Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
File:                     1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft (raw, json)
Hash identifier:          ydptkZX4/p95ertQgztP5bBI7VMrRwXwxTXhNji14rM=
Subject key identifier:   02:3B:15:1D:58:69:42:78:D6:6A:95:45:3A:A2:19:0E:F9:6A:F7:DC
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       2B3A3531EE78CF935D9DB734C863C6CFDEAE2220
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
Manifest number:          14
Signing time:             Mon 27 Apr 2026 03:08:40 +0000
Manifest this update:     Mon 27 Apr 2026 03:03:40 +0000
Manifest next update:     Tue 28 Apr 2026 04:16:40 +0000
Files and hashes:         1: 3230332e3139362e302e302f32312d3332203d3e203233373234.roa (hash: gfBMB7Ui+e2fOBQ5Tl23lKPDE0eKQepKcbPTeJBVaPE=)
                          2: 3230332e3139362e302e302f32312d3332203d3e2039333038.roa (hash: tvwl3DcgCV9l/4jaEFN1UorROJ4f3fpDK+rUoX0f/4g=)
                          3: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl (hash: 71Kk8Fgg0Am1HjhXxSWFiuYQLIll1dTDL4c2yYRGw3o=)
                          4: 35392e3135312e302e302f31372d3332203d3e2034383437.roa (hash: ArI4wYAC7SWJvSpBRbho8maAZkwC/m4Zaj42AphTHnE=)
                          5: 3230332e3139362e302e302f32312d3332203d3e2034383038.roa (hash: v13sKVP5G+MzipZ26XV3Qox3XisUaSYh0ehZGkkQSOI=)
                          6: 3230332e3139362e302e302f32312d3332203d3e2039383038.roa (hash: nY+kYZKCRjTwM2Pe+31eHYMExxD8wIz3C74tueZL3ZQ=)
                          7: 3230332e3139362e302e302f32312d3332203d3e2034383335.roa (hash: iBmo/DZsJYuOkdZe0e0gObCDwJApBW19tRYQ4FhsS4s=)
                          8: 35392e3135312e302e302f31372d3332203d3e2034383038.roa (hash: yWx639u79WCp190AQf1H01zpvzllxRNJmCFkLd9B94U=)
                          9: 3230332e3139362e302e302f32312d3332203d3e2039383032.roa (hash: Wu+1SDGpl8a7MXGVFls6hoCHGoPpxeNNFt2ui34ZeRQ=)
                          10: 35392e3135312e302e302f31372d3332203d3e2039383038.roa (hash: 0MHbtab6+qWe1eCFFMv/WM/850HACHTCvj3pranmtZc=)
                          11: 35392e3135312e302e302f31372d3332203d3e2039333038.roa (hash: D9Wib7Vok2AaO/W3E5PxmxLK1ykR50+gLQLzRlgNueo=)
                          12: 35392e3135312e302e302f31372d3332203d3e203137343238.roa (hash: piGk2O6opgtRewC/1WWsHXc4ehqS4VsnUIcBazapLXs=)
                          13: 35392e3135312e302e302f31372d3332203d3e203233373234.roa (hash: r/LGsUCpaWo4Hp6PlC2HKivvZ+/MtB+IQE4nuZzvRLU=)
                          14: 3230332e3139362e302e302f32312d3332203d3e203536303438.roa (hash: bAECAsKZB+1Fwy2mAkwcIYkC+KdRHns7QlNGTktE5h4=)
                          15: 35392e3135312e302e302f31372d3332203d3e2034383335.roa (hash: kOe1A3QSK8X1B/wMQLxtIn729idxZ9Hwu6GUEWgnX/I=)
