Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
File:                     AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json)
Hash identifier:          1vnAQe4bui1EH8SuNv+ueFCXr+WydbbQJQN4OiThxu4=
Subject key identifier:   E8:3B:4E:0E:CD:12:DF:1A:BB:EC:45:82:23:42:2D:79:BD:E4:74:14
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       04CE8C03B9A189119500FA68AD18ED8955DEF31E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
Manifest number:          0109
Signing time:             Wed 13 May 2026 03:46:14 +0000
Manifest this update:     Wed 13 May 2026 03:41:14 +0000
Manifest next update:     Thu 14 May 2026 06:17:14 +0000
Files and hashes:         1: 34352e3132332e38382e302f32322d3232203d3e2030.roa (hash: lG2ZbbxJfaw+5iiNSQjEHzUDh8G7c0RlQSM5zwPNhl8=)
                          2: 3231382e3234392e3135382e302f32332d3233203d3e2034383038.roa (hash: 3ceKRIJp9hPJsGZQR1PKEyjoGLwpUcexCGKSojmT1GE=)
                          3: 3132342e3230332e3137362e302f32302d3230203d3e2034383437.roa (hash: 4Qs9U9XfFNv/TY+eQSbKZFJuGLXlxLsbx7QLeVFW+dw=)
                          4: 3132342e3230302e3139322e302f31382d3138203d3e2034383038.roa (hash: siOmptHKKPhmD0LkiglfdI4+WM8ba/G2yXc6wv+RztY=)
                          5: 3132342e3230302e3132382e302f31382d3138203d3e2034383038.roa (hash: raXmRyZhwmfgFMu8gEbDCiAzvh9IpBgIJK4IsspKj/4=)
                          6: 3231312e3135352e3234302e302f32312d3231203d3e2034383038.roa (hash: E1U6gS2Posr+r7jSvGchKE01bMOoCEK1VqvaUNn10wI=)
                          7: 36302e3139342e3132382e302f31382d3138203d3e2034383038.roa (hash: fHg9dra9mMab3aobPYJjZr/VYfI3JbdqpfcMGmLeyj8=)
                          8: 36302e3139342e36342e302f31382d3138203d3e2034383038.roa (hash: Dx4gXrgJ5A8zbXibcfygSbNanvPuYMUK/P7aNo83kc8=)
                          9: 3132342e3230302e302e302f31382d3138203d3e2034383038.roa (hash: Olih28FAgREG/VaUTAjqn7Lwk2QZdMaQtuUJMo0fACU=)
                          10: 36302e3139342e3139322e302f31382d3138203d3e2034383038.roa (hash: OwMz/NCM5RwsD579gD9QZOtKuWqBO6R51H16f/3VKH0=)
                          11: 3231382e3234392e3135372e302f32342d3234203d3e2034383038.roa (hash: ULiXq0P4h50y3yyc1tfBQzR6eeZAy2XuiYT7gOcjO/I=)
                          12: 3130332e3230322e3135322e302f32322d3232203d3e2030.roa (hash: 68rqkA0Dd/TDndF3fhljeqfsPimGIk/CfpvC9jlUQ6E=)
                          13: 323430333a383038303a3a2f33322d3438203d3e2034383437.roa (hash: lHV0yPNPAZkgbactrq9QFIoJQ7QVQCnXlQeUMkAzhNg=)
                          14: 3231312e3130312e302e302f31382d3139203d3e2034383038.roa (hash: +GqHg0MSYFV1trCOQyVttKU61r41gqFWfa6RejSd1Rw=)
