Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File:                     2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier:          +HP3ruBjCCqOatsnbJ75cTvF84QPYeOJd+dIYpyydQw=
Subject key identifier:   22:2C:7D:E2:83:B7:21:B8:A2:FC:1A:52:53:DF:F1:D5:1F:F2:BE:68
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       66D86A055C1051C2D4B3EDD5E074028A852B68A1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number:          C4
Signing time:             Fri 29 May 2026 15:23:01 +0000
Manifest this update:     Fri 29 May 2026 15:18:01 +0000
Manifest next update:     Sat 30 May 2026 17:54:01 +0000
Files and hashes:         1: 3230322e3137302e3232332e302f32342d3234203d3e203234343237.roa (hash: XwAGEo52R3/295sfFWGTsHRJeXRAQPtlmlUvnH8SLCk=)
                          2: 3230322e3137302e3231362e302f32342d3234203d3e203234343237.roa (hash: VAhlOybzXKl74DjpAZWqA5wWuw72zIg3z2/LDN7OZHU=)
                          3: 3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa (hash: HId4vrNLiK+ND0zQR5D2ItU9HGeVy1wXldT93pOdLOc=)
                          4: 3230322e3137302e3231372e302f32342d3234203d3e203234343237.roa (hash: EXQ+5nHfL2CSocP6gK127ORzb92cBqRvxJuWAIUrj3c=)
                          5: 3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa (hash: eLf51BLu0K8JOwlH6IFc5jAcFpHJFCctgrNJUcADl74=)
                          6: 3131392e3233352e3134332e302f32342d3234203d3e203234343237.roa (hash: Ol89eMrUaCaAzxFLMX+QHnOCMpZp0gTaHt7lzoiplTc=)
                          7: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: /kA2Cc+TV25NsFA+dh5VdFS2uh7XxWhHiLGDhaEJcjs=)
                          8: 3131392e3233352e3136372e302f32342d3234203d3e203234343237.roa (hash: EcBAZ9E6nz/Jb75uEjGHvAGmLGTaXjfuFeKbWfc4enE=)
                          9: 3131392e3233352e3138352e302f32342d3234203d3e203234343237.roa (hash: y+0yz/Orh5jDhKBtMq/BWVyUvkwfKPK9TJ2TBjSxOBc=)
                          10: 3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa (hash: pCqCdfeTBDZ1ufXIAdXFKHOH0guOfd8eNNLcRHIYyf8=)
                          11: 3131392e3233352e3133362e302f32342d3234203d3e203234343237.roa (hash: P3jXS0lLFc4DM3hVmFyaQ5NRZvxXxC81SrFQZS9hz8Y=)
                          12: 3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa (hash: gKGf9ncPC0mDmhttmgm4Nc+M5A6UymruGAO1ADoEIsY=)
                          13: 3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa (hash: 0V8lM1Bn5F+GN6qFR/iyuC3X56n7vTa4N4BWsHp44As=)
                          14: 3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa (hash: lv53noT2X5eaiI1tnOSXvfADsas3LsuXeApSZgepJgg=)
                          15: 3131392e3233352e3133382e302f32342d3234203d3e203234343237.roa (hash: 7lq4F+kN4dfPPhClDRlyHjLRkbdsAPEeIZnDaZUPfho=)
                          16: 3230322e3137302e3231382e302f32342d3234203d3e203234343237.roa (hash: JSYukomI+EXQlc3XoizcwTgOHfV+PE8qH5q8KtFf0xQ=)
                          17: 3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa (hash: cRHV7X3G/PQJ92A12wotA3DpyVsL+d9PuLjA/A0Nb9c=)
                          18: 3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa (hash: 2XKwc+tclrWbdl8kq+8mfw+izHBOIwST00sm/13O4fc=)
                          19: 3131392e3233352e3133302e302f32342d3234203d3e203234343237.roa (hash: HoRk+vOtUZtbIjrp6u/EWfXW2czPAr3G6Df5irzJNwk=)
                          20: 3131392e3233352e3135312e302f32342d3234203d3e203234343237.roa (hash: hYt2A/jghiSr+S1LZEbd4lSZNEEFRojqYjsnEer5F04=)
                          21: 3131392e3233352e3134342e302f32342d3234203d3e203234343237.roa (hash: ZIpXfUCxWXx/Yh12y5PNrm1YJbqJK3Qj4q0RnCjYmRk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d8:6a:05:5c:10:51:c2:d4:b3:ed:d5:e0:74:02:8a:85:2b:68:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: May 29 15:18:01 2026 GMT
