Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File:                     632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier:          KHnWJemBlL9mVltodNWehsiK13eUhGNwaY3BN+BsLJk=
Subject key identifier:   C6:82:C8:0C:21:DD:65:D8:3B:A0:19:FB:49:DF:C6:A5:E7:C0:A6:0A
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       28663688649386911AD022D036D7E8486B202C62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number:          DC
Signing time:             Thu 02 Jul 2026 08:26:20 +0000
Manifest this update:     Thu 02 Jul 2026 08:21:20 +0000
Manifest next update:     Fri 03 Jul 2026 11:24:20 +0000
Files and hashes:         1: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
                          2: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
                          3: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
                          4: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
                          5: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
                          6: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
                          7: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
                          8: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
                          9: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
                          10: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
                          11: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
                          12: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
                          13: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
                          14: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
                          15: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
                          16: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
                          17: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
                          18: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
                          19: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
                          20: 3130332e3231392e36342e302f32322d3232203d3e20313436383036.roa (hash: NrUR+T6l+LFVoNzoAI9D1qEOCPPHDi4EvIfHnTSu1S0=)
                          21: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: pzZWLtFux8+ewsDDcAyCjmS9EoaA2XKRxE+vBUNeWq8=)
                          22: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
                          23: 34322e3230312e382e302f32312d3231203d3e20313436383036.roa (hash: l7KxGHMZsrugLU6DOWi2US2ynt095cae/B0rDXlD9wM=)
                          24: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
                          25: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
                          26: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
                          27: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
                          28: 34322e3230312e31362e302f32302d3230203d3e20313436383036.roa (hash: WEsvhIT56UjF/DdwC5x72ItcZ2eKRcrjE1bM8fB6pI4=)
                          29: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
                          30: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jul 2026 11:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:66:36:88:64:93:86:91:1a:d0:22:d0:36:d7:e8:48:6b:20:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jul  2 08:21:20 2026 GMT
            Not After : Jul  3 11:24:20 2026 GMT
