Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File:                     5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier:          LKHrw7E1A5Yfp7Vzc7BHU+IEa6atCnqnw1zsSe6Kbig=
Subject key identifier:   13:CB:58:F6:2D:29:27:1F:04:35:B0:94:41:05:7F:D1:DD:BE:4B:87
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       0BEA49ACCFC18A941B0E091BABD95EE946A67912
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number:          49
Signing time:             Mon 06 Jul 2026 19:51:12 +0000
Manifest this update:     Mon 06 Jul 2026 19:46:12 +0000
Manifest next update:     Tue 07 Jul 2026 22:01:12 +0000
Files and hashes:         1: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
                          2: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
                          3: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: xfr4wcQEWqCljbTVs7BQc6vRczjZV2OqGTMA/vuEw5o=)
                          4: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
                          5: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
                          6: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
                          7: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
                          8: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
                          9: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
                          10: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
                          11: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
                          12: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
                          13: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
                          14: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
                          15: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
                          16: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
                          17: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
                          18: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
                          19: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
                          20: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
                          21: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
                          22: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
                          23: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
                          24: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
                          25: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
                          26: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
                          27: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
                          28: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
                          29: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
                          30: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
                          31: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
                          32: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
                          33: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
                          34: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 22:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ea:49:ac:cf:c1:8a:94:1b:0e:09:1b:ab:d9:5e:e9:46:a6:79:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: Jul  6 19:46:12 2026 GMT
            Not After : Jul  7 22:01:12 2026 GMT
        Subject: CN=13CB58F62D29271F0435B09441057FD1DDBE4B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:96:64:bf:b1:24:6b:5b:b8:06:81:8c:91:
                    d7:32:4f:46:74:ca:5e:e7:17:c3:d7:39:65:41:9f:
                    7c:ca:89:40:64:d7:03:1c:ae:c5:a4:dd:86:fa:f2:
                    e0:e8:6f:a9:02:71:79:6b:e2:26:96:e9:70:7a:a5:
                    09:a1:0b:1c:25:97:97:ef:12:4b:66:b6:31:c7:81:
                    87:74:50:b5:fd:e0:77:f4:c7:74:14:f5:5f:81:fe:
                    9c:f7:2c:d7:c7:18:54:8e:d4:02:d7:96:b5:36:83:
                    8c:df:8c:1e:0e:a2:25:f2:09:57:c7:ff:e8:f9:99:
                    e8:01:7f:c6:69:75:de:55:82:da:ef:35:54:c7:ed:
                    02:c9:9c:a6:d4:0c:b9:10:b2:05:5f:09:02:87:26:
                    a8:be:15:e7:cb:33:cb:db:64:9e:f2:39:98:58:3b:
                    91:33:0f:1f:f9:2c:51:7a:4f:ad:4d:76:0c:14:41:
                    d2:da:34:f3:61:a8:3d:0d:bb:2f:7b:83:16:de:ea:
                    c9:c4:85:f6:ef:9c:f5:ae:7b:c1:da:23:b9:56:db:
                    09:39:40:f2:44:c7:f2:43:13:d8:d1:b1:b9:3f:1c:
                    14:b2:5d:f9:96:74:8f:9b:c8:55:b8:09:ff:ff:45:
                    c3:d5:ec:c4:04:93:3e:5a:e2:c0:28:92:6d:d7:b4:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CB:58:F6:2D:29:27:1F:04:35:B0:94:41:05:7F:D1:DD:BE:4B:87
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:9f:ec:68:f3:8b:6a:57:1f:28:e5:4a:4f:52:60:55:f1:
         5b:f2:b0:79:65:1a:27:e1:93:d6:23:5c:c5:45:f9:f2:35:31:
         e2:68:ad:4d:14:d7:89:58:22:7b:18:62:16:43:3e:7d:14:51:
         63:8f:73:73:e0:3a:0a:be:33:53:2d:65:05:d4:2d:33:31:cb:
         3f:ee:e9:8c:ae:45:2a:f4:e1:e2:1a:10:ec:9f:3d:a0:a1:56:
         d0:c8:af:d7:ac:46:4b:f6:dc:75:5d:7b:49:75:a4:57:7c:54:
         08:6e:64:e6:3a:48:92:37:74:24:71:ae:8f:a0:8b:33:11:13:
         01:b8:73:5c:8c:e1:8b:f7:a2:c0:f8:c6:11:33:85:25:93:8f:
         dd:75:df:1c:5d:ca:10:8f:8e:53:09:12:97:e5:ba:99:b6:10:
         c0:7f:59:5e:ba:fe:3e:00:d2:52:bf:0d:fc:64:ac:89:1a:28:
         45:d0:47:87:f3:cc:9d:28:65:f9:d9:ca:0e:b3:8e:2e:01:2b:
         94:b6:12:7c:94:b1:eb:46:4a:e6:8f:d2:f8:65:0e:85:ef:40:
         e9:e1:be:be:68:5c:c4:11:7a:11:44:66:e5:52:10:ee:78:35:
         92:60:c3:19:38:66:9a:c9:60:0f:6f:44:a4:2d:49:92:4d:c8:
         fa:4a:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:44:39 2026 by rpki-client