGYfDkAnbqSm4pJ5/OSJABRy9UNYh/MOSy5fjPQLCKsNm0urgjALDzYI2dxn+z
7aPOP418wIII1S1OGBCmH15HXK4DJ7SzwRg0AALNqdXR1uRtrCIGgtjfYrzK/9pe
dSG1kTUpgb24EEqk2zsl/H7BvozzYQTAtNhOUBYxBp1sIRMSBpMPZXCXztkzcblY
7k+iIqSs032or7qfq+P0uesanTxyIl0TspktfmH6Qli1ad/5jBvcSxu16BG402n5
PXJ2hvg4cux0Xj8jReMQxo78pBJrBNwZ1D/1Y97dQu4Z/uXPYCgUHXt13vXV5zqg
COmf1m1yRA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:02:57 2026 by rpki-client