Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          CuQjt1k2S7W2kxLDQIWG9v2Av2zJGfwTLZdXysAgM90=
Subject key identifier:   CF:D9:AB:42:35:88:C8:D6:01:CD:60:07:C6:C9:19:F8:CE:AF:C8:61
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       05CAC93B63AEB53A7E066202323590E9F2C4AAEC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          FD
Signing time:             Sun 26 Jul 2026 10:56:25 +0000
Manifest this update:     Sun 26 Jul 2026 10:51:25 +0000
Manifest next update:     Mon 27 Jul 2026 13:55:25 +0000
Files and hashes:         1: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          2: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          3: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          4: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          5: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          6: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          7: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          8: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          9: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          10: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          11: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          12: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          13: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: AtXwmGGbSJJBexTMHpna67MsSs7T+Deu81gNVVTn3YA=)
                          14: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          15: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          16: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          17: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          18: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          19: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          20: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          21: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          22: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          23: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          24: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          25: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          26: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          27: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          28: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          29: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          30: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          31: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          32: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          33: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          34: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          35: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          36: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          37: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          38: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          39: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          40: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 13:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ca:c9:3b:63:ae:b5:3a:7e:06:62:02:32:35:90:e9:f2:c4:aa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Jul 26 10:51:25 2026 GMT
            Not After : Jul 27 13:55:25 2026 GMT
        Subject: CN=CFD9AB423588C8D601CD6007C6C919F8CEAFC861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:9b:9a:0b:4e:63:b8:87:60:fc:23:50:b1:
                    d4:76:9a:24:e6:28:8d:56:7b:59:69:0d:2f:aa:61:
                    cc:98:d0:c8:b6:35:af:18:0e:c7:e3:9f:15:a5:f9:
                    ab:a6:ff:74:b4:d5:fd:42:c0:41:c1:68:1f:b4:e3:
                    49:ce:6c:5a:f8:97:ba:ec:7c:eb:db:cc:fc:96:34:
                    25:21:35:c1:f7:7e:6a:0b:32:f3:09:9c:70:9a:75:
                    0e:7c:82:a9:23:80:12:52:ec:c9:c2:01:ca:1f:5c:
                    01:c3:0b:85:a6:01:92:5e:6d:c3:dc:45:f4:a0:17:
                    84:0f:a1:4a:93:3d:76:18:b0:5d:77:a7:e4:71:4a:
                    a3:60:08:88:ab:a5:0d:c4:0e:ee:4f:ee:e3:e5:03:
                    7a:67:aa:45:d7:41:01:c6:b7:6b:b9:70:a2:f9:16:
                    8b:dd:88:b3:41:d9:b4:e2:38:e1:e9:07:2c:31:33:
                    e0:17:16:03:90:a6:33:26:2e:d3:0f:f6:ce:5f:ed:
                    e2:05:84:82:e6:41:58:fa:a2:ed:c2:eb:e4:7d:08:
                    05:9f:3b:66:a5:49:7c:70:a7:9f:4a:ad:0d:bb:e6:
                    31:70:2d:53:03:f1:04:d4:e4:45:2d:ad:e0:30:01:
                    d0:b2:14:cd:ae:c9:39:f1:2d:fe:3e:9a:c1:a3:07:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:AB:42:35:88:C8:D6:01:CD:60:07:C6:C9:19:F8:CE:AF:C8:61
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4c:96:5f:53:d6:0a:ef:d2:04:2d:1d:05:c7:de:44:1d:d4:
         fa:3e:ea:ad:db:7d:11:9b:e5:f0:fc:5e:fb:b7:49:12:12:0b:
         64:68:30:6c:03:85:a3:0c:c3:67:e7:ae:5f:39:0c:de:8e:f6:
         98:9e:ba:bc:2e:57:fe:0f:ad:c2:02:64:d2:13:f9:54:68:a6:
         d0:1e:27:09:c4:0f:2b:4b:40:01:a1:c4:90:43:39:2f:5a:49:
         67:1c:33:54:53:4c:49:1e:79:e1:15:6e:f8:40:ea:c7:95:1c:
         b7:b7:c7:51:8a:d3:a9:68:ba:e7:a6:99:87:da:53:a5:dd:fa:
         4a:9d:f3:58:e3:50:c2:72:0e:e7:68:67:8e:39:7a:91:8b:2c:
         d0:ad:0b:be:87:1a:fb:31:64:c3:51:f5:52:dd:cc:f9:a6:a9:
         f1:54:14:36:f0:c0:e5:e5:f6:07:4c:a4:c4:a3:bf:e0:73:4b:
         33:5f:82:2d:2a:d2:4e:d1:47:06:7d:bc:b3:4c:86:11:2e:fb:
         62:d7:7b:34:3e:27:3e:0b:0c:e7:aa:05:8b:48:a6:33:00:5a:
         76:7e:6a:bc:6a:1c:02:c9:ee:15:44:a9:14:ff:35:c5:3f:70:
         42:07:c5:09:16:32:ab:01:10:3a:b8:d4:6d:a2:bb:c2:79:d0:
         fa:f8:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:02 2026 by rpki-client