Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
File:                     22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft (raw, json)
Hash identifier:          +9dPUnteNWpUiim3WR37Bk3myWl8PS0wvIPRp9enuyI=
Subject key identifier:   99:AD:DB:83:A2:EA:C3:29:D6:91:8B:83:C3:FE:9F:5E:D2:9E:20:37
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Certificate issuer:       /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial:       355FD74FE29BE4813C31B3A0FC02CE3E6E4C3AE3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
Manifest number:          3D
Signing time:             Mon 13 Apr 2026 06:52:19 +0000
Manifest this update:     Mon 13 Apr 2026 06:47:19 +0000
Manifest next update:     Tue 14 Apr 2026 10:09:19 +0000
Files and hashes:         1: 3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa (hash: jeaTrOgdMebawys/6XnnQCO78gyxE7KX43eZsOidPFM=)
                          2: 3231312e3130302e36382e302f32332d3233203d3e203233373234.roa (hash: VE+W5cAJWZHQZFaO6dxpe/v1H6DwQ7Pjd3iJdOLXsNw=)
                          3: 3231312e3130302e37362e302f32342d3234203d3e203233373234.roa (hash: bXU0GEiRMQlqJiUyGYYppOzk/EUcRuGTtnjtH8K8WwU=)
                          4: 3131392e36312e302e302f31372d3137203d3e203233373234.roa (hash: k9oYKjGIXZaSuzUmQ2AAGCKqO0tvJoefFtfoI0N/fyo=)
                          5: 3231312e3135302e36342e302f32302d3230203d3e203233373234.roa (hash: 8Mipqd5VSCLIE7ckbJlkKsFvCvNdrD/MGNTiQIqJBa8=)
                          6: 3231312e3135372e3234302e302f32302d3230203d3e203233373234.roa (hash: gydNdI0Li4afslJy0wyrDnUFBOBJBUoko3onPetP7ro=)
                          7: 3231312e3135302e36342e302f31392d3139203d3e203233373234.roa (hash: 4RghX/MxjGxNYt3iuL9Mxdh4Io2D3U5e37dKXANiKB0=)
                          8: 3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa (hash: Mnad/Y1S3127qUStkj6/ae6IpUyrLetwKWDxhz310Tc=)
                          9: 3231312e39392e3232342e302f31392d3139203d3e2039383033.roa (hash: M8yX9JIGKoJQxQCCYhZcFEPQjI82xJyedvbvJQsf97Y=)
                          10: 3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa (hash: sl7qhUm7RxG5b+OGwzvCXDL0+hR40yg+L5bjzzlV0aU=)
                          11: 3231302e37382e3132382e302f32342d3234203d3e203233373234.roa (hash: Hj0VBjEG1A/Vy5CfFa3SODbtJ9ifdSazK6JMSWZX3f4=)
                          12: 3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa (hash: 0i23c59Yk1Pcej/NF+Ghnc/xXyH5hIz75ae7eLtgQUw=)
                          13: 3231302e37382e3132382e302f32322d3232203d3e2039383033.roa (hash: g9d3B9hoJrTm52j8B539dJ9HDnLv7lTCn1c0qWVA0Dc=)
                          14: 3231312e3130302e36342e302f31392d3139203d3e203233373234.roa (hash: gPtJjP9+di7GKh8vu1YDLm/PtPnxTpfuc3EHNBfjqYg=)
                          15: 3231312e3135302e3130302e302f32342d3234203d3e2039383033.roa (hash: ulsWHD2PqHg5ixQDELnSrRRPPqdYu9uZVrCb73YgWGQ=)
                          16: 3130332e37332e3230382e302f32322d3232203d3e2039383033.roa (hash: XVSUK5eRG5UoKF6vo6V6ln8vvFKzxdIbxy8TV6MFmbo=)
                          17: 3231312e3135302e302e302f31372d3137203d3e2039383033.roa (hash: AXXRnjUqEURYElm3WaGN7OOXEzIGcz5XFQR6ldopvJc=)
                          18: 3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa (hash: /N41C8IZCYtR5Q93paxQKC5pHJDkVfDrpJDU7nOx8dk=)
                          19: 3231312e3135302e39382e302f32342d3234203d3e2039383033.roa (hash: nN7sg8ZrxgBmgmAOtQzkRhBQ5w8spWBZgpshEw2bK94=)