            Not After : May 30 17:54:01 2026 GMT
        Subject: CN=222C7DE283B721B8A2FC1A5253DFF1D51FF2BE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:74:58:26:c1:65:78:6f:78:42:9f:7c:5f:
                    ed:df:d3:1f:d8:88:a8:59:e0:ff:01:99:c9:17:ea:
                    e7:3b:3d:fa:b2:22:9b:95:84:ce:8f:42:9d:43:0e:
                    3d:6d:26:ad:0e:4c:d6:82:ca:8d:74:6f:50:da:5f:
                    a3:2c:20:8e:3a:3f:d5:fb:69:fc:d2:bb:71:57:a8:
                    65:74:b7:07:cd:59:7f:87:c9:f1:7a:3b:e4:85:18:
                    ef:54:45:83:a6:55:a5:d1:9a:2e:a4:5e:12:15:37:
                    bd:da:17:d7:8d:84:7b:2b:4a:45:6d:81:5a:60:42:
                    19:4c:b3:71:45:94:57:0d:5e:97:11:58:1e:c4:77:
                    59:26:a6:c0:91:4c:06:cf:18:40:7e:49:d5:4c:33:
                    d5:37:7d:01:19:67:e1:79:3d:77:33:0b:01:cb:43:
                    2f:40:f2:04:fe:98:be:f9:ff:d7:ec:82:ea:3f:8d:
                    3e:f1:8c:44:49:6a:08:18:50:e2:70:79:fa:20:76:
                    b4:3c:48:24:6e:92:bf:76:16:9b:05:66:27:2f:57:
                    f0:fc:ef:11:6e:a7:82:37:fb:6c:ac:12:14:55:6e:
                    b1:06:69:6e:be:95:fe:3b:b7:74:f7:3a:80:7c:2a:
                    49:ad:67:4a:48:a1:21:6f:07:96:5d:5b:33:37:b3:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:7D:E2:83:B7:21:B8:A2:FC:1A:52:53:DF:F1:D5:1F:F2:BE:68
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:42:c8:1f:a1:a6:b9:6c:ab:05:9d:bd:b3:de:c8:e5:c6:
         24:2e:88:3b:e0:fb:81:30:b6:3d:70:bb:92:ea:b1:75:79:c7:
         19:20:57:85:58:9f:ad:10:c3:50:ba:b8:1f:f2:3c:46:29:29:
         12:b4:8c:99:da:4b:2d:51:8a:9f:73:87:9c:83:3b:de:ed:5f:
         8a:ec:85:c4:2d:aa:b2:c7:8d:d2:25:20:52:a7:1f:81:8e:81:
         f0:9c:9e:fe:90:91:fd:f5:d6:30:60:80:af:82:f1:48:d8:37:
         f1:f2:21:81:e3:ec:64:2c:79:7c:71:46:b2:79:14:65:65:a6:
         ad:b1:ca:6a:cf:99:0c:e1:42:fd:ba:37:15:8c:ce:06:f7:b0:
         39:f5:2b:06:80:65:8c:eb:53:e1:1e:96:ba:31:89:df:4a:fb:
         68:7f:24:0b:31:97:c4:d9:e9:3b:a7:d2:b5:ec:21:71:a7:ed:
         bd:10:e1:3a:38:fd:d0:a5:62:ae:c6:9c:3b:a5:fc:43:e8:96:
         7e:18:40:08:06:51:83:de:7c:6a:22:fb:39:8d:13:42:b6:43:
         d1:7d:37:3f:c0:db:a0:a2:eb:85:a6:3a:0a:9c:b1:e9:19:cc:
         d0:9d:03:03:c1:63:2f:e2:d4:53:6e:a7:20:f4:47:0d:c5:4c:
         6b:0e:bb:34
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZthqBVwQUcLUs+3V4HQCioUraKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG
NDgyRDhENTAeFw0yNjA1MjkxNTE4MDFaFw0yNjA1MzAxNzU0MDFaMDMxMTAvBgNV
BAMTKDIyMkM3REUyODNCNzIxQjhBMkZDMUE1MjUzREZGMUQ1MUZGMkJFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNXRYJsFleG94Qp98X+3f0x/Y
iKhZ4P8BmckX6uc7PfqyIpuVhM6PQp1DDj1tJq0OTNaCyo10b1DaX6MsII46P9X7
afzSu3FXqGV0twfNWX+HyfF6O+SFGO9URYOmVaXRmi6kXhIVN73aF9eNhHsrSkVt
gVpgQhlMs3FFlFcNXpcRWB7Ed1kmpsCRTAbPGEB+SdVMM9U3fQEZZ+F5PXczCwHL
Qy9A8gT+mL75/9fsguo/jT7xjERJaggYUOJwefogdrQ8SCRukr92FpsFZicvV/D8
7xFup4I3+2ysEhRVbrEGaW6+lf47t3T3OoB8KkmtZ0pIoSFvB5ZdWzM3sx9zAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUIix94oO3Ibii/BpSU9/x1R/yvmgwHwYDVR0j
BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB
RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw
MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB15CyB+hprls
qwWdvbPeyOXGJC6IO+D7gTC2PXC7kuqxdXnHGSBXhVifrRDDULq4H/I8RikpErSM
mdpLLVGKn3OHnIM73u1fiuyFxC2qsseN0iUgUqcfgY6B8Jye/pCR/fXWMGCAr4Lx
SNg38fIhgePsZCx5fHFGsnkUZWWmrbHKas+ZDOFC/bo3FYzOBvewOfUrBoBljOtT
4R6WujGJ30r7aH8kCzGXxNnpO6fStewhcaftvRDhOjj90KVirsacO6X8Q+iWfhhA
CAZRg958aiL7OY0TQrZD0X03P8DboKLrhaY6Cpyx6RnM0J0DA8FjL+LUU26nIPRH
DcVMaw67NA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:05:08 2026 by rpki-client