Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          bXhvwLdHTxiCpD4bXcswov1kTcK4Gj3gLaBJX6t67NA=
Subject key identifier:   AF:1E:32:FB:50:AF:F1:E0:28:BF:0A:C5:58:12:02:CB:AF:36:2A:60
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       3801338391E9A52FA49AD0AFBB11D6153DFB3BD4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          0136
Signing time:             Sat 26 Sep 2026 10:53:39 +0000
Manifest this update:     Sat 26 Sep 2026 10:48:39 +0000
Manifest next update:     Tue 29 Sep 2026 17:06:39 +0000
Files and hashes:         1: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          2: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          3: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          4: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          5: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          6: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
                          7: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          8: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          9: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          10: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          11: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          12: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          13: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          14: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          15: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: knr/M6ahW6NughNM+gjwlpH5S+ZUzP1mrhOWxgEQbeQ=)
                          16: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          17: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          18: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          19: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          20: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          21: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          22: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          23: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          24: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          25: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          26: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          27: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          28: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          29: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          30: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          31: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          32: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          33: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
                          34: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          35: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          36: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          37: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          38: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          39: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          40: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:01:33:83:91:e9:a5:2f:a4:9a:d0:af:bb:11:d6:15:3d:fb:3b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Sep 26 10:48:39 2026 GMT
            Not After : Sep 29 17:06:39 2026 GMT
        Subject: CN=AF1E32FB50AFF1E028BF0AC5581202CBAF362A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:4f:f9:a2:bb:b3:49:23:df:5a:dc:16:ec:
                    d1:26:85:21:5e:01:5d:c7:71:48:78:a9:8b:6a:2c:
                    11:aa:b3:15:e5:1c:57:d1:42:e0:20:e8:24:f2:3f:
                    19:fa:a4:30:7a:4b:20:f8:ea:8c:a3:44:00:9d:cb:
                    f5:58:ea:90:b6:f0:6d:28:66:21:2e:7f:0d:e8:67:
                    6d:4c:6d:2b:c3:5a:42:86:9a:4b:fb:7a:52:be:04:
                    b2:1b:2f:35:85:0d:d3:11:42:4e:83:31:56:67:7e:
                    c5:e8:36:37:33:6a:72:de:f4:25:e3:fb:44:46:d0:
                    ce:bb:ea:bb:7c:e5:99:b3:2e:a3:20:3e:8a:6b:66:
                    a0:23:81:00:76:cb:df:14:3c:5b:dd:e4:29:ad:a6:
                    58:f8:e1:96:6f:cd:d9:3a:29:58:76:6a:89:f8:08:
                    8a:ec:d2:6d:9e:94:2d:f5:e0:d5:c0:dd:53:69:22:
                    9c:e6:33:a9:06:c4:7a:5c:3d:1e:02:44:70:43:4d:
                    9b:7a:8b:f7:45:57:0f:9e:32:db:8c:f7:a8:2b:ec:
                    94:3e:e2:a1:46:a8:20:95:5a:63:32:2e:f8:58:82:
                    24:12:9b:11:22:d5:6b:5e:80:e1:8a:44:1c:b1:73:
                    7b:14:1c:0f:b0:9a:15:6d:89:f1:4a:87:89:54:06:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:32:FB:50:AF:F1:E0:28:BF:0A:C5:58:12:02:CB:AF:36:2A:60
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:59:3e:40:31:55:64:31:fa:39:0c:a1:48:74:87:ab:be:ec:
         80:03:e5:02:db:f7:0f:43:5e:b4:8e:b3:5d:73:d4:eb:c0:ea:
         1c:8e:93:60:7c:8a:5d:a7:00:5e:5e:61:70:6b:12:3b:a7:bf:
         db:38:da:6e:e1:aa:91:6b:88:c0:64:ea:e4:07:4d:a4:2d:f1:
         39:0c:7f:81:c4:3a:9d:2d:32:60:07:57:87:37:2c:bb:5a:d8:
         f7:c9:0f:e2:d8:36:c3:af:73:72:e4:6f:9a:54:58:2a:15:35:
         55:7d:11:44:12:68:20:01:d5:36:e1:bb:ac:57:ec:b7:bf:20:
         15:dd:0b:67:0c:57:c6:9b:f9:a8:52:52:a7:bf:07:51:12:98:
         64:49:71:6f:c3:e0:83:6d:9c:bd:9b:a8:c2:d2:0e:55:7d:a5:
         2d:68:85:5c:eb:2e:a7:29:4a:36:2d:b3:d7:ad:65:51:32:82:
         62:01:41:c6:40:27:9f:62:71:68:84:bb:ee:a7:66:ce:0a:2b:
         f4:3c:63:9f:e3:76:e3:e5:eb:a9:b2:75:bc:9d:65:33:ca:cb:
         5a:8c:9f:49:40:bf:44:b7:a3:15:ce:3f:a5:40:f1:d9:5f:2e:
         87:aa:45:ad:86:95:59:c6:84:47:0f:f5:ab:0b:e4:35:44:1e:
         7b:4e:0a:0d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOAEzg5HppS+kmtCvuxHWFT37O9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz
Rjc0NzQzNDAeFw0yNjA5MjYxMDQ4MzlaFw0yNjA5MjkxNzA2MzlaMDMxMTAvBgNV
BAMTKEFGMUUzMkZCNTBBRkYxRTAyOEJGMEFDNTU4MTIwMkNCQUYzNjJBNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83k/5oruzSSPfWtwW7NEmhSFe
AV3HcUh4qYtqLBGqsxXlHFfRQuAg6CTyPxn6pDB6SyD46oyjRACdy/VY6pC28G0o
ZiEufw3oZ21MbSvDWkKGmkv7elK+BLIbLzWFDdMRQk6DMVZnfsXoNjczanLe9CXj
+0RG0M676rt85ZmzLqMgPoprZqAjgQB2y98UPFvd5Cmtplj44ZZvzdk6KVh2aon4
CIrs0m2elC314NXA3VNpIpzmM6kGxHpcPR4CRHBDTZt6i/dFVw+eMtuM96gr7JQ+
4qFGqCCVWmMyLvhYgiQSmxEi1WtegOGKRByxc3sUHA+wmhVtifFKh4lUBsHnAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrx4y+1Cv8eAovwrFWBICy682KmAwHwYDVR0j
BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2
NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zRUMyRDg4NEE1NEU4
NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclk+QDFVZDH6
OQyhSHSHq77sgAPlAtv3D0NetI6zXXPU68DqHI6TYHyKXacAXl5hcGsSO6e/2zja
buGqkWuIwGTq5AdNpC3xOQx/gcQ6nS0yYAdXhzcsu1rY98kP4tg2w69zcuRvmlRY
KhU1VX0RRBJoIAHVNuG7rFfst78gFd0LZwxXxpv5qFJSp78HURKYZElxb8Pgg22c
vZuowtIOVX2lLWiFXOsupylKNi2z161lUTKCYgFBxkAnn2JxaIS77qdmzgor9Dxj
n+N24+XrqbJ1vJ1lM8rLWoyfSUC/RLejFc4/pUDx2V8uh6pFrYaVWcaERw/1qwvk
NUQee04KDQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:05:05 2026 by rpki-client