                          20: 3131392e36312e302e302f31392d3139203d3e203233373234.roa (hash: K3LP5dwQaXcx4MuNYyKZrH4G4kDDCKExunXmrKN3ytE=)
                          21: 3231312e3130302e36362e302f32332d3233203d3e203233373234.roa (hash: RQ99QtSP/7GkGYfaamKRVzphPok1okmE3hdXkUarkAY=)
                          22: 3131392e36312e33322e302f31392d3139203d3e203233373234.roa (hash: IeOir/13vFrTa9hbeyjvtXntQyqmWY0jkXl8kwqfY3w=)
                          23: 3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa (hash: 03QuETdXbGvEvqzMXchBhFMKUmxEFeQ/gtsLajwrX1s=)
                          24: 3231312e3135372e3232352e302f32342d3234203d3e203233373234.roa (hash: duppbLzESzwcPhrDvmhz6qAUsN5VpGNvb5VQZcQu5Io=)
                          25: 3231312e3135372e3232362e302f32342d3234203d3e203233373234.roa (hash: rjo7jrhrMRVuR0JfRg7FPv4u+eyoOM/AtQUL2V3uCs8=)
                          26: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl (hash: GVIJZdlcZnMNL7mw4D0v/viE7rsb9VuxP7xrqN9PVfs=)
                          27: 3231312e3130302e36362e302f32342d3234203d3e203233373234.roa (hash: 6sfldsJiJl/wp77yBQ0u4qj4DV6FiX2vcT2hKVsFe3o=)
                          28: 3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa (hash: 1QaZwfBCqfvHN54sX/bej2ZJXj1WVip/KSr91tGlqIg=)
                          29: 3231312e3135302e302e302f31382d3138203d3e203233373234.roa (hash: O+AFP3LztmQknlXORk2THYCllaXkupnfWf00JCkvURk=)
                          30: 3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa (hash: g7NQxqPIo2ezw+OBoAAEIKfoyKL904Ydaym44JJkCQc=)
                          31: 3231312e3135302e38302e302f32302d3230203d3e203233373234.roa (hash: 10TCtF8APFuMCUSbElN3rH/asDRjrTjYEzpEFraWYXU=)
                          32: 3231312e3135372e3232342e302f32342d3234203d3e203233373234.roa (hash: K7WwzUb7hIRkI35jNdL0ZzawEOqxsqxxhb5E3doscew=)
                          33: 3231312e3135372e3232382e302f32332d3234203d3e203233373234.roa (hash: nX1kVZajt7R6n+n7AcrtE48zts8+uLXvQJ2dsnVZ75M=)
                          34: 3231312e3135302e3132382e302f31382d3234203d3e2039383033.roa (hash: Iy7pJUKS62O213YpRT3Nh6MR3eqtNr5cQw4Mojyr6XM=)
                          35: 3231312e3130302e37322e302f32342d3234203d3e203233373234.roa (hash: SecKXvNuh0Fsq9JdTecOZLzm1VTOb/94Z648V5IO+DI=)
                          36: 3231312e3135372e3232342e302f31392d3139203d3e203233373234.roa (hash: mXdeRxX9NNx5ZnpMgxouFbHE5Nv9XoEo7yaCgv3A0pw=)
                          37: 3231312e3135302e3132382e302f32342d3234203d3e2039383033.roa (hash: S7Hcu6QVVzcYJZ+TIhGWLG0GW1wRjr2gL5ORninwvZQ=)
                          38: 3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa (hash: 9DsUsc7xqSEgA76x3QVEUXlO+lwxmzsItElrdqQxlu8=)
                          39: 3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa (hash: t58PvWUroeia0P5TL6X1Bz4D3AUlx6o+sfFf/IteIdI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5f:d7:4f:e2:9b:e4:81:3c:31:b3:a0:fc:02:ce:3e:6e:4c:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
        Validity
            Not Before: Apr 13 06:47:19 2026 GMT
            Not After : Apr 14 10:09:19 2026 GMT
        Subject: CN=99ADDB83A2EAC329D6918B83C3FE9F5ED29E2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:17:cd:78:6b:c2:d9:32:b8:b5:47:be:5c:
                    95:c8:71:f4:08:6d:20:5e:cf:2b:c6:75:83:e5:0c:
                    17:0e:fe:e7:24:de:45:9c:ce:da:af:1f:bd:dd:db:
                    29:2d:5a:3d:23:52:35:91:85:fa:8b:94:aa:c2:cb:
                    a4:38:c2:33:7c:d1:fc:5d:c5:5f:a6:ad:00:34:ca:
                    de:a9:15:76:bd:d3:9b:1c:b4:2d:c9:5b:92:e8:6d:
                    64:ed:41:a5:ec:91:55:66:c1:d0:89:66:d5:18:00:
                    13:50:ff:33:b6:6e:4e:95:b8:08:aa:25:6d:e7:e2:
                    51:47:92:07:f9:34:b9:57:fa:d0:8a:01:14:45:41:
                    9c:e3:c1:a6:87:90:1d:b8:86:42:c9:6c:81:4d:b2:
                    f2:b0:49:ba:f6:51:35:a6:37:8e:5b:aa:7e:43:ff:
                    3e:6b:fd:4a:68:c6:15:5a:9e:96:53:98:3b:24:bb:
                    6f:cc:fa:f0:91:4b:26:2e:93:0c:cf:8f:ac:3e:af:
                    b2:44:93:8b:69:94:e4:0a:0a:a7:e6:5b:42:5e:ce:
                    a2:0d:a3:50:03:1d:d3:c7:e8:6d:8b:ac:d3:f7:25:
                    fd:0b:ee:79:de:37:c8:ab:aa:c4:7e:ea:33:20:12:
                    0c:08:64:f9:89:b0:e8:31:f5:1d:3a:b1:e6:37:b5:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:DB:83:A2:EA:C3:29:D6:91:8B:83:C3:FE:9F:5E:D2:9E:20:37
            X509v3 Authority Key Identifier:
                keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:d5:b5:af:49:51:b9:8c:a0:99:55:48:75:e4:e7:87:8b:
         90:a3:b0:b5:f7:47:c9:5f:3c:fa:80:17:ff:5a:2f:d9:ee:fb:
         9c:c0:18:5a:de:7d:86:cc:ec:18:0f:75:e1:90:ac:bb:f7:44:
         e1:26:5f:09:20:a3:45:c4:e2:cd:01:60:f5:bc:f7:c8:24:a3:
         f1:6c:88:40:71:65:29:69:01:77:6f:c8:38:9e:fa:38:cd:32:
         18:8b:6e:65:3f:b4:8f:06:6f:31:72:9a:57:31:6c:cc:a6:6c:
         cb:48:f7:cf:a9:24:21:3f:38:c6:a7:55:95:e4:9e:3d:8b:52:
         c0:59:b5:a0:d2:42:2f:aa:bb:0a:59:8e:c0:1c:e7:62:44:a1:
         30:12:44:2f:fb:f0:5d:24:c2:96:e4:47:3b:ab:f0:81:a9:91:
         79:30:3f:d2:c5:ed:a3:32:a1:0c:46:66:86:f0:88:91:58:d3:
         f4:59:b0:ef:ed:4b:b0:64:73:8f:96:81:92:09:c5:74:83:57:
         c1:4b:14:70:15:2a:5e:61:cf:5d:f6:b9:f9:71:2d:a3:13:52:
         1d:35:b9:24:77:ac:19:72:dd:c1:33:5c:30:46:8d:be:be:dd:
         52:33:6e:4d:4c:c4:f6:97:e8:e8:d5:1b:bc:79:f6:85:2b:29:
         67:e4:86:ad
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNV/XT+Kb5IE8MbOg/ALOPm5MOuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy
NDM1NTNDQzAeFw0yNjA0MTMwNjQ3MTlaFw0yNjA0MTQxMDA5MTlaMDMxMTAvBgNV
BAMTKDk5QUREQjgzQTJFQUMzMjlENjkxOEI4M0MzRkU5RjVFRDI5RTIwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcthfNeGvC2TK4tUe+XJXIcfQI
bSBezyvGdYPlDBcO/uck3kWcztqvH73d2yktWj0jUjWRhfqLlKrCy6Q4wjN80fxd
xV+mrQA0yt6pFXa905sctC3JW5LobWTtQaXskVVmwdCJZtUYABNQ/zO2bk6VuAiq
JW3n4lFHkgf5NLlX+tCKARRFQZzjwaaHkB24hkLJbIFNsvKwSbr2UTWmN45bqn5D
/z5r/UpoxhVanpZTmDsku2/M+vCRSyYukwzPj6w+r7JEk4tplOQKCqfmW0JezqIN
o1ADHdPH6G2LrNP3Jf0L7nneN8irqsR+6jMgEgwIZPmJsOgx9R06seY3tTqdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUma3bg6LqwynWkYuDw/6fXtKeIDcwHwYDVR0j
BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC
RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8yMjEwMkY3RUFCMzdD
ODFFODdCQjVFQjIxNTYwQkZBNjI0MzU1M0NDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVTVta9JUbmM
oJlVSHXk54eLkKOwtfdHyV88+oAX/1ov2e77nMAYWt59hszsGA914ZCsu/dE4SZf
CSCjRcTizQFg9bz3yCSj8WyIQHFlKWkBd2/IOJ76OM0yGItuZT+0jwZvMXKaVzFs
zKZsy0j3z6kkIT84xqdVleSePYtSwFm1oNJCL6q7ClmOwBznYkShMBJEL/vwXSTC
luRHO6vwgamReTA/0sXtozKhDEZmhvCIkVjT9Fmw7+1LsGRzj5aBkgnFdINXwUsU
cBUqXmHPXfa5+XEtoxNSHTW5JHesGXLdwTNcMEaNvr7dUjNuTUzE9pfo6NUbvHn2
hSspZ+SGrQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 11:01:46 2026 by rpki-client