        Subject: CN=C682C80C21DD65D83BA019FB49DFC6A5E7C0A60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:b9:be:0c:88:12:65:78:89:f3:51:41:15:
                    0d:83:28:f6:3a:0d:1d:ce:02:d9:fa:a8:b1:1a:15:
                    b5:6f:7e:81:1c:10:ff:91:73:01:1b:3e:76:7b:56:
                    2b:40:ce:b6:3c:26:71:3a:01:6f:15:92:8a:12:44:
                    27:dc:c7:0d:03:55:5e:3d:c5:54:9c:45:d4:f7:98:
                    00:f4:f0:97:be:d5:34:88:85:28:96:8e:4e:45:87:
                    5d:5d:52:a8:8e:df:b2:50:db:7b:3b:f2:ac:68:0e:
                    84:a0:5b:ea:81:7b:78:e3:0a:ae:7f:f9:10:7e:71:
                    4e:e6:ea:e2:e1:d7:13:e8:8f:e7:44:bb:e1:9c:85:
                    4b:1c:ee:d8:89:de:e7:0b:2e:80:62:95:a2:47:03:
                    98:2a:e1:a1:78:fc:a2:e2:78:c1:12:d8:ad:eb:d7:
                    fa:68:bd:24:3c:7f:39:1a:93:ea:a9:0b:0d:cf:f9:
                    27:af:0e:73:7a:cc:2e:bc:e1:24:7e:98:b6:c1:00:
                    63:26:3b:ab:bb:7f:46:45:42:2d:93:fc:3c:55:68:
                    bd:cd:32:26:c7:3b:ab:ac:db:a2:0b:53:78:3f:a7:
                    a0:48:d1:9d:10:dc:3f:2b:97:7c:36:9e:da:0f:be:
                    de:5a:55:a0:80:ff:d1:61:2a:34:47:7d:dd:99:00:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:82:C8:0C:21:DD:65:D8:3B:A0:19:FB:49:DF:C6:A5:E7:C0:A6:0A
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:82:66:e1:18:9f:b2:ba:08:aa:16:30:96:8b:30:3f:d4:4c:
         d6:ab:aa:8f:32:91:4f:c0:f6:25:1b:ad:51:b6:1f:e0:b2:ec:
         f1:68:1a:db:c8:1c:db:93:4a:9f:e2:74:90:a2:64:ae:55:11:
         bf:7a:0e:a0:93:d5:52:cb:bd:18:a1:77:18:e1:7f:a7:98:dd:
         2c:8b:c3:ac:1b:c8:14:fd:35:1e:59:99:1f:da:5c:c7:f3:09:
         8f:3d:ba:6f:0f:1c:72:ab:a2:c6:7e:52:01:91:87:e8:fa:f9:
         d5:6c:10:f9:5a:50:42:57:89:64:e7:fb:fc:55:1e:2c:ca:5a:
         ea:65:e7:ed:5e:de:a6:e9:c7:b1:c2:9b:5f:19:01:43:26:fc:
         31:e4:ee:2f:b7:31:10:fa:ed:50:fd:36:3b:a2:2c:1d:df:79:
         77:13:e8:ec:9d:dd:0a:3b:be:c0:2d:06:cf:5a:09:41:fd:73:
         40:7c:55:f5:fe:9c:f3:4f:f9:9c:18:2d:87:84:9f:4f:72:4a:
         a0:5a:b2:fc:46:cf:3c:d0:64:24:f5:73:f2:d2:b9:db:39:f0:
         38:cf:83:2b:2a:26:ff:d9:0d:04:c0:a8:54:87:bb:5e:78:2a:
         bd:b1:08:56:58:4c:01:3d:5a:1c:6a:d7:a3:58:36:4d:f4:a2:
         4e:c2:67:85
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKGY2iGSThpEa0CLQNtfoSGsgLGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE
NjlFNDc4QjAeFw0yNjA3MDIwODIxMjBaFw0yNjA3MDMxMTI0MjBaMDMxMTAvBgNV
BAMTKEM2ODJDODBDMjFERDY1RDgzQkEwMTlGQjQ5REZDNkE1RTdDMEE2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1rm+DIgSZXiJ81FBFQ2DKPY6
DR3OAtn6qLEaFbVvfoEcEP+RcwEbPnZ7VitAzrY8JnE6AW8VkooSRCfcxw0DVV49
xVScRdT3mAD08Je+1TSIhSiWjk5Fh11dUqiO37JQ23s78qxoDoSgW+qBe3jjCq5/
+RB+cU7m6uLh1xPoj+dEu+GchUsc7tiJ3ucLLoBilaJHA5gq4aF4/KLieMES2K3r
1/povSQ8fzkak+qpCw3P+SevDnN6zC684SR+mLbBAGMmO6u7f0ZFQi2T/DxVaL3N
MibHO6us26ILU3g/p6BI0Z0Q3D8rl3w2ntoPvt5aVaCA/9FhKjRHfd2ZAGuRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUxoLIDCHdZdg7oBn7Sd/GpefApgowHwYDVR0j
BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0
Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC82MzJBMDFDNEYxRDVD
OTkwQkY2QjM2M0E2Nzg5NENDN0Q2OUU0NzhCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoJm4RifsroI
qhYwloswP9RM1quqjzKRT8D2JRutUbYf4LLs8Wga28gc25NKn+J0kKJkrlURv3oO
oJPVUsu9GKF3GOF/p5jdLIvDrBvIFP01HlmZH9pcx/MJjz26bw8ccquixn5SAZGH
6Pr51WwQ+VpQQleJZOf7/FUeLMpa6mXn7V7epunHscKbXxkBQyb8MeTuL7cxEPrt
UP02O6IsHd95dxPo7J3dCju+wC0Gz1oJQf1zQHxV9f6c80/5nBgth4SfT3JKoFqy
/EbPPNBkJPVz8tK52znwOM+DKyom/9kNBMCoVIe7XngqvbEIVlhMAT1aHGrXo1g2
TfSiTsJnhQ==
-----END CERTIFICATE-----
Generated at Thu Jul 2 17:53:07 2026 by rpki-client