                          15: 3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa (hash: ZQIgPn2HgSe1U+5rh9WF3pvI7Z+J3APYv3wbUoq0U/E=)
                          16: 3230322e342e3235322e302f32322d3232203d3e2034383038.roa (hash: aDgmYdE0L8C1WF0rFZgXWsdsNPB9y2DOEaJwIrAZ+ns=)
                          17: 3231382e3234372e302e302f31392d3139203d3e2034383038.roa (hash: 3Clc+IRXrl8iy7jcu9YHHl+UPNN8ZHlSqxq3+gmiPpE=)
                          18: 36302e3139342e302e302f31382d3138203d3e2034383038.roa (hash: YgTAxak9bJ970isMLGg/xtAcarO8yGZze1bmSCyNrhY=)
                          19: 3132342e3230302e36342e302f31382d3138203d3e2034383038.roa (hash: 96l27eUOM9Bt+FhbrebDQvcD22GlfHPPEfnN7pFNf6c=)
                          20: 3130312e3130342e3136302e302f32302d3230203d3e2034383437.roa (hash: 9B1woNiD0W8Gr6bU2EX2vea/FjgZ8ncnIdPIROrbH9E=)
                          21: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: igvQ5erzU/n1wSKdpL5nRR0yD72giAkMBMRLWEuHg14=)
                          22: 323030313a343433383a3a2f33322d3332203d3e2030.roa (hash: D2ZiSKBGSnVrE4Ke5K0eYaWLt3rZ9tiPNZ3zgSx7pDw=)
                          23: 3130312e3130342e3134342e302f32302d3230203d3e2034383437.roa (hash: K7KlitBfiy7ZEWlTKdOFY7g8c3Q6Z8kGWI5+zK2q0fg=)
                          24: 3231382e3234372e3132382e302f31372d3138203d3e2034383038.roa (hash: ojtWMsOB7wT/isvsgDYWuE4pJP8zOAxRVyhwlOBQsbc=)
                          25: 3231382e3234342e3232342e302f31392d3139203d3e2034383038.roa (hash: WxdzB+fNraZ293XSBWcaPFhsSf6ei4WgOJ6MTN64xeY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:8c:03:b9:a1:89:11:95:00:fa:68:ad:18:ed:89:55:de:f3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 03:41:14 2026 GMT
            Not After : May 14 06:17:14 2026 GMT
        Subject: CN=E83B4E0ECD12DF1ABBEC458223422D79BDE47414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:6a:6b:41:f4:12:db:66:6c:5b:b8:60:8d:
                    84:53:92:ea:d7:ac:f1:44:1c:ef:d9:5c:72:7b:e8:
                    28:c0:f5:f3:92:ed:9a:f0:21:88:fd:ab:3c:e5:e8:
                    2f:8b:43:76:8c:87:50:65:c3:c0:7c:9e:6f:29:b3:
                    54:08:51:41:af:76:bc:4c:0a:32:74:a7:72:d9:60:
                    0e:7e:12:7f:2f:b1:50:e7:6d:7d:9c:f2:b5:c6:ff:
                    35:78:42:4f:6a:cd:fc:43:83:c7:c8:24:ab:dc:0a:
                    5a:77:ed:de:9c:5a:84:9d:c6:f1:4c:08:77:7e:53:
                    dd:2b:ed:69:ca:69:9f:7e:c9:e7:ba:5a:29:47:2f:
                    6e:23:ee:1b:08:82:b1:08:1b:fa:da:ba:e4:6a:70:
                    46:de:66:fc:91:9f:74:9b:8c:42:ad:b5:77:28:f0:
                    ed:bc:81:28:f8:f4:b8:e8:4a:d3:99:3a:3a:53:9c:
                    ff:2c:1d:83:38:2c:e9:e3:e0:51:68:13:e2:be:65:
                    61:32:44:83:2e:73:5f:33:d1:80:c6:f5:be:42:79:
                    9f:cb:62:b7:1e:c9:88:0b:0d:24:23:51:40:ea:8e:
                    7a:27:eb:d9:96:6f:d6:05:82:8f:f9:75:f9:5d:c3:
                    7d:2a:f6:0e:70:97:cb:c9:75:e5:24:c7:ab:11:bd:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:4E:0E:CD:12:DF:1A:BB:EC:45:82:23:42:2D:79:BD:E4:74:14
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:68:0a:96:8c:69:76:2f:be:7e:2f:02:8a:7e:9e:59:30:
         0e:1e:c5:52:14:43:ab:8f:a0:c3:77:e8:78:4e:74:92:74:4e:
         15:c1:16:16:99:26:bf:87:fe:d1:39:19:f4:15:bf:ac:5b:80:
         ef:41:fa:c3:16:2d:01:c5:95:cf:80:03:36:7c:5f:ae:52:b7:
         dd:cf:a2:69:ff:59:9e:3b:ef:d4:d6:34:86:c1:84:4b:30:ae:
         48:0b:e4:f9:58:9b:a9:52:1d:b1:e2:09:87:e0:47:62:79:4c:
         50:f2:9e:58:35:24:71:68:be:67:13:c4:80:b5:7b:fb:51:04:
         eb:55:e3:73:a2:4a:ca:a0:1c:f7:76:74:0a:cf:d2:10:52:9f:
         65:05:42:23:d8:eb:0a:4b:90:48:f9:0f:0c:0b:f8:88:6f:78:
         99:80:76:a7:58:4a:a6:4e:73:8a:30:c9:61:f1:b0:56:18:2a:
         2e:19:ac:e5:de:60:42:b7:23:b9:b3:fd:f2:2d:21:b1:44:9b:
         11:8e:d5:f1:41:2f:c8:b3:0a:19:18:c1:e4:43:95:d8:7a:0a:
         cd:d3:59:6b:65:c6:c9:ac:9a:42:d3:95:4f:a2:f4:2d:55:02:
         80:d4:cc:e5:f8:21:42:e4:68:cd:9b:72:cb:a0:c9:d7:80:f7:
         a9:dd:c0:be
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBM6MA7mhiRGVAPporRjtiVXe8x4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTMwMzQxMTRaFw0yNjA1MTQwNjE3MTRaMDMxMTAvBgNV
BAMTKEU4M0I0RTBFQ0QxMkRGMUFCQkVDNDU4MjIzNDIyRDc5QkRFNDc0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm2prQfQS22ZsW7hgjYRTkurX
rPFEHO/ZXHJ76CjA9fOS7ZrwIYj9qzzl6C+LQ3aMh1Blw8B8nm8ps1QIUUGvdrxM
CjJ0p3LZYA5+En8vsVDnbX2c8rXG/zV4Qk9qzfxDg8fIJKvcClp37d6cWoSdxvFM
CHd+U90r7WnKaZ9+yee6WilHL24j7hsIgrEIG/rauuRqcEbeZvyRn3SbjEKttXco
8O28gSj49LjoStOZOjpTnP8sHYM4LOnj4FFoE+K+ZWEyRIMuc18z0YDG9b5CeZ/L
YrceyYgLDSQjUUDqjnon69mWb9YFgo/5dfldw30q9g5wl8vJdeUkx6sRvSCxAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6DtODs0S3xq77EWCI0Iteb3kdBQwHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4
RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsxoCpaMaXYv
vn4vAop+nlkwDh7FUhRDq4+gw3foeE50knROFcEWFpkmv4f+0TkZ9BW/rFuA70H6
wxYtAcWVz4ADNnxfrlK33c+iaf9Znjvv1NY0hsGESzCuSAvk+VibqVIdseIJh+BH
YnlMUPKeWDUkcWi+ZxPEgLV7+1EE61Xjc6JKyqAc93Z0Cs/SEFKfZQVCI9jrCkuQ
SPkPDAv4iG94mYB2p1hKpk5zijDJYfGwVhgqLhms5d5gQrcjubP98i0hsUSbEY7V
8UEvyLMKGRjB5EOV2HoKzdNZa2XGyayaQtOVT6L0LVUCgNTM5fghQuRozZtyy6DJ
14D3qd3Avg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:04:45 2026 by rpki-client