Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
File:                     20CAC8E70B5CB3094E47FF051623A98578C1E315.mft (raw, json)
Hash identifier:          5V2JQmd7iL1pa1I+dyVHGNE2s/cogePZ1iRrJTiG27o=
Subject key identifier:   0B:5F:71:0D:21:85:5D:FC:EA:D4:64:82:F1:D2:64:8C:6D:C4:6F:05
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       45CB249862ACE9077B21743E490DAEB5ED814B1F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
Manifest number:          33
Signing time:             Mon 27 Apr 2026 02:28:40 +0000
Manifest this update:     Mon 27 Apr 2026 02:23:40 +0000
Manifest next update:     Tue 28 Apr 2026 03:17:40 +0000
Files and hashes:         1: 34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (hash: kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=)
                          2: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (hash: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=)
                          3: 3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa (hash: D5p9o0pPwoaCYpIygArboXdaAKJUUXV6AxrgPTibA68=)
                          4: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (hash: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=)
                          5: 3130332e3234322e3137322e302f32322d3332203d3e203233373234.roa (hash: YZ5T2Oqzq3fS11ORHuNW8S2yOvYweiK41wkkRAaw0Qw=)
                          6: 3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (hash: Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=)
                          7: 3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa (hash: fsW9bgLnkSThZZN38JADzvD2+yEtJL46n4VSz59f8uA=)
                          8: 3130332e3234322e3137322e302f32322d3332203d3e203536303438.roa (hash: 8nc7tUDAsYwhhigURDMQwsHhNNYfY1MZLKThQmZ1brU=)
                          9: 3130332e3233382e342e302f32322d3332203d3e203233373234.roa (hash: ZnKtKYiBnUUSTNvN6M2vxi145uCIypRtFdR+UvbpvNs=)
                          10: 34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (hash: EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=)
                          11: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (hash: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=)
                          12: 3131342e3131322e3130302e302f32322d3332203d3e203233373234.roa (hash: +TlL4Kdz+dQAHCRvyRXNP3LY3euHbF5VUmsAzxQL+aA=)
                          13: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (hash: FkmKF/A15MnCldWsxEeQrn1WOY/6MVmhweo6R2+N9ug=)
                          14: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (hash: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw=)
                          15: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (hash: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o=)
                          16: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (hash: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=)
                          17: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (hash: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=)
                          18: 3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (hash: hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=)
                          19: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (hash: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=)
                          20: 34332e3234372e3138342e302f32322d3332203d3e203233373234.roa (hash: TP0dXFP6J3YoHPWv+68Yw+2qDs8x5/9THiU9vM0SoMI=)
                          21: 3130332e3233372e3234382e302f32342d3332203d3e2034383038.roa (hash: WwwQRuAQTBMvvKr19C3JnKF0SqXIf8PDBY9whAL8jEk=)
                          22: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (hash: zjWupKFn+Rq4sUjDxU2QIc6giBG1zVO8GuFEp9ODEEc=)
                          23: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (hash: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ=)
                          24: 3135302e3234322e3234382e302f32322d3332203d3e203233373234.roa (hash: vwPEmTIi0cfS54R8Za5ZiN5YnIDWkEMterbti+msZ9U=)
                          25: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (hash: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=)
                          26: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (hash: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI=)
                          27: 20CAC8E70B5CB3094E47FF051623A98578C1E315.crl (hash: 8n4A2dFmJieSwyE8nIBbcmSeYKNxNf/LOmF6z5Oa70c=)
                          28: 3131342e3131322e3130302e302f32322d3332203d3e203536303438.roa (hash: HDMI1ewe1Lh3K6TdmGE4aoTMsi+MILZ0hJ8SdXtvbW0=)
                          29: 3130332e3233372e3234382e302f32322d3332203d3e203233373234.roa (hash: AcHcXiVvDzr4U8IHFzFV19Pg7cmEKYi52gQ1GF6T8Qk=)
                          30: 34332e3234372e3138342e302f32322d3332203d3e203536303438.roa (hash: C/FXsL3L/3Jsgkl+fBV8LPbIlHgWxnnbtmRbpXzbwUQ=)
                          31: 34332e3234372e3138342e302f32322d3332203d3e2034383038.roa (hash: SMlfZiu/E9B56jmZCUuN+IcRQSUjx9Fu3cPV/QTt2/Y=)
                          32: 3130332e3233382e302e302f32322d3332203d3e203233373234.roa (hash: K0whk0Vf3B/fS221zljEn2qu9FvjJx3u4ndcAwqzswA=)
                          33: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (hash: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=)
                          34: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (hash: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 03:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cb:24:98:62:ac:e9:07:7b:21:74:3e:49:0d:ae:b5:ed:81:4b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 27 02:23:40 2026 GMT
            Not After : Apr 28 03:17:40 2026 GMT
        Subject: CN=0B5F710D21855DFCEAD46482F1D2648C6DC46F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:f3:b7:47:30:9d:43:1a:8d:58:49:8d:cd:
                    b5:51:b3:ec:38:eb:27:5b:2f:e2:c7:54:57:53:92:
                    4e:60:6c:68:09:bd:b3:48:94:9c:66:0a:0d:f5:6f:
                    8b:4d:1c:06:2b:b5:18:34:11:7c:33:d4:c9:8f:92:
                    d9:da:81:85:67:7c:bc:c5:9e:6e:ff:99:fd:01:e6:
                    9b:f1:0e:f0:e6:e7:46:00:e3:77:49:5b:4e:b9:e0:
                    8b:a0:6a:0b:96:7b:89:06:c3:06:3c:29:9f:8e:c7:
                    eb:fa:95:d9:d3:6c:c7:e3:8f:03:7d:e8:95:2f:72:
                    1f:df:12:94:44:9c:ab:09:96:56:0e:3c:bf:d6:36:
                    55:e8:98:d3:78:7c:15:8b:9e:33:62:0c:8b:d9:3e:
                    9c:05:ea:1e:81:d5:36:31:43:6f:8f:74:69:18:89:
                    73:b3:d1:36:aa:a5:70:1b:73:f4:e3:5f:24:cf:99:
                    20:bd:dc:a1:5c:5a:d6:6f:c3:85:2f:45:15:5f:e1:
                    f9:7e:c4:3d:6f:29:32:78:c2:26:b2:e2:f4:52:82:
                    0e:c8:41:4c:77:ca:12:a9:0e:d1:d2:2a:05:ef:96:
                    3b:a0:c4:15:4b:af:90:bf:6e:1f:9b:f2:3a:43:9a:
                    a3:74:06:7a:ee:4b:23:db:87:8f:fa:4c:25:00:c5:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5F:71:0D:21:85:5D:FC:EA:D4:64:82:F1:D2:64:8C:6D:C4:6F:05
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:59:d6:d7:82:9e:3f:a2:60:40:24:64:28:bf:66:a5:91:f5:
         71:9c:b0:04:cf:d0:15:85:fb:85:b4:f9:20:a8:d0:32:f6:a1:
         a4:a6:58:73:53:c7:c5:57:dd:05:df:56:7f:ac:d8:f9:08:ba:
         87:3c:c5:27:2a:df:2a:56:cb:2a:bb:17:4c:08:a0:0b:38:4f:
         47:ba:2f:5f:3f:a8:cc:31:23:ec:04:c3:02:db:e4:88:1a:90:
         7b:ff:23:95:ad:66:70:7d:d8:bb:16:0c:ed:17:7d:93:82:c3:
         dd:f4:88:2c:f9:e3:12:0e:1e:a4:5f:71:f3:96:ed:8c:e2:c1:
         f1:2f:af:b8:e0:9e:09:a4:78:c9:0c:49:60:50:77:c9:5f:72:
         fa:36:78:ee:8c:c5:49:e9:a2:55:a5:03:f4:cc:2a:d6:fa:61:
         a2:85:ce:ec:11:29:03:92:3e:24:52:5e:58:27:90:d7:70:60:
         94:a1:1c:f2:dc:cd:15:ca:a5:02:72:7e:b3:19:f6:cf:96:aa:
         74:a5:73:b1:0c:a4:ff:37:e7:a7:de:33:13:de:9d:6f:4d:09:
         8a:c3:56:37:3c:fd:42:65:35:9d:df:f4:c8:fb:1c:25:f6:44:
         50:77:8b:7d:d7:e3:29:aa:99:9c:56:8e:66:e4:14:79:78:00:
         ee:6f:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:30:51 2026 by rpki-client