Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File:                     DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier:          ROY6aR7h9NXwpIosmiJlUiFMc8RRy0OZU41uRMWW1D0=
Subject key identifier:   40:A1:51:F4:64:9E:31:37:1D:27:C6:7F:75:90:5E:83:B7:63:05:4F
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       41AA8AE9EBA6E316FDFC630D28D9A003050B2310
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number:          70
Signing time:             Mon 13 Apr 2026 06:44:17 +0000
Manifest this update:     Mon 13 Apr 2026 06:39:17 +0000
Manifest next update:     Tue 14 Apr 2026 07:57:17 +0000
Files and hashes:         1: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
                          2: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
                          3: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
                          4: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
                          5: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
                          6: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
                          7: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
                          8: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
                          9: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
                          10: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
                          11: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
                          12: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
                          13: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
                          14: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
                          15: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
                          16: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
                          17: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
                          18: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
                          19: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: 6ukbg77NuyYyUipqJa5ZUfRpOD6HZ496r7fChaoO+to=)
                          20: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
                          21: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
                          22: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
                          23: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
                          24: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
                          25: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
                          26: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
                          27: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
                          28: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:aa:8a:e9:eb:a6:e3:16:fd:fc:63:0d:28:d9:a0:03:05:0b:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Apr 13 06:39:17 2026 GMT
            Not After : Apr 14 07:57:17 2026 GMT
        Subject: CN=40A151F4649E31371D27C67F75905E83B763054F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:0c:e5:d5:a7:f4:0c:f8:b4:05:c7:85:24:
                    16:de:40:09:cc:ad:ef:e8:12:c7:82:a6:23:04:fd:
                    cd:a1:58:2e:44:08:fe:19:c5:d9:1b:0d:7f:7f:19:
                    24:f4:1a:8d:5a:e6:0e:70:3d:70:99:4a:ec:de:6f:
                    d8:de:30:57:46:26:4e:a1:74:e6:26:83:cf:a5:b6:
                    61:14:f9:f2:20:8f:71:f2:2a:9c:5b:9e:86:ac:45:
                    fe:4f:db:54:4c:2c:d4:a2:63:d0:82:40:47:72:f0:
                    34:75:36:49:e5:bb:0e:e5:6e:da:02:db:80:81:b5:
                    51:59:34:e6:d3:98:03:8f:8c:6f:5d:be:e2:a5:34:
                    3d:2f:9c:c7:17:9b:56:e8:08:93:57:b9:f3:fc:71:
                    d1:e4:91:19:72:19:a0:40:05:c7:49:64:22:a6:9b:
                    e9:71:e4:0c:b7:d0:ce:56:ab:ae:41:a4:8b:47:3e:
                    7a:82:e6:d3:9c:4c:ef:bd:59:ea:82:06:2c:36:d5:
                    cd:82:4d:15:3c:b9:b5:40:c6:8c:de:6e:6b:f9:2b:
                    46:90:40:a8:72:fc:c8:11:75:30:7c:bd:ad:e2:2b:
                    44:bd:19:d9:4c:7c:73:34:07:94:85:ef:e6:f4:13:
                    5e:1e:bc:0c:f7:21:07:08:b4:91:51:7f:7d:7b:5d:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:51:F4:64:9E:31:37:1D:27:C6:7F:75:90:5E:83:B7:63:05:4F
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:91:ec:73:f8:1c:ca:b5:55:7e:d3:c6:0e:30:d2:56:cd:37:
         3e:90:3e:bb:30:5c:0d:87:aa:cb:70:56:1c:f7:ef:f5:c9:06:
         e7:94:4b:42:06:9f:29:0d:fd:04:d0:e0:f9:1f:e4:97:13:5d:
         fb:e2:e0:c9:ba:ed:57:46:4e:3a:3c:6b:db:fd:f7:e9:39:6b:
         dc:29:81:23:c1:01:7f:28:24:c8:39:62:b9:27:fb:ce:c7:6e:
         d6:98:2c:51:41:71:ba:ce:bb:63:02:99:fa:67:14:53:83:c5:
         51:f0:9e:83:52:9e:46:05:1a:01:49:ba:7b:aa:03:c3:30:36:
         2a:90:9f:68:7f:e3:3a:a3:de:36:bc:e7:e7:8c:07:ae:4f:24:
         74:6c:6f:33:66:32:f8:b7:04:07:0d:ed:6a:44:c9:d1:a2:c5:
         4a:82:3c:da:11:34:7f:c4:2e:af:3e:ce:18:3c:6d:c2:03:28:
         ff:8c:4f:d4:d8:7b:a4:e9:9c:ee:5c:15:12:26:18:09:14:ea:
         78:a2:ca:3f:44:43:a2:e4:ab:fa:f6:f2:cd:78:0e:a0:3e:9b:
         ca:9d:f3:97:19:d6:41:fc:a0:57:f8:9a:29:bb:c2:7c:57:46:
         14:3b:16:b3:be:5b:c8:3c:fd:c3:25:f5:88:17:1f:71:9e:c8:
         f2:c2:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:04:53 2026 by rpki-client