Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File:                     632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier:          8oYotYpJmTsesn4dfQLH7Uqz8cfn1Ba6/kmNiLUg+Eg=
Subject key identifier:   BE:56:24:B8:78:80:23:B7:F7:17:C0:4C:49:F1:56:B3:0A:32:78:22
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       01CD0346FAC131B05CAA8A4BB7432E0B283D78C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number:          9D
Signing time:             Sat 16 May 2026 10:47:41 +0000
Manifest this update:     Sat 16 May 2026 10:42:41 +0000
Manifest next update:     Sun 17 May 2026 12:30:41 +0000
Files and hashes:         1: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
                          2: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
                          3: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: LHxqrqFT2YEjZ1H8IpcWNjROZRl0pGWNCQb7tv/0lVk=)
                          4: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
                          5: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
                          6: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
                          7: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
                          8: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
                          9: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
                          10: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
                          11: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
                          12: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
                          13: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
                          14: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
                          15: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
                          16: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
                          17: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
                          18: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
                          19: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
                          20: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
                          21: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
                          22: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
                          23: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
                          24: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
                          25: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
                          26: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
                          27: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 12:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cd:03:46:fa:c1:31:b0:5c:aa:8a:4b:b7:43:2e:0b:28:3d:78:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: May 16 10:42:41 2026 GMT
            Not After : May 17 12:30:41 2026 GMT
        Subject: CN=BE5624B8788023B7F717C04C49F156B30A327822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:a8:97:14:24:15:67:0a:ad:0f:5e:cd:8b:
                    50:09:e4:dc:65:03:cf:c7:66:b5:b9:0a:87:cc:c5:
                    d9:ba:23:ef:65:07:07:85:8e:8c:61:56:a8:da:ff:
                    ed:95:3f:ed:7c:b1:07:58:15:3f:7e:ab:f3:6c:75:
                    39:d0:61:c7:d6:32:fe:6e:21:14:09:d4:e8:7b:1d:
                    28:d9:c2:7a:b0:af:6e:a2:ca:b7:6a:0f:41:b4:43:
                    75:42:ca:82:65:d5:72:92:54:fe:9c:85:c7:58:0b:
                    c0:f6:0b:8d:fd:05:f5:d9:cd:aa:b0:d7:99:78:f5:
                    01:c3:f0:49:84:69:99:33:67:cd:bc:21:f8:7b:7b:
                    af:7c:59:9d:1b:e7:37:90:71:ae:d9:02:88:24:2c:
                    4b:1a:a4:64:cb:09:30:16:09:a0:f4:d2:15:47:81:
                    f2:0e:fe:17:19:d3:99:6b:8c:e6:e1:20:7a:5a:7b:
                    24:7d:63:59:fb:bc:c8:54:34:54:85:0e:0b:42:4d:
                    12:89:31:b7:5f:21:57:6b:ea:22:5a:15:8f:63:18:
                    bb:24:6b:9e:18:d4:02:a7:de:9f:04:19:b7:4b:4b:
                    1f:24:e4:7a:cf:48:f5:a4:14:f7:c1:bf:88:cc:88:
                    47:ad:e3:43:31:ff:e9:0e:85:27:b1:8c:19:18:c4:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:24:B8:78:80:23:B7:F7:17:C0:4C:49:F1:56:B3:0A:32:78:22
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:66:28:25:87:de:1a:04:82:9b:bb:f8:10:33:81:4e:e2:
         92:49:67:1a:95:13:30:ef:74:05:28:21:60:5d:1d:8c:fd:4b:
         74:ec:1a:73:46:3b:69:55:12:f3:b1:3b:b1:a2:10:f2:62:27:
         87:3f:cf:70:aa:27:63:81:1b:1b:20:29:ef:7f:9f:4e:cc:71:
         9d:7f:96:3f:bd:66:03:d6:de:89:4e:57:6e:e1:dc:b2:a9:ca:
         ab:45:10:13:5d:58:2f:d0:79:06:d7:f2:81:f7:08:72:e5:3e:
         94:74:7c:dc:e2:e2:ba:57:25:12:48:96:51:09:94:87:fa:7f:
         65:e4:2c:3e:4e:94:8c:dc:5a:1e:69:03:ab:26:49:97:c8:5a:
         f3:ff:f3:80:ed:50:c0:32:0c:4e:25:81:08:05:e1:a9:b3:9b:
         31:74:d8:e7:88:92:ed:8d:12:a4:70:8b:13:4b:f3:cb:2e:38:
         5e:3c:0b:39:0c:58:8b:a2:01:c6:ad:87:67:00:e4:97:b2:a8:
         29:57:69:59:f5:12:9b:82:79:c6:c0:c1:80:7a:8c:33:20:e9:
         79:74:ff:82:8f:46:8b:7a:4f:07:26:82:59:bf:5d:2d:98:67:
         03:9b:53:ea:02:80:75:2c:03:9c:f7:47:4f:fb:9c:b8:04:84:
         4d:2d:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:46:28 2026 by rpki-client