Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
File:                     AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json)
Hash identifier:          IyzVQvizHPfyi+psnRyg3SAdajTEAArnH3s41sYMgog=
Subject key identifier:   84:55:A7:4E:5D:50:08:40:15:5C:C4:ED:3D:00:78:98:E8:FE:73:C9
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       6BDFBD2041F50C18BD196A961A114CF287006D17
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
Manifest number:          47
Signing time:             Fri 13 Mar 2026 01:18:39 +0000
Manifest this update:     Fri 13 Mar 2026 01:13:39 +0000
Manifest next update:     Sat 14 Mar 2026 02:31:39 +0000
Files and hashes:         1: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=)
                          2: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=)
                          3: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=)
                          4: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=)
                          5: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=)
                          6: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=)
                          7: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=)
                          8: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=)
                          9: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=)
                          10: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=)
                          11: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=)
                          12: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=)
                          13: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=)
                          14: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=)
                          15: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=)
                          16: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=)
                          17: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=)
                          18: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=)
                          19: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: eBtib5CL58R2eEmXVuaVdJw+ymEn+W55hKpz3170lR4=)
                          20: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=)
                          21: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=)
                          22: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=)
                          23: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=)
                          24: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=)
                          25: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=)
                          26: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=)
                          27: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=)
                          28: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=)
                          29: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=)
                          30: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=)
                          31: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=)
                          32: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=)
                          33: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=)
                          34: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=)
                          35: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=)
                          36: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=)
                          37: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=)
                          38: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=)
                          39: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=)
                          40: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:bd:20:41:f5:0c:18:bd:19:6a:96:1a:11:4c:f2:87:00:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Mar 13 01:13:39 2026 GMT
            Not After : Mar 14 02:31:39 2026 GMT
        Subject: CN=8455A74E5D500840155CC4ED3D007898E8FE73C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:73:20:7b:85:49:cb:ae:e1:97:6c:e5:ab:
                    16:86:04:c1:5e:de:52:f2:c3:97:be:bc:b6:55:a6:
                    40:40:e9:ba:81:a7:12:ea:c0:6c:89:49:f6:69:a8:
                    9d:c7:56:4a:10:d0:07:f4:6a:d0:21:68:58:ba:8d:
                    b6:f7:13:13:44:08:5e:e5:21:fa:4d:a3:c6:2d:e9:
                    d8:98:bc:a2:6e:f5:06:99:4b:8c:06:57:e7:9a:0c:
                    58:e4:0b:c2:74:66:2c:74:1d:98:60:97:a0:ad:78:
                    ab:e8:bf:c7:2d:37:68:16:89:40:c9:e7:91:a9:66:
                    df:32:7d:78:5c:04:f4:9e:98:b3:7f:98:53:23:ff:
                    e5:05:00:b1:d4:01:13:1b:68:2a:93:ad:ae:60:0d:
                    27:b3:5b:a6:60:97:6e:01:49:93:88:7e:e5:d9:ae:
                    78:95:42:2c:fe:a2:1b:6e:15:65:b7:2e:8e:b7:76:
                    6a:f4:e8:37:60:9b:c0:89:4f:08:82:8a:da:dd:28:
                    be:46:8c:5e:6b:38:cf:89:b8:80:6f:7d:04:e9:a0:
                    36:9d:f3:ca:07:a9:58:2f:3d:60:1c:e4:a8:97:51:
                    bc:94:85:6b:0c:ac:c4:f7:9b:2e:ea:2c:a0:ef:38:
                    e9:d7:36:b9:58:31:38:b6:78:93:d5:99:f3:43:ba:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:A7:4E:5D:50:08:40:15:5C:C4:ED:3D:00:78:98:E8:FE:73:C9
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:0b:68:14:24:59:d9:9e:16:61:3a:14:7a:75:df:f9:ec:
         ae:c5:a2:bd:a6:20:89:ff:7e:2f:1e:d3:2f:ba:5f:a0:64:52:
         1a:ac:88:a8:c7:8b:36:2d:a5:a4:10:ca:41:52:24:ab:9e:39:
         9e:70:24:36:21:ec:44:cf:4b:f5:10:86:1d:35:68:72:ba:9f:
         c0:db:e8:9f:38:b3:df:ed:11:b9:cb:16:01:98:ae:df:a4:c3:
         12:33:d9:36:65:82:65:d6:c0:c1:40:47:55:37:3a:40:75:9e:
         d5:7c:9a:11:53:81:8f:e1:be:f2:26:3a:14:fc:9b:78:51:31:
         1c:8f:13:13:33:d9:89:8f:69:3a:4a:c0:97:9d:f7:2d:70:6d:
         ee:92:3c:28:0f:c7:f0:e4:3c:d8:b0:69:2d:b0:9e:ee:19:5f:
         8e:88:ef:1a:ff:ea:f1:ff:14:25:65:24:46:34:05:dc:13:7b:
         b2:1e:e3:72:f4:a7:48:2c:d5:67:ff:18:74:5f:f4:23:c0:59:
         1e:5d:7e:8b:2f:d4:fe:ff:71:7e:2d:f1:dc:ab:f4:ce:ca:28:
         68:f7:4f:2a:57:61:86:57:b6:07:88:7b:28:c7:9f:27:fe:e8:
         82:69:8d:57:f5:11:0d:5f:ab:b9:26:e2:2f:9c:53:49:8c:62:
         97:59:50:fd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUa9+9IEH1DBi9GWqWGhFM8ocAbRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjAzMTMwMTEzMzlaFw0yNjAzMTQwMjMxMzlaMDMxMTAvBgNV
BAMTKDg0NTVBNzRFNUQ1MDA4NDAxNTVDQzRFRDNEMDA3ODk4RThGRTczQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6XMge4VJy67hl2zlqxaGBMFe
3lLyw5e+vLZVpkBA6bqBpxLqwGyJSfZpqJ3HVkoQ0Af0atAhaFi6jbb3ExNECF7l
IfpNo8Yt6diYvKJu9QaZS4wGV+eaDFjkC8J0Zix0HZhgl6CteKvov8ctN2gWiUDJ
55GpZt8yfXhcBPSemLN/mFMj/+UFALHUARMbaCqTra5gDSezW6Zgl24BSZOIfuXZ
rniVQiz+ohtuFWW3Lo63dmr06Ddgm8CJTwiCitrdKL5GjF5rOM+JuIBvfQTpoDad
88oHqVgvPWAc5KiXUbyUhWsMrMT3my7qLKDvOOnXNrlYMTi2eJPVmfNDugjTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUhFWnTl1QCEAVXMTtPQB4mOj+c8kwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1
MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnULaBQkWdme
FmE6FHp13/nsrsWivaYgif9+Lx7TL7pfoGRSGqyIqMeLNi2lpBDKQVIkq545nnAk
NiHsRM9L9RCGHTVocrqfwNvonziz3+0RucsWAZiu36TDEjPZNmWCZdbAwUBHVTc6
QHWe1XyaEVOBj+G+8iY6FPybeFExHI8TEzPZiY9pOkrAl533LXBt7pI8KA/H8OQ8
2LBpLbCe7hlfjojvGv/q8f8UJWUkRjQF3BN7sh7jcvSnSCzVZ/8YdF/0I8BZHl1+
iy/U/v9xfi3x3Kv0zsooaPdPKldhhle2B4h7KMefJ/7ogmmNV/URDV+ruSbiL5xT
SYxil1lQ/Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:26 2026 by rpki-client