Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File:                     2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier:          gEQvX4Y1dIoonIWFahrasRvBpuLRjOtIWM6DxP/lFAI=
Subject key identifier:   86:0A:53:A5:53:41:9C:98:65:31:DF:F8:5F:71:E7:F1:BE:F9:66:9D
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       3D70F59B10B6C133CAA3EB4B63931CAFDAA6D24F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number:          AF
Signing time:             Wed 13 May 2026 13:06:04 +0000
Manifest this update:     Wed 13 May 2026 13:01:04 +0000
Manifest next update:     Thu 14 May 2026 16:15:04 +0000
Files and hashes:         1: 3131392e3233352e3133362e302f32342d3234203d3e203234343237.roa (hash: P3jXS0lLFc4DM3hVmFyaQ5NRZvxXxC81SrFQZS9hz8Y=)
                          2: 3131392e3233352e3133382e302f32342d3234203d3e203234343237.roa (hash: 7lq4F+kN4dfPPhClDRlyHjLRkbdsAPEeIZnDaZUPfho=)
                          3: 3230322e3137302e3231362e302f32342d3234203d3e203234343237.roa (hash: VAhlOybzXKl74DjpAZWqA5wWuw72zIg3z2/LDN7OZHU=)
                          4: 3131392e3233352e3134342e302f32342d3234203d3e203234343237.roa (hash: ZIpXfUCxWXx/Yh12y5PNrm1YJbqJK3Qj4q0RnCjYmRk=)
                          5: 3131392e3233352e3133302e302f32342d3234203d3e203234343237.roa (hash: HoRk+vOtUZtbIjrp6u/EWfXW2czPAr3G6Df5irzJNwk=)
                          6: 3131392e3233352e3136372e302f32342d3234203d3e203234343237.roa (hash: EcBAZ9E6nz/Jb75uEjGHvAGmLGTaXjfuFeKbWfc4enE=)
                          7: 3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa (hash: cRHV7X3G/PQJ92A12wotA3DpyVsL+d9PuLjA/A0Nb9c=)
                          8: 3131392e3233352e3134332e302f32342d3234203d3e203234343237.roa (hash: Ol89eMrUaCaAzxFLMX+QHnOCMpZp0gTaHt7lzoiplTc=)
                          9: 3131392e3233352e3135312e302f32342d3234203d3e203234343237.roa (hash: hYt2A/jghiSr+S1LZEbd4lSZNEEFRojqYjsnEer5F04=)
                          10: 3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa (hash: 0V8lM1Bn5F+GN6qFR/iyuC3X56n7vTa4N4BWsHp44As=)
                          11: 3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa (hash: HId4vrNLiK+ND0zQR5D2ItU9HGeVy1wXldT93pOdLOc=)
                          12: 3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa (hash: pCqCdfeTBDZ1ufXIAdXFKHOH0guOfd8eNNLcRHIYyf8=)
                          13: 3230322e3137302e3231382e302f32342d3234203d3e203234343237.roa (hash: JSYukomI+EXQlc3XoizcwTgOHfV+PE8qH5q8KtFf0xQ=)
                          14: 3131392e3233352e3138352e302f32342d3234203d3e203234343237.roa (hash: y+0yz/Orh5jDhKBtMq/BWVyUvkwfKPK9TJ2TBjSxOBc=)
                          15: 3230322e3137302e3232332e302f32342d3234203d3e203234343237.roa (hash: XwAGEo52R3/295sfFWGTsHRJeXRAQPtlmlUvnH8SLCk=)
                          16: 3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa (hash: gKGf9ncPC0mDmhttmgm4Nc+M5A6UymruGAO1ADoEIsY=)
                          17: 3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa (hash: eLf51BLu0K8JOwlH6IFc5jAcFpHJFCctgrNJUcADl74=)
