Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          RlPdRZs3UacFA/t9/51s8lyO/O200DAYjtgyyCnmb9E=
Subject key identifier:   1A:BD:7F:11:2D:FE:4F:0F:24:6B:1C:5F:C7:91:8A:44:73:D1:5E:CD
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       64086A66B48EA3AF98D94150D8C46FCEB20EB994
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 04:50:22 +0000
Manifest this update:     Fri 24 Jul 2026 04:45:22 +0000
Manifest next update:     Sat 25 Jul 2026 06:18:22 +0000
Files and hashes:         1: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          2: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          3: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          4: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          5: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          6: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          7: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          8: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          9: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          10: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          11: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          12: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          13: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          14: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          15: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          16: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          17: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          18: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
                          19: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: 8XpLPJKSVV5mBBNpNE4yz2fbqRNHAaK5teQ2Lqbcxao=)
                          20: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          21: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          22: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          23: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          24: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          25: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          26: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          27: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          28: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          29: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          30: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          31: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          32: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          33: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          34: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          35: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          36: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          37: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          38: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          39: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          40: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:08:6a:66:b4:8e:a3:af:98:d9:41:50:d8:c4:6f:ce:b2:0e:b9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Jul 24 04:45:22 2026 GMT
            Not After : Jul 25 06:18:22 2026 GMT
        Subject: CN=1ABD7F112DFE4F0F246B1C5FC7918A4473D15ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:a5:21:ea:26:c5:5e:8f:a6:19:10:69:cd:
                    e0:0d:d4:7f:62:d6:a8:38:3a:93:e7:99:a4:ed:a7:
                    3d:2c:d3:ed:62:95:d2:26:36:04:e0:f3:61:79:70:
                    0b:b1:b1:9a:f9:ff:ad:ea:14:23:a7:1c:44:73:df:
                    f7:c1:62:7a:e1:19:e3:eb:dd:04:28:6e:e1:a3:6f:
                    c8:1b:5d:54:0e:d3:85:b1:c3:a1:76:bf:9e:62:58:
                    9c:ef:e5:60:49:6e:74:92:64:cb:88:a6:e2:5f:75:
                    2e:a0:f4:52:72:9f:e9:29:39:88:cf:1d:45:ec:90:
                    42:90:45:e0:e0:92:6f:42:c8:21:21:f1:2e:40:19:
                    ea:87:62:f1:04:4b:50:6a:ec:68:4f:72:6a:ae:f0:
                    8b:ee:9b:c4:59:a0:f9:e5:eb:c6:f8:73:6f:32:76:
                    f4:03:f9:ee:12:2b:f8:bc:00:3a:63:1e:41:30:ca:
                    ad:b0:98:50:22:2e:a8:e1:c2:7c:d8:fd:42:6c:b1:
                    89:20:7d:ee:1e:90:6c:6d:d5:c2:15:6d:0b:10:11:
                    66:c9:e0:54:0f:01:92:8f:9f:3f:71:c5:cf:d2:d8:
                    9b:fa:e2:9e:68:c2:91:07:1d:22:f4:72:6a:d5:a7:
                    8d:7b:33:f8:89:08:e1:e5:32:f1:41:22:b9:24:46:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:7F:11:2D:FE:4F:0F:24:6B:1C:5F:C7:91:8A:44:73:D1:5E:CD
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:69:76:4f:e9:54:81:7b:1c:2b:1b:59:84:18:f5:40:b1:
         f4:6b:9a:60:8f:95:0d:48:b4:82:86:50:63:3c:31:ba:af:92:
         4a:f2:57:06:73:50:c4:ff:cf:f5:e4:4b:e1:83:b8:14:2f:d0:
         ee:0c:8d:05:89:db:ad:66:1d:af:0e:d8:57:10:ba:6b:36:57:
         4a:16:49:cf:0b:4d:89:a1:00:7f:4d:d9:5c:d6:fb:37:ac:2b:
         bc:9c:ee:ed:73:23:f1:69:d1:44:94:64:05:e5:8c:c4:97:20:
         3d:9f:d5:52:74:81:35:d4:06:43:c1:01:e7:21:12:aa:c8:83:
         57:30:a4:ce:ef:bc:e7:08:f8:17:b3:e6:30:88:e6:c0:4b:c0:
         7b:b0:7e:15:e3:73:67:09:33:0b:b6:7f:30:5d:8c:af:d2:c8:
         ca:6f:64:c6:73:ae:ae:27:85:4a:46:2d:3f:4d:ee:ac:dd:22:
         d1:22:bf:3f:d0:2e:ac:4a:17:56:2c:2d:12:1c:f5:da:ee:f9:
         1e:96:88:7f:be:f6:a0:ad:d8:dd:47:b5:a1:7b:b9:45:99:e5:
         7d:f1:cc:2f:6e:4a:59:ae:74:86:27:c8:17:01:50:46:d1:28:
         3f:d0:5a:94:54:17:3b:ba:12:58:52:c0:5e:12:03:c3:24:d5:
         20:d0:6b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:13 2026 by rpki-client