Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
File:                     65806DD85601F327B2E3F4DC2F345E815E61DB23.mft (raw, json)
Hash identifier:          t/6BnYJsXsJEMIQWMCY4D3p5PY4Xc4dZmxsMEOYSguA=
Subject key identifier:   37:06:2C:07:15:82:F7:27:CF:06:AF:9E:28:27:0A:CD:C0:81:93:F9
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       41B107A3695997B6FA33A45993809F337688EB87
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
Manifest number:          A3
Signing time:             Fri 28 Aug 2026 06:47:58 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:58 +0000
Manifest next update:     Mon 31 Aug 2026 11:01:58 +0000
Files and hashes:         1: 65806DD85601F327B2E3F4DC2F345E815E61DB23.crl (hash: Ywj+6ryeLjI1GYCfiW3DT6gXxWAcoQr9UZA0yf/aUwU=)
                          2: 3137352e3130322e3137382e302f32342d3234203d3e2034383038.roa (hash: FYd+eq/SHPAKfkMl7nIqw6Q8glfO8iho1Hbi/kqnRaw=)
                          3: 3137352e3130322e3139362e302f32342d3234203d3e2034383437.roa (hash: iCFQEPDvT0HQUO5MAuyLHyPpwNqncM3+KCkBD5qi/YM=)
                          4: 3137352e3130322e3138322e302f32342d3234203d3e2034383437.roa (hash: /LFsxTPzOq7XV08B9qwtkrNCKFbCpnxXzFuXWlF6fQI=)
                          5: 3137352e3130322e3138342e302f32312d3231203d3e20313331353232.roa (hash: zCgBPYVpORQxeQ4aKcEOXa9llUC0vPnWBwD3k7FInUw=)
                          6: 3137352e3130322e3138342e302f32342d3234203d3e2034383437.roa (hash: Gtu92mh7KRfpL4Tirr64PagiYdiyqdGm6sJSpirRnEw=)
                          7: 3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa (hash: qmLtyVxaZyfOsLbp/wjiFwlsxVA/0eE36iWtTW7oXYg=)
                          8: 3137352e3130322e3138322e302f32342d3234203d3e2034383038.roa (hash: m6jA29tBDd/58kALW1iwaVXbBTydCfq1JvKSEfUEDnU=)
                          9: 3137352e3130322e3138372e302f32342d3234203d3e20313331353232.roa (hash: adGO+H9+622O9VYvfqcuyp+rNig7f6P+FJQKHeeNzC4=)
                          10: 3137352e3130322e3138392e302f32342d3234203d3e20313331353232.roa (hash: sdUhCn7syhlI0ZSIL66bdP8IZm1yPqxPRJeHuK0LI/Q=)
                          11: 3137352e3130322e3138352e302f32342d3234203d3e20313331353232.roa (hash: SqVbGtwtcNdYP17eOtfwPBvu7Y6GvtZQAgRbhwPvjiU=)
                          12: 323430323a393263303a3a2f34382d3438203d3e2034383437.roa (hash: UteJ+O/64IJfhgsjkbL/ms8jtOciCUn2/lbO9cu8GPE=)
                          13: 3137352e3130322e35362e302f32312d3231203d3e20313331353232.roa (hash: mTH7vZtQItipGv7adN5EuaX+j41fef5ijUHMj3zMEfs=)
                          14: 323430323a393263303a3a2f33322d3332203d3e20313331353232.roa (hash: bn74U/pJ6i07cFoLddKvBk+QLiigztrzbjuTsxVUDHs=)
                          15: 3130332e39362e3132342e302f32322d3232203d3e20313331353232.roa (hash: XcPEDDd5XUZ92/EQVtflc5J1Ovojp0mc494fURRBcyo=)
                          16: 3130332e37392e32342e302f32322d3232203d3e2034383038.roa (hash: xIwKlkgrn4S4OmLp/Gw49+eRn1kJ1bDEYCVnieb56b8=)
                          17: 3130332e37392e32342e302f32342d3234203d3e20313331353232.roa (hash: /46NoP8gcNXORz8F6xYLBnJYstLmEHwmyCB+jyfewfA=)
