Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          CYXCISFnOOzgHWlAfy/EEXabB3TlJFijskqG6gM+/bM=
Subject key identifier:   52:E6:A6:DD:D1:91:D5:EA:48:D2:92:B4:26:32:A6:E7:B9:1A:73:A6
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       3FDE85D910175833A6DC7A3E55EA534A599CBB43
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          C1
Signing time:             Thu 11 Jun 2026 05:28:20 +0000
Manifest this update:     Thu 11 Jun 2026 05:23:20 +0000
Manifest next update:     Fri 12 Jun 2026 09:05:20 +0000
Files and hashes:         1: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          2: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          3: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          4: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          5: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          6: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          7: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          8: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          9: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          10: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          11: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          12: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          13: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          14: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          15: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          16: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          17: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          18: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          19: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          20: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          21: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
                          22: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          23: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          24: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          25: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          26: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          27: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          28: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          29: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          30: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          31: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: Am8k0Tj+hqp1VB9pIeGBT2zBEc7JN0PzaFiaTtNP+M8=)
                          32: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          33: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          34: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          35: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          36: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          37: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          38: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          39: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          40: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:85:d9:10:17:58:33:a6:dc:7a:3e:55:ea:53:4a:59:9c:bb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Jun 11 05:23:20 2026 GMT
            Not After : Jun 12 09:05:20 2026 GMT
        Subject: CN=52E6A6DDD191D5EA48D292B42632A6E7B91A73A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:21:e4:f5:52:86:5e:56:19:ac:b0:1a:1e:
                    c8:15:62:64:cb:45:a8:13:e2:57:64:24:05:8e:77:
                    b0:d5:91:0b:96:ac:a9:10:3d:d4:8f:7a:05:be:c6:
                    22:df:b5:c7:bd:93:34:69:fe:1a:69:26:df:53:f4:
                    db:74:f5:dc:c2:9a:b2:ac:04:3b:61:03:6b:26:f9:
                    40:c5:18:06:2b:29:79:9b:2e:53:76:7a:0e:4b:95:
                    ab:c6:dc:41:45:19:f1:94:a0:6e:bd:3e:07:c1:cb:
                    de:8d:aa:89:15:ae:dd:05:91:a4:5c:c9:1f:d3:82:
                    47:37:bd:dd:2a:a3:a4:6c:be:a5:f6:3a:f4:7c:d7:
                    4b:33:e7:11:f2:c8:0d:10:91:c0:e3:bf:54:c1:1c:
                    fa:e4:e0:ad:9c:d3:20:20:8b:d1:85:d6:f7:da:ac:
                    bf:03:a4:9f:81:24:cc:2d:21:53:a4:70:ac:66:da:
                    be:dc:93:73:bb:c9:28:d1:67:b4:ac:4d:b0:cc:6f:
                    a6:ca:e0:7e:b6:26:1f:f0:f1:b7:61:bd:c8:cf:7b:
                    7e:fc:04:1c:5c:a3:d3:34:0a:3f:8e:c1:5e:ba:e7:
                    c9:c7:da:8d:92:6c:be:61:27:e4:67:60:bc:ff:61:
                    64:30:b9:fb:45:1e:f1:66:57:8a:b3:c1:9c:5c:10:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:A6:DD:D1:91:D5:EA:48:D2:92:B4:26:32:A6:E7:B9:1A:73:A6
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:d8:7b:f8:dd:5a:34:30:d1:17:06:8c:d1:75:c1:c5:a5:
         55:b0:3f:03:1d:85:d2:9a:b4:63:e1:73:a0:ee:0f:22:71:94:
         ca:11:83:af:c6:c2:b3:74:d0:e3:ac:56:d9:53:fa:70:56:43:
         28:c2:e4:1d:29:1d:8a:d5:c4:e8:66:70:aa:4a:73:7d:9a:78:
         b1:08:8c:c0:a9:a1:e0:d7:84:da:80:96:b9:85:43:ad:35:b4:
         4f:64:15:4b:90:36:11:d9:28:4c:04:28:eb:95:56:66:c5:47:
         83:b6:c9:c8:b2:5d:11:18:69:a1:37:5f:8a:41:7b:1f:31:08:
         44:27:34:c6:08:b6:a8:fd:39:0f:98:86:f7:e6:66:20:4e:7f:
         52:21:67:c0:93:4d:33:11:c4:74:f6:13:0e:2f:cf:cd:2e:d7:
         1c:10:71:9b:fc:a0:4b:d7:29:26:5b:e5:25:a8:0d:5f:fe:28:
         66:e4:7c:3b:94:08:d7:76:8d:8e:da:24:be:43:d3:45:c7:62:
         05:48:ba:c0:94:f8:b5:ef:7f:18:15:b8:62:20:b4:ae:be:d2:
         3c:e7:cc:dd:82:1f:bf:ab:ca:e0:97:59:1b:c5:3c:67:02:b9:
         0b:99:23:dd:53:7e:64:f6:31:43:bf:98:04:ca:22:35:3f:98:
         98:86:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:26 2026 by rpki-client