Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          Qvvu8Sgk2gx13Vq1PaCZ7x2O7pFjyXgCLPIspvKRjRw=
Subject key identifier:   F3:45:D7:AF:63:07:B7:7B:C1:50:E2:9F:70:57:8B:10:E6:88:EB:86
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       5C4AE0F7F76D11C06089425A830F0B88ECEB8E76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          85
Signing time:             Mon 27 Apr 2026 06:23:41 +0000
Manifest this update:     Mon 27 Apr 2026 06:18:41 +0000
Manifest next update:     Tue 28 Apr 2026 09:25:41 +0000
Files and hashes:         1: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          2: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          3: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: JjsQCd2u36uU5XTknuF5d92yqnGFcx2lFZ1NIVRIPRE=)
                          4: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          5: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          6: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          7: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          8: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          9: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          10: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          11: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          12: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          13: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          14: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          15: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          16: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          17: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          18: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          19: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          20: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          21: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          22: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          23: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          24: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          25: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          26: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          27: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          28: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          29: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          30: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          31: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          32: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          33: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          34: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          35: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          36: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          37: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
                          38: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          39: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          40: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4a:e0:f7:f7:6d:11:c0:60:89:42:5a:83:0f:0b:88:ec:eb:8e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Apr 27 06:18:41 2026 GMT
            Not After : Apr 28 09:25:41 2026 GMT
        Subject: CN=F345D7AF6307B77BC150E29F70578B10E688EB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:3f:c0:8a:25:e1:2d:10:06:e7:f9:89:43:
                    75:02:b6:56:2c:a3:63:8f:87:76:e6:72:3c:f7:90:
                    54:96:8d:f0:f9:07:35:85:fd:98:8c:08:a6:d8:c4:
                    f0:a1:9a:ca:4b:52:e7:e4:a6:37:6a:ed:c2:f6:fe:
                    18:4e:3e:b5:f3:4f:2d:1f:f3:fb:80:78:5d:86:21:
                    bb:71:49:0f:e8:84:ee:74:67:7f:a5:87:f6:a0:71:
                    26:1b:84:e2:3a:c4:d0:96:34:e3:4c:9b:78:2c:ee:
                    d1:7a:c0:23:cb:eb:8c:e0:0b:9d:9b:04:eb:43:59:
                    2b:31:a2:de:a4:97:f2:dc:f8:18:1e:29:9d:00:62:
                    b8:82:76:7d:26:6c:1b:ba:8b:31:68:bf:b7:01:4d:
                    d7:fa:66:fd:d2:fc:24:95:06:ba:9b:c9:6e:18:dd:
                    4a:6d:a7:54:52:74:0c:6b:ea:c1:6f:1f:a6:b7:19:
                    49:0c:f2:23:ca:11:85:0c:ff:c6:00:2a:a2:fd:af:
                    c2:ac:08:60:3c:d4:b3:57:16:85:fb:3e:41:6c:27:
                    55:44:85:09:c7:92:65:19:eb:d6:a3:95:0c:a0:fb:
                    82:1c:1f:09:86:4d:0b:45:b2:59:8a:20:33:49:05:
                    da:85:16:18:8f:74:71:54:7f:9e:87:61:b2:93:39:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:D7:AF:63:07:B7:7B:C1:50:E2:9F:70:57:8B:10:E6:88:EB:86
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:2c:f0:45:36:88:18:d8:93:2a:04:a3:16:4b:f4:b3:75:
         c2:68:67:3c:42:8b:07:30:b8:f9:76:89:68:9b:f0:c9:29:51:
         45:45:7f:dd:d4:51:ec:9b:4d:07:2a:f1:2c:e2:02:43:f8:59:
         70:2f:60:3c:7e:a7:d9:e6:89:7d:0a:25:52:f1:ba:32:88:75:
         64:f2:d6:70:dd:94:21:55:92:4f:65:5e:02:0e:df:9c:21:9d:
         c0:98:b9:00:62:87:54:42:a3:6e:97:b5:96:88:29:45:a2:f4:
         5f:35:f5:0c:09:af:06:eb:3c:42:cb:dd:90:19:c3:6f:0d:bc:
         f9:3e:22:cf:59:7d:a4:38:c6:bd:3f:aa:54:2f:96:83:37:dc:
         a4:2a:03:28:b9:09:17:44:09:ab:d7:c4:c1:c1:2e:ee:f3:8f:
         c7:a9:8d:db:32:58:71:44:45:c6:f2:8f:91:a1:0b:09:ad:35:
         57:85:6c:17:a0:1d:fa:9b:40:3c:c2:e6:17:db:ca:ff:e0:f2:
         51:47:ab:cf:22:75:f3:10:e9:64:97:06:66:03:0f:f8:2d:33:
         60:e7:20:c1:23:94:8b:77:53:c0:e2:f9:75:09:6b:9a:34:c0:
         9b:2e:95:ae:18:ff:28:71:a9:c1:a2:6f:72:52:c3:cd:ac:52:
         61:15:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:21 2026 by rpki-client