                          16: 35392e3135312e302e302f31372d3332203d3e203536303438.roa (hash: dPojVYuy1KL2pJ8cAcOTePgVbO0XZLI9+uP5Avm8aLs=)
                          17: 35392e3135312e302e302f31372d3332203d3e2039383032.roa (hash: iBbJZXHPeq9OKSYThwM+5qp/2KpXhDM5P/OHhwsSOMM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3a:35:31:ee:78:cf:93:5d:9d:b7:34:c8:63:c6:cf:de:ae:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 27 03:03:40 2026 GMT
            Not After : Apr 28 04:16:40 2026 GMT
        Subject: CN=023B151D58694278D66A95453AA2190EF96AF7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:d4:31:21:2f:47:ab:c5:30:aa:9c:d9:46:
                    bd:44:87:b1:e8:a3:7f:dd:ba:ba:cb:7b:a7:16:b2:
                    e0:d8:77:b0:79:4d:07:af:3c:d7:f0:1a:dd:1a:db:
                    1b:5b:ad:d8:50:0d:36:22:d5:c9:47:97:0a:43:74:
                    50:22:bd:48:97:67:f3:11:67:c1:ad:f3:04:1b:ef:
                    49:6f:10:26:8c:b7:8e:9c:ac:0f:f1:53:e7:9e:ab:
                    5a:9a:6f:70:c6:5b:5e:15:79:b9:cf:7e:bb:1c:a0:
                    2c:68:da:54:14:d7:b3:49:b3:57:d0:58:cc:b0:0b:
                    c7:83:2e:c1:33:04:97:a1:5b:5b:d1:f7:b2:53:f9:
                    89:f8:0b:c7:73:89:c0:f3:f2:bd:95:f4:64:8d:72:
                    d3:61:b8:46:3e:f7:5a:fe:d6:c8:1f:ab:f6:85:44:
                    7b:74:b4:51:bb:e1:49:12:0f:24:9e:79:d8:fa:35:
                    9c:52:36:d8:01:d9:f6:48:ef:91:c0:f9:59:13:d1:
                    cd:ed:a8:34:77:42:4f:0c:e1:d5:06:97:bb:bf:ce:
                    2b:96:09:99:4e:3a:f9:e3:58:97:dd:76:09:89:3d:
                    21:3f:05:a8:2d:ed:bd:d2:53:11:03:ef:6a:a9:2c:
                    a9:49:46:a0:74:2b:57:ae:83:1f:34:dc:ff:99:df:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:15:1D:58:69:42:78:D6:6A:95:45:3A:A2:19:0E:F9:6A:F7:DC
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:20:b1:f9:36:80:cd:b9:d5:97:26:49:7f:ad:20:0c:7a:
         50:8d:47:75:27:1e:fc:17:67:1b:6c:36:82:03:fb:7d:97:be:
         10:e3:ee:4a:48:48:a0:87:c2:13:e5:19:05:79:3a:98:3d:1c:
         36:58:69:e3:78:a5:85:24:9c:d3:50:6d:3e:72:16:1a:ac:c1:
         01:b8:85:95:6c:56:bc:30:55:a7:ea:64:00:fa:3e:24:be:13:
         82:32:86:5a:37:d5:c4:59:c1:39:97:0a:10:b6:dc:d8:03:58:
         02:18:e8:0e:cf:ca:a3:3e:73:74:2c:e0:e8:8f:0b:8f:c6:68:
         6b:a1:bf:60:fa:a4:2d:b4:27:3c:86:c9:06:6e:d6:93:ee:2d:
         7d:ee:f3:b6:52:48:ae:a1:7c:62:22:e5:a1:43:be:d7:74:d9:
         73:c5:ae:92:b5:66:8e:7b:0e:96:99:d3:5d:90:96:90:fb:5d:
         78:ba:6c:58:48:59:cc:34:32:63:fc:9a:ad:2d:2e:16:8c:b8:
         59:f6:85:25:de:87:e7:66:cd:7c:3e:60:33:64:bf:26:ff:22:
         6b:5b:1c:63:ab:c7:83:a1:4c:28:e5:1f:72:fb:ff:d0:b5:ec:
         83:d7:92:a4:0c:e1:54:99:75:05:5f:5e:9d:ed:d5:b3:e7:5e:
         60:67:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:25:58 2026 by rpki-client