                          18: 3137352e3130322e3139322e302f32312d3231203d3e20313331353232.roa (hash: vf8U1MeZWCxfNITypAveoziREsa6qHxN8RU0xj6i6jY=)
                          19: 3137352e3130322e3138332e302f32342d3234203d3e20313331353232.roa (hash: hJqdGkJh1J5qaDQeBFZc3lPij2PWvmwzH/SUXaXuVew=)
                          20: 3137352e3130322e3138332e302f32342d3234203d3e2034383437.roa (hash: kRMAt5GzPEeqwIDCkrF4JNFFCmyr2sflYLwZiCSr6d0=)
                          21: 3137352e3130322e35342e302f32332d3233203d3e20313331353232.roa (hash: Twi7wI0YtvJciCcMPem134HLjQSNomt/5MaLAnLebAI=)
                          22: 3137352e3130322e3138332e302f32342d3234203d3e2034383038.roa (hash: 4U2tJ4QnLKnaUwFMskTeY77fPQA4jheaDTBvRQNj6Mw=)
                          23: 3137352e3130322e3138312e302f32342d3234203d3e20313331353232.roa (hash: mNMEzGa0TKM7qqySgajl/wzCFSgIYCqK0WmUv655Xz4=)
                          24: 3137352e3130322e3138302e302f32342d3234203d3e20313331353232.roa (hash: kdGbXiPz0U/8oNn2Cupk7nNzs6YmTL0aaTZrJytR/xs=)
                          25: 3137352e3130322e3137382e302f32342d3234203d3e20313331353232.roa (hash: QsgzvWfO5Ghq/yOeb7i4q+SfglgSx8YB2QyPtBJ8Tu0=)
                          26: 3130332e37392e32372e302f32342d3234203d3e20313331353232.roa (hash: mHHzGTJsCo37ntO1IoP/g3lXcc9B/kSl7YUWCW1yFr0=)
                          27: 3137352e3130322e3137392e302f32342d3234203d3e20313331353232.roa (hash: OhkHKq2DyO8Be9IGqml4tqnKUxRAF5JdAK0S+/NKb0c=)
                          28: 3137352e3130322e3138362e302f32342d3234203d3e20313331353232.roa (hash: es0NV0lUcL7B8+IFaq9CK3HhPJxiD6YEpZbY2Ww6dXo=)
                          29: 3137352e3130322e3137392e302f32342d3234203d3e2034383038.roa (hash: CJ5PVT82bllpTDU8uwFLfuDIFug2opc+Gl8fz3SRsvw=)
                          30: 3137352e3130322e3138312e302f32342d3234203d3e2034383038.roa (hash: xjAUDTlqWxeXNtuhzGSll8Mcbq4Y/e0d61CcGdWPzNc=)
                          31: 3137352e3130322e3137382e302f32342d3234203d3e2034383437.roa (hash: xGPJrvDWtJIMeL617DK2lg8+27Xg0TnmJCu7gkjxkMU=)
                          32: 3137352e3130322e3137392e302f32342d3234203d3e2034383437.roa (hash: xmuZBYTvisAod0fI7Enc2RrSbWMZEye3dAnf/ittzfc=)
                          33: 3137352e3130322e3138342e302f32342d3234203d3e2034383038.roa (hash: +TnZfU4ZklGbMI9DO0/CsoTHVouVTSXM3qGo7wcmAeU=)
                          34: 3137352e3130322e36342e302f31382d3138203d3e20313331353232.roa (hash: cWxDlmTvkucqtNVNFWekPaHq1hl2IaO7AsOAn9C4NI4=)
                          35: 3137352e3130322e3139302e302f32342d3234203d3e20313331353232.roa (hash: IsvTjhOD7PdwPp3pO0vpO2ki400JioBHtsLO+DlneOU=)
                          36: 3137352e3130322e3138302e302f32342d3234203d3e2034383038.roa (hash: 9YpHuhXYCQ9BdDArGw/HiHIijroPkGOIQj4nI2kV1/c=)
                          37: 323430323a393263303a3a2f34382d3438203d3e2034383038.roa (hash: z3aW/cGUBCOgCbXCNQM0uYgfb7vC4XZ7KBubPUKlgb8=)
                          38: 3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa (hash: Mv7KdKpRBUy/xmVKXsQdUwpE7dWcV5ZwrJIq0u38QqE=)
                          39: 3137352e3130322e3138302e302f32342d3234203d3e2034383437.roa (hash: Zb4IHE4KR5o0w9ZRyEqzdEJsDI/6QJhAZBFAkb21A/A=)
