Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          upvD0WB19kPj7P9AhlOIRcFJmPRJGfmQ/J0K4HfMmzA=
Subject key identifier:   17:52:2C:00:07:72:E2:58:55:B7:3D:EC:E9:4D:E1:BE:89:18:40:46
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       4E2366B555CFFB04CC89F784F185F5FBB32350A1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          47
Signing time:             Thu 12 Mar 2026 16:38:39 +0000
Manifest this update:     Thu 12 Mar 2026 16:33:39 +0000
Manifest next update:     Fri 13 Mar 2026 19:08:39 +0000
Files and hashes:         1: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          2: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          3: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          4: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          5: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          6: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          7: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          8: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          9: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          10: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          11: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          12: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          13: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          14: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          15: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          16: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          17: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          18: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          19: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          20: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          21: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          22: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          23: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          24: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          25: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          26: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          27: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: 5CPp4Nep8l5oTyvWvNBfzo1QsuX6nVXx7MclCg7vydo=)
                          28: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          29: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          30: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          31: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          32: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:23:66:b5:55:cf:fb:04:cc:89:f7:84:f1:85:f5:fb:b3:23:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Mar 12 16:33:39 2026 GMT
            Not After : Mar 13 19:08:39 2026 GMT
        Subject: CN=17522C000772E25855B73DECE94DE1BE89184046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:ad:6c:36:fc:01:32:a7:7e:ab:8b:31:a9:
                    43:70:cb:9d:e1:99:79:63:e6:9e:f1:2c:31:a7:0f:
                    0b:87:c9:8f:2c:99:be:53:8c:fa:71:da:57:48:07:
                    73:38:75:88:d5:b3:f8:aa:a4:cd:c5:b7:63:11:a5:
                    97:ec:59:1b:89:d1:0a:89:28:2d:46:40:09:e2:71:
                    21:ca:69:7b:cb:79:7d:e4:71:6d:31:b5:e1:69:b5:
                    e6:49:a2:69:f2:62:24:8d:fe:47:ff:dc:b4:e6:52:
                    51:24:f3:6b:d2:1d:a8:80:e7:e5:af:9c:52:42:04:
                    d7:3d:b2:bf:38:3c:d5:35:b2:9e:25:e2:ce:c5:ba:
                    5a:fe:0f:05:20:ea:f2:b2:0f:ba:ae:ce:2a:80:dc:
                    f9:4a:80:0a:07:5d:0e:d6:cc:dc:ab:2b:96:ac:c5:
                    f6:f4:ee:3c:77:f6:65:97:21:4c:b0:cb:4a:0c:c7:
                    1d:d6:73:73:aa:5c:22:f9:c3:fc:b8:4e:03:d3:bd:
                    47:da:28:a9:ee:5a:96:87:03:23:0e:1f:ac:05:12:
                    22:73:c8:62:13:70:3e:d0:e4:79:75:17:d1:6e:31:
                    c2:29:77:59:a4:10:79:20:49:58:54:a2:f2:9b:ab:
                    6e:2b:52:8c:85:5d:8b:8b:4d:48:71:98:67:bc:6d:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:2C:00:07:72:E2:58:55:B7:3D:EC:E9:4D:E1:BE:89:18:40:46
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:28:89:ce:bf:87:28:cf:cb:46:86:ad:4f:80:53:40:43:
         e8:46:ca:fe:70:4e:37:9a:a2:ba:35:dc:b1:ee:6f:a5:40:11:
         87:0d:94:41:12:11:15:48:bf:09:62:fe:fb:0d:56:fd:16:41:
         42:e8:ed:04:f2:47:55:76:39:f8:c1:60:a6:9f:0e:92:25:b4:
         9b:f1:56:76:ee:69:79:76:c4:13:d9:ff:ac:44:74:2d:23:fe:
         76:52:88:aa:63:b7:59:73:af:22:7c:1e:c9:c5:fc:28:7f:20:
         a4:c4:8e:c3:70:0e:96:50:9f:4e:27:f5:92:1c:d6:96:3a:52:
         c1:cc:cf:29:ab:e2:e0:c2:73:eb:4d:07:3f:40:68:09:92:71:
         7c:89:f0:30:c1:10:d9:3d:c1:c2:ed:9f:b0:cd:13:2d:61:ff:
         40:2a:15:2d:c6:54:58:00:96:02:61:fa:ac:12:1f:4f:51:2d:
         e7:81:42:d5:2b:68:66:91:a2:d5:23:d4:eb:23:af:1d:8f:39:
         5c:8e:23:94:9e:09:8d:63:03:42:b7:83:45:40:b5:dc:36:5c:
         3e:7e:23:34:97:96:51:bc:b8:a2:54:b6:25:fa:1e:65:74:f9:
         db:52:91:32:1d:ed:03:ec:6f:16:6b:47:7d:93:b2:18:a6:bb:
         3a:52:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:24 2026 by rpki-client