Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
File:                     3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json)
Hash identifier:          FciSUGxhGTLPrjnHkv+/om4zlcHV/SyFz4LQNb3BQvA=
Subject key identifier:   23:9E:82:94:93:D2:29:2D:7E:78:1C:23:7D:F1:9E:16:A4:57:E9:A0
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Certificate issuer:       /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial:       72D79708D21EDAFE7860AC40791FA7CD44344E63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
Manifest number:          62
Signing time:             Tue 14 Jul 2026 01:45:08 +0000
Manifest this update:     Tue 14 Jul 2026 01:40:08 +0000
Manifest next update:     Wed 15 Jul 2026 04:52:08 +0000
Files and hashes:         1: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=)
                          2: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=)
                          3: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=)
                          4: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=)
                          5: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=)
                          6: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=)
                          7: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=)
                          8: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=)
                          9: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=)
                          10: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=)
                          11: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=)
                          12: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=)
                          13: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=)
                          14: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: D1TDcIrfZ02fUtsJpY3ao2C3fk+LbVuNBCI2KU/tLsA=)
                          15: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=)
                          16: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=)
                          17: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=)
                          18: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=)
                          19: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=)
                          20: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d7:97:08:d2:1e:da:fe:78:60:ac:40:79:1f:a7:cd:44:34:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
        Validity
            Not Before: Jul 14 01:40:08 2026 GMT
            Not After : Jul 15 04:52:08 2026 GMT
        Subject: CN=239E829493D2292D7E781C237DF19E16A457E9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:d0:37:81:52:ed:c9:1d:fb:fa:eb:c9:26:
                    99:71:e3:11:8a:a9:9b:ab:04:18:8c:c6:25:e7:7e:
                    94:d8:56:db:d2:fe:2d:cd:ee:26:54:0e:cc:12:c8:
                    95:4a:bf:f1:53:8e:6d:84:dd:16:24:10:5e:a4:85:
                    25:3d:94:50:3e:5a:91:f2:d3:f8:d7:e6:ca:7b:e1:
                    ea:a1:c5:f1:77:93:dc:65:22:eb:f1:ab:e6:da:05:
                    70:f9:70:f2:89:ea:95:e8:f1:ac:4e:2d:c9:8b:9c:
                    23:7c:7d:e7:28:16:e2:e0:e9:39:0f:7b:67:c4:73:
                    10:42:fd:ac:00:73:0f:7f:44:ae:e9:41:de:cc:5d:
                    a7:24:ff:d7:65:ce:0f:51:40:bd:be:2d:7a:ad:20:
                    78:70:e1:6b:66:22:b2:0f:aa:f6:63:ba:50:d2:fb:
                    dc:eb:39:a6:17:17:75:e6:43:e6:f2:dc:8a:b5:f2:
                    ad:63:4c:ff:a1:d6:ea:8d:66:03:a9:8d:c1:0b:09:
                    3f:ab:ff:a7:33:14:f9:c9:6c:5c:d3:ec:d2:ff:2a:
                    0a:b6:59:5b:99:a4:a0:c3:ab:a2:76:fa:cf:b8:5e:
                    b9:07:3c:cf:9c:8d:d1:92:20:bf:0b:6a:bb:23:19:
                    5c:4b:74:6e:6d:ef:51:d0:e0:fd:53:91:f6:08:56:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:82:94:93:D2:29:2D:7E:78:1C:23:7D:F1:9E:16:A4:57:E9:A0
            X509v3 Authority Key Identifier:
                keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3f:43:6b:35:ba:74:12:d6:6b:04:74:73:71:0e:e4:f3:64:
         1e:61:ea:5c:bf:a8:75:7f:e7:f2:89:20:f2:35:c3:99:d2:fa:
         5b:6e:e2:a6:10:2d:40:21:fa:9b:cc:91:14:ab:c3:b9:99:7a:
         05:8a:06:74:eb:57:22:96:f4:0a:c1:a8:7a:24:87:ae:4f:b4:
         8b:1c:1e:3f:bd:2c:07:f5:4d:d4:d4:53:75:21:e2:49:59:6f:
         22:fb:1c:f5:74:d8:2e:b2:40:36:5e:cf:78:e0:25:39:ec:45:
         0f:0f:32:55:d4:a3:ce:1f:71:11:55:22:b5:eb:60:ea:59:9c:
         45:61:bd:57:02:90:1e:c3:cd:1b:78:85:19:b7:ce:a6:8f:b7:
         fb:db:63:36:20:75:e3:1c:f5:3b:8a:51:38:be:34:e0:88:07:
         f5:9f:61:cf:24:a6:b6:b0:df:14:39:2b:07:5c:f9:58:d2:3e:
         c3:95:c2:ba:f8:82:0b:ec:66:57:b0:3b:4a:09:dc:4c:37:70:
         37:50:c7:ba:dd:c4:d6:7c:4b:e2:0a:ed:7b:ab:1c:93:7c:fc:
         fb:0a:5a:32:dd:d5:0f:95:c7:2f:b4:f8:75:f2:19:73:be:9f:
         80:da:0c:d0:93:21:7e:aa:85:a9:d2:ad:af:7c:be:4f:3d:51:
         fa:0c:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:08:00 2026 by rpki-client