Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
File:                     E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json)
Hash identifier:          MZm4f0xPcGgxCDK4a2a+6cmHj9p+gvyBXl63p0MUtXU=
Subject key identifier:   99:5F:B0:7B:AA:4E:C1:54:E3:D8:25:11:5A:31:D3:E8:8C:B6:3D:74
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       35328C42986186EC648C380C11B82D8194ECEE46
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
Manifest number:          BF
Signing time:             Fri 29 May 2026 02:17:27 +0000
Manifest this update:     Fri 29 May 2026 02:12:27 +0000
Manifest next update:     Sat 30 May 2026 05:12:27 +0000
Files and hashes:         1: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (hash: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=)
                          2: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=)
                          3: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=)
                          4: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: cRRMbKVZTWi9h0OcugCjfIm+BJO+FmTGsJdHTWgNDxY=)
                          5: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (hash: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=)
                          6: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=)
                          7: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=)
                          8: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (hash: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=)
                          9: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (hash: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=)
                          10: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (hash: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=)
                          11: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=)
                          12: 3230322e3136352e3230382e302f32312d3231203d3e20313332323033.roa (hash: dEG+kQvtarrj1C4NWnBPL9AHHKm7rT38VFsC+e+j+CI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:8c:42:98:61:86:ec:64:8c:38:0c:11:b8:2d:81:94:ec:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: May 29 02:12:27 2026 GMT
            Not After : May 30 05:12:27 2026 GMT
        Subject: CN=995FB07BAA4EC154E3D825115A31D3E88CB63D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:d4:fa:0a:b3:e9:8e:c2:d0:d4:09:a4:1a:
                    db:69:36:79:73:0d:8e:28:9e:ab:60:6e:6a:42:d5:
                    0c:16:bb:66:94:2d:07:45:ec:cd:5d:bc:af:b9:ae:
                    2b:5c:d3:c4:98:d6:3e:4e:b7:ff:3b:a0:aa:f1:8b:
                    f6:db:29:50:7b:4d:c8:00:6d:cf:fc:c8:95:4d:7d:
                    4e:d8:01:62:5b:a2:73:0d:ec:b9:3a:9e:04:2b:f5:
                    ae:ad:b1:34:4f:9a:bc:33:37:2c:8a:28:f3:45:4a:
                    a3:85:69:7f:0f:32:a1:f6:c3:d0:04:69:31:32:7d:
                    44:12:14:3a:ec:7b:3e:4e:5c:1a:13:c4:7a:81:59:
                    2f:32:4e:78:4d:9f:cf:c8:08:13:c6:d5:91:96:20:
                    35:f6:3a:c1:b9:34:fb:4e:dc:8e:02:fb:ac:df:89:
                    25:8e:e2:b1:ce:45:e5:bf:f5:3f:55:90:2b:df:b3:
                    97:70:59:b1:db:00:0c:8a:64:cd:65:58:f4:94:7e:
                    10:4d:c1:9d:1a:7a:ca:0b:80:a0:af:83:c6:5d:54:
                    f8:01:12:4c:68:30:c7:d3:61:f6:e7:58:e6:b7:0b:
                    06:ed:6b:a3:f9:59:fc:96:cb:cb:23:e6:7d:a9:fa:
                    15:41:99:be:41:5c:13:3f:d3:de:c6:cd:bd:ba:97:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5F:B0:7B:AA:4E:C1:54:E3:D8:25:11:5A:31:D3:E8:8C:B6:3D:74
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:10:2d:37:a4:32:b8:52:85:a4:d6:12:e8:49:53:cd:2a:d7:
         43:38:f9:2f:c4:cc:1d:f9:da:c5:9c:ba:c9:e2:ce:fd:95:10:
         28:cd:ed:12:40:69:13:e4:30:53:2b:e5:63:4a:d6:33:a3:3c:
         3a:f4:b1:4c:a0:b2:4f:2d:50:ae:8e:51:a0:1e:61:8c:39:46:
         48:e8:9b:ce:41:c8:db:f4:a3:16:06:a5:63:34:51:3b:db:6b:
         ce:94:e7:87:2f:44:da:91:fa:1d:cb:fc:ba:ed:0d:55:ef:d6:
         5a:fd:ac:74:69:3b:a8:2d:8e:4c:6e:86:ae:93:69:ff:12:09:
         46:b4:4d:72:36:28:52:2e:78:dd:7b:34:88:8e:d8:83:99:af:
         5e:59:79:ce:db:39:c0:31:48:39:f2:9c:84:46:3e:8b:80:96:
         2f:5e:59:37:c2:ee:14:81:70:d6:1b:11:37:c3:e9:a7:36:e6:
         ec:74:6f:15:61:a9:4d:3d:db:8a:ea:c6:6a:63:8a:b1:82:c8:
         74:41:f9:63:84:30:cf:e8:e2:1d:61:aa:3b:0e:13:62:0d:d9:
         77:62:6a:f0:16:8d:de:2b:eb:35:de:9d:f1:9c:3c:ea:87:e4:
         d4:69:ce:03:25:0a:46:8e:a0:c5:97:94:c2:3a:93:4d:5a:4f:
         67:a3:45:d9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNTKMQphhhuxkjDgMEbgtgZTs7kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjA1MjkwMjEyMjdaFw0yNjA1MzAwNTEyMjdaMDMxMTAvBgNV
BAMTKDk5NUZCMDdCQUE0RUMxNTRFM0Q4MjUxMTVBMzFEM0U4OENCNjNENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWetT6CrPpjsLQ1AmkGttpNnlz
DY4onqtgbmpC1QwWu2aULQdF7M1dvK+5ritc08SY1j5Ot/87oKrxi/bbKVB7TcgA
bc/8yJVNfU7YAWJbonMN7Lk6ngQr9a6tsTRPmrwzNyyKKPNFSqOFaX8PMqH2w9AE
aTEyfUQSFDrsez5OXBoTxHqBWS8yTnhNn8/ICBPG1ZGWIDX2OsG5NPtO3I4C+6zf
iSWO4rHOReW/9T9VkCvfs5dwWbHbAAyKZM1lWPSUfhBNwZ0aesoLgKCvg8ZdVPgB
EkxoMMfTYfbnWOa3Cwbta6P5WfyWy8sj5n2p+hVBmb5BXBM/097Gzb26l6jHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmV+we6pOwVTj2CURWjHT6Iy2PXQwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy
QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3xAtN6QyuFKF
pNYS6ElTzSrXQzj5L8TMHfnaxZy6yeLO/ZUQKM3tEkBpE+QwUyvlY0rWM6M8OvSx
TKCyTy1Qro5RoB5hjDlGSOibzkHI2/SjFgalYzRRO9trzpTnhy9E2pH6Hcv8uu0N
Ve/WWv2sdGk7qC2OTG6GrpNp/xIJRrRNcjYoUi543Xs0iI7Yg5mvXll5zts5wDFI
OfKchEY+i4CWL15ZN8LuFIFw1hsRN8Pppzbm7HRvFWGpTT3biurGamOKsYLIdEH5
Y4Qwz+jiHWGqOw4TYg3Zd2Jq8BaN3ivrNd6d8Zw86ofk1GnOAyUKRo6gxZeUwjqT
TVpPZ6NF2Q==
-----END CERTIFICATE-----
Generated at Fri May 29 22:05:29 2026 by rpki-client