                          40: 3137352e3130322e3138322e302f32342d3234203d3e20313331353232.roa (hash: ft38kQF0YBdt6z5YsPl9bMuc8vIa0L90n8N8NfMQiro=)
                          41: 3130332e37392e32352e302f32342d3234203d3e20313331353232.roa (hash: nuT6j7amOOCu8ttGS7qfpZHPlE0A2CUlrIMN8XuUuSY=)
                          42: 3137352e3130322e3138312e302f32342d3234203d3e2034383437.roa (hash: cbGQDwcexNjJ1gdxr/Z8aM3zz6VoVFVTmNG88KJNVE4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 11:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:07:a3:69:59:97:b6:fa:33:a4:59:93:80:9f:33:76:88:eb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: Aug 28 06:42:58 2026 GMT
            Not After : Aug 31 11:01:58 2026 GMT
        Subject: CN=37062C071582F727CF06AF9E28270ACDC08193F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:5b:43:82:87:0b:4d:39:12:e3:42:d8:f1:
                    9b:7e:c8:02:84:de:9e:04:9c:3a:7d:6c:cc:1e:85:
                    10:2d:60:e8:e5:79:55:7d:07:0d:e7:0c:90:b1:77:
                    87:99:ea:8e:26:7b:57:8e:09:c2:fc:b1:98:a5:da:
                    0c:d9:2a:39:65:49:04:0e:b1:37:2e:0e:ae:d9:10:
                    13:9a:52:e1:31:f3:5a:54:da:fc:55:ef:79:c2:69:
                    36:05:fc:a5:c7:d2:6e:e0:87:83:73:01:e2:4b:d3:
                    2f:00:78:72:0d:50:16:ee:64:84:00:55:fd:fe:5f:
                    56:6b:50:ce:85:1a:28:33:ef:5b:e7:3b:c9:7c:f9:
                    d0:3e:f4:28:a4:0a:44:38:13:33:6c:2b:6f:a3:9a:
                    90:4a:7a:a5:02:48:be:83:c6:04:b8:6e:32:ed:3c:
                    17:54:36:5b:ad:7f:8f:d5:de:5e:16:5f:32:46:8a:
                    6c:fe:50:d3:c4:72:29:87:8f:7c:a5:5a:56:83:ba:
                    c9:a1:10:49:8d:e0:12:69:bb:b1:1d:15:fc:67:18:
                    48:70:0d:a7:da:22:41:ce:a9:e8:1b:81:78:17:69:
                    da:c2:96:f9:3a:01:e6:09:f9:11:3a:fb:6e:f2:d0:
                    aa:1f:bc:dd:63:82:a4:4f:93:5c:7e:6f:2f:1f:5f:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:2C:07:15:82:F7:27:CF:06:AF:9E:28:27:0A:CD:C0:81:93:F9
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:3b:c9:dc:9a:34:3b:fe:d3:12:90:7b:df:9d:31:e7:8b:
         7f:6c:44:ef:02:94:46:16:c5:45:a6:69:6a:92:61:30:76:25:
         d0:b1:c4:08:fc:39:e6:1a:62:f8:7a:1e:ee:38:c4:8a:3a:10:
         2a:be:4e:80:02:83:4e:ab:50:61:a2:1a:fd:5d:16:3f:a1:f7:
         07:30:b0:e8:e5:fe:c5:d5:d3:45:97:a1:28:23:5a:1b:4c:1a:
         c0:d7:99:ff:19:15:1d:df:32:b8:21:4b:c5:88:65:fb:bb:0f:
         ad:07:71:48:c5:ac:d1:1a:01:3a:86:37:00:d4:7e:b1:0c:7a:
         1f:c7:23:01:93:30:0c:43:99:4b:ed:b5:18:25:5a:9b:93:40:
         b9:be:91:c0:42:ba:74:48:da:53:9d:4c:7a:75:13:ee:78:d4:
         ca:e0:47:99:4a:ab:c4:5e:2e:94:63:9c:e3:81:7d:0f:ea:9d:
         0c:5d:df:16:84:9b:1b:07:27:74:fb:00:ca:ba:a1:b5:de:41:
         f6:07:5c:c6:9e:d9:66:3b:7f:be:d9:82:05:94:21:62:32:33:
         9a:27:d7:0e:c0:91:42:a5:c4:45:35:0e:34:4c:ee:d9:12:52:
         c7:4f:cb:b8:ea:60:b5:7c:7a:3e:f0:e8:87:4c:d8:0b:b6:05:
         8a:fa:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:58:13 2026 by rpki-client