                          18: 3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa (hash: 2XKwc+tclrWbdl8kq+8mfw+izHBOIwST00sm/13O4fc=)
                          19: 3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa (hash: lv53noT2X5eaiI1tnOSXvfADsas3LsuXeApSZgepJgg=)
                          20: 3230322e3137302e3231372e302f32342d3234203d3e203234343237.roa (hash: EXQ+5nHfL2CSocP6gK127ORzb92cBqRvxJuWAIUrj3c=)
                          21: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: dZxnUDSj8ZKcZ3kHujN1PrGbXErUo4nulM1VVCLEjyc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:f5:9b:10:b6:c1:33:ca:a3:eb:4b:63:93:1c:af:da:a6:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: May 13 13:01:04 2026 GMT
            Not After : May 14 16:15:04 2026 GMT
        Subject: CN=860A53A553419C986531DFF85F71E7F1BEF9669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:4b:69:a2:91:b4:56:66:3d:1f:01:13:e6:
                    63:6a:f0:64:9c:21:9a:0d:08:4c:28:3e:5d:f2:60:
                    41:ff:b3:13:5a:ee:45:4d:53:d0:bf:92:53:5d:ee:
                    fc:02:e0:53:91:23:4c:a3:ba:12:15:4a:f4:94:f2:
                    98:06:9b:45:8e:15:4c:ee:43:43:e3:44:62:ce:06:
                    7e:6b:0a:15:6c:0b:a5:f9:f2:ca:74:80:bc:31:91:
                    e6:d5:06:4b:2a:4b:af:81:23:5d:20:7d:21:f8:3e:
                    98:6e:63:68:46:8b:18:7a:0e:00:43:a8:b7:86:29:
                    c0:78:32:28:15:f9:d4:ff:18:1b:13:d0:78:47:2c:
                    b4:9f:13:dc:48:1b:4c:17:a9:9d:45:47:aa:0a:5a:
                    e4:0c:22:c1:3f:88:9d:04:7d:78:e3:63:77:ad:65:
                    06:8c:63:07:86:c8:09:28:dd:35:1b:4a:2a:6c:a5:
                    1f:c4:1c:61:82:73:7a:a4:ed:c1:67:39:b7:3d:1f:
                    ae:91:51:64:87:cc:78:e8:34:7b:a7:20:a7:10:02:
                    d2:11:92:d6:c4:99:ab:2b:e7:c9:b6:7d:bf:11:af:
                    e8:f7:2b:6d:27:ba:8e:9e:a0:61:55:c3:ab:55:c4:
                    dc:13:a2:0a:d6:1e:73:9e:73:41:73:26:13:c8:68:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:53:A5:53:41:9C:98:65:31:DF:F8:5F:71:E7:F1:BE:F9:66:9D
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:48:25:d3:34:82:47:4b:b8:4b:dd:63:94:7e:22:13:03:66:
         62:4c:fb:66:54:05:1e:22:63:9f:bd:e7:2e:bc:b7:ec:58:04:
         47:d5:79:4c:7f:66:da:d8:63:e6:b4:71:a8:5f:48:bd:f3:5a:
         72:8d:16:30:6f:a4:44:13:68:31:4a:bd:a1:ca:d6:0d:df:46:
         2e:64:f0:a3:24:0a:44:2b:0f:ce:96:5e:40:f1:c8:90:2a:4c:
         23:40:e7:66:be:f6:78:54:f6:b6:92:9e:f5:1b:98:ae:21:df:
         5a:10:b7:10:3e:20:96:27:8a:91:34:0f:ed:49:fe:61:f4:4d:
         a7:85:06:47:a3:45:81:bd:a2:46:96:9c:67:fb:d2:93:db:4b:
         fe:80:89:73:f2:95:08:55:a9:23:e8:d1:bd:96:80:a1:a7:25:
         ce:6b:f4:6d:60:b9:d3:30:d5:0b:60:4d:49:2a:95:e6:5e:65:
         1f:0a:4d:72:2e:5b:bc:ff:ec:52:2a:27:32:fa:43:39:27:fc:
         9b:e1:c1:c8:bc:38:f1:6a:12:d2:0f:50:03:97:2e:cb:72:db:
         91:ea:e3:8e:bf:9a:86:2d:ed:be:c0:8f:b9:f0:d8:24:51:29:
         bc:6a:b0:af:69:4e:58:45:92:f9:9d:1d:52:aa:39:24:8b:f7:
         ba:d6:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:35 2026 by rpki-client