Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
File:                     3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json)
Hash identifier:          ZSGSs68tnRQKXx6uPHEGv4CAnriK0DSno5uSMzkUN0w=
Subject key identifier:   2E:8E:1A:C2:4A:86:54:91:69:00:0F:F0:37:93:00:C0:B1:C2:E3:9D
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       0FB0ABCED48323327045386CA0E57C12360FA265
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
Manifest number:          0147
Signing time:             Fri 02 Oct 2026 07:00:17 +0000
Manifest this update:     Fri 02 Oct 2026 06:55:17 +0000
Manifest next update:     Mon 05 Oct 2026 18:25:17 +0000
Files and hashes:         1: 34352e3235302e3138302e302f32332d3233203d3e20313436373732.roa (hash: +b2dhVOVKDtioYPTzWNdeYIhHzc/eT7XuKHHyYYXG4c=)
                          2: 3130332e3231392e3130322e302f32332d3233203d3e20313436373732.roa (hash: upd/xRwcRMOyUggBsC8+yLpqU4saiLo05+rOh4II0kI=)
                          3: 34352e3234382e3131312e302f32342d3234203d3e20313436373732.roa (hash: VbxRPo9naVUIyurSkLBtg7k/srQp6uo7BW4532v3aR8=)
                          4: 3130332e3231392e3130302e302f32332d3233203d3e20313436373732.roa (hash: P3K3OIbCzI0XzMLF0uwvrqMz53i07+O7+VjfXgy9X9k=)
                          5: 3130332e3231392e38362e302f32332d3233203d3e20313436373732.roa (hash: Yfoz9xxwKjmqfnw2q9PyUtn0eB7o9iKc8OYzqt5CXtk=)
                          6: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: DglLnUHd8j+rNAIiKA6ImnxBCURacN4FikiTw+N1jD8=)
                          7: 323430353a38303a313a3a2f34382d3438203d3e20313436373732.roa (hash: vlXgtjBVbJFOq7vuvdpiEzr6ie8jb0e5+nOu4Vmglas=)
                          8: 34352e3235312e322e302f32342d3234203d3e203137383136.roa (hash: xQaZ3HVuIKpAcOlBiyMNnx2dM6eLd2p2ALqBAqxjTnM=)
                          9: 34352e3235312e332e302f32342d3234203d3e20313436373732.roa (hash: 84MNUAfErXO1nrT6PFyovWHzQ0LJbZ44LYC9o9hGmRE=)
                          10: 3130332e3231362e3235322e302f32332d3233203d3e20313436373732.roa (hash: 85cogqW3cgBvb1qEBXnDojaIEGBNKaYMbROIlE3CxvI=)
                          11: 3130332e3231392e38352e302f32342d3234203d3e20313436373732.roa (hash: bfPR+n8MVZYvIWDo9z+iW70WBR828zNBS45aog4V7kE=)
                          12: 3130332e3136312e3235342e302f32342d3234203d3e20313436373732.roa (hash: fj/sfPPmAd9753TITYEO7kcwQ/mY2SreemFgpWZQiKQ=)
                          13: 3130332e3231392e38362e302f32342d3234203d3e203137383136.roa (hash: MsotgNCbJVnwcF6GNHfJFvug+8qFy3u27Fwx0K4RaYs=)
                          14: 34352e3235302e3138302e302f32332d3233203d3e203137363233.roa (hash: z5CNtqggfpBwQHvrd01NKsHY76dW1RQ+2zq6ZLkT6L8=)
                          15: 323430353a38303a31333a3a2f34382d3438203d3e20313436373732.roa (hash: Gxt4Ykxs/NSO3oYxAyGpx1JRUm/GbqTBMNiXb0ZzAy0=)
                          16: 3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa (hash: iVAXKRVA2OAi2gvS05dFXtSfuZgHOruHMQhgHWIEYzE=)
                          17: 3130332e3231392e3130302e302f32342d3234203d3e20313436373732.roa (hash: 219OtlcRCl/vPh6STNR1SQotbaKdