Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
File:                     EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json)
Hash identifier:          A/PhKih2glX8sA+OxL/FyBirDeQMaaPN5GJz/3llmdE=
Subject key identifier:   9B:22:A8:5C:47:28:34:78:4B:BD:0D:4F:DC:01:B9:E3:6B:D8:C9:12
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       3C0AC9976854744916EB919A612CFE9CB091E357
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
Manifest number:          BC
Signing time:             Fri 29 May 2026 12:52:50 +0000
Manifest this update:     Fri 29 May 2026 12:47:50 +0000
Manifest next update:     Sat 30 May 2026 13:28:50 +0000
Files and hashes:         1: 3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa (hash: TReC9XrrN7Nwf1erqtsk0E8oVQofSFHJgWXfzrRUE/I=)
                          2: 3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa (hash: E4lAz1S/muh0tSxxpwW01U7VqwUZl+TwwxwZTCkuE8Y=)
                          3: 32372e302e3133322e302f32322d3232203d3e203538383534.roa (hash: j1leNzG71vinHeU48HQ2pH/5kmDNO6G4B6bCEWPWmMc=)
                          4: 3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa (hash: ZvvpEEOuSCVRSI9C2BZN47oe6i/TIVMXv0WiVVEFrdA=)
                          5: 323430373a376430303a313a3a2f34382d3438203d3e203538383534.roa (hash: zOAxiWcQ3idJewlosYrGmuniZSxq36jngRIx+dMCARs=)
                          6: 3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa (hash: DdMXKf2YuUywOCcCTI+DqM/FwcP9SDtTMYZyLt6wl/w=)
                          7: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=)
                          8: 3130332e37332e3133362e302f32322d3232203d3e20313333373734.roa (hash: ZbFlWcVsJTKN95YZjDMwOGcWQuTPwIm4cw3vdL6PP2Q=)
                          9: 3130332e32372e372e302f32342d3234203d3e203538383534.roa (hash: g+hnuBNKsm6ziUrgUw+cA7ldB47CwfimIC2umZGUB+8=)
                          10: 3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa (hash: XqKnIABB835jNYZmEZ3t9axw68PnzIQthEAUJrJc+yI=)
                          11: 3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa (hash: fW0XDmPZUdQM2bQp/l3K+jPOu3T0QqmCbPxXrk2cD7Y=)
                          12: 3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa (hash: H6Z1n4816A3cvrcg/4JXWuWg2N4DIsmC9oHT0+xO5As=)
                          13: 3231312e3135352e39362e302f32322d3232203d3e203538383534.roa (hash: vVLRo+HKLvh/kXcauZdzM35qZL4rcz/wF9d38NpTTv0=)
                          14: 3130332e32372e342e302f32322d3232203d3e203538383534.roa (hash: X07mjB9bjxe2OIWzT2PkfOiYRqWsVnjKrNMXTnKBIxg=)
                          15: 3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa (hash: ogYFO207LFn8kLObTi8Qo2cpfCdN22qWreV61dxA9c0=)
                          16: 3130332e37332e3134302e302f32322d3232203d3e20313333373734.roa (hash: 8WSsYxHsECWbvPccgByEONrwAZ9fl3TFYCpPNGSJT20=)
                          17: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: E8VwkzIbISbg5Hzlywzj7yU2MsvaLVl0WIff3/rc0iA=)
                          18: 3130332e32372e362e302f32342d3234203d3e203538383534.roa (hash: hYzmn3mM9dAzyh5h5bkJq/XcXwmxINBr6hHDnWDJgA4=)
                          19: 3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa (hash: S6hC0YjpsJuxmy8Axv3uYCWhbCGQrPkkDePjTyATLac=)
                          20: 3130332e3130352e36302e302f32322d3232203d3e203538353431.roa (hash: aNs6sRli221O5KrEAoD0mNIaznXphx0V3lJfd42p1ac=)
                          21: 3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa (hash: Kqvu3gp6OHhgSZJSSxhvDaYWPDX1Qo8zwYxhwHJDdoc=)
                          22: 3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (hash: nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=)
                          23: 34352e3131392e36302e302f32322d3232203d3e20313333373734.roa (hash: Sm4T6PdlaWK5L2THDkzzGLZz2EgkHdch3D9qDQ6YrT4=)
                          24: 34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa (hash: AgfUQHFuvXuvbVut6uk3L47mq/FUpfzy8Xxpq7sQuwI=)
                          25: 3130332e32372e352e302f32342d3234203d3e203538383534.roa (hash: 7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=)
                          26: 3231312e3135352e3130302e302f32322d3232203d3e203538383534.roa (hash: NnUTERng8XaU5Ibm8Y9WptoyvnTqqEUE7HudYxpFaiM=)
                          27: 34332e3234322e37322e302f32322d3232203d3e20313333373734.roa (hash: uwR1P/ibjSn0EqNSQlz8TQd0LIi6DXH9VY+ve+oFQ5E=)
                          28: 3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (hash: NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=)
                          29: 3231312e3135352e3131362e302f32322d3232203d3e203538353431.roa (hash: 0dz8ghbPK3azmdvVE2lLdDzedpnnWzUkxi94JHAmQg0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0a:c9:97:68:54:74:49:16:eb:91:9a:61:2c:fe:9c:b0:91:e3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 29 12:47:50 2026 GMT
            Not After : May 30 13:28:50 2026 GMT
        Subject: CN=9B22A85C472834784BBD0D4FDC01B9E36BD8C912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:96:55:f6:56:70:05:86:b2:0d:47:b6:40:
                    e5:d1:cb:dd:5d:39:b0:0a:a1:fc:f2:e3:b4:9d:45:
                    23:8c:c1:50:6d:01:0d:ac:ce:30:d4:c3:55:b2:f9:
                    f6:b0:0a:12:d4:cc:6e:9e:ae:7f:4d:b4:78:c9:bd:
                    15:61:24:0d:5b:04:3f:73:6b:a2:c6:43:05:b2:22:
                    56:27:08:aa:f2:7f:c9:e5:6c:29:35:b8:c2:f6:8b:
                    0e:49:cb:a3:eb:1a:cb:af:bb:69:28:a8:3e:2e:24:
                    26:ba:5f:63:4a:90:71:5a:9c:f3:23:bf:16:cb:61:
                    c1:55:ba:a4:0b:1c:d8:d2:6f:79:dd:29:03:f3:20:
                    78:8b:c0:98:18:80:9e:ef:c1:33:d7:f7:ef:27:2b:
                    b7:c0:a0:bb:e6:f9:9f:84:24:3b:d1:85:03:52:29:
                    ea:b3:82:16:48:f3:2c:de:b8:06:cc:52:c9:59:5e:
                    a0:cc:d2:ae:4a:35:ac:3b:d2:87:39:99:2f:18:eb:
                    3f:c7:02:0c:31:35:03:a4:25:6f:e9:6f:ed:90:02:
                    32:f9:46:5c:70:34:2c:04:37:42:c1:59:73:63:fd:
                    28:be:a3:26:0a:b1:8d:5f:60:b0:41:32:e2:b0:c2:
                    85:cd:45:61:09:4f:6c:17:97:f4:cb:17:12:9b:2e:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:A8:5C:47:28:34:78:4B:BD:0D:4F:DC:01:B9:E3:6B:D8:C9:12
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:56:6e:4e:e0:99:5e:ac:5c:e2:a6:3d:51:96:de:74:29:
         e7:92:26:4c:68:0a:be:f6:fa:9b:33:24:60:6f:5d:e9:f5:5e:
         ba:81:ef:3f:46:5e:32:66:85:ac:36:26:a1:e6:b5:ab:ce:0a:
         cc:92:46:cc:c0:15:e3:7e:bf:55:72:4e:4e:49:46:60:0d:ad:
         54:e0:6c:05:a1:ac:25:e3:56:c1:a4:a3:e0:85:c8:8d:1f:a4:
         c7:db:c1:4a:f3:50:77:8d:30:cf:b5:c1:7f:b7:2c:aa:a1:0e:
         c0:e5:39:ed:db:c0:27:d1:e2:55:6f:5d:19:cb:dd:88:b2:3d:
         98:11:68:8e:34:91:2e:42:2a:14:1e:83:56:0d:25:ac:d1:48:
         91:7c:c1:7a:eb:3f:3c:3a:ce:19:71:e8:a5:b1:c5:f0:08:86:
         81:77:a9:d6:bf:c6:21:72:6a:4d:ab:cc:58:3a:b8:9d:0c:a5:
         e3:bd:67:b2:87:f6:ee:e4:bc:d8:0f:eb:55:4c:6f:50:34:cc:
         e0:20:3b:3d:e4:d0:92:7d:f2:20:90:79:25:8b:cc:f6:8e:d0:
         b7:dc:72:81:da:8c:f8:ea:44:03:2b:54:4f:57:90:f5:c7:b9:
         59:56:b6:54:cc:be:5b:73:82:39:3b:88:11:a9:62:06:0a:90:
         1d:b7:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:32 2026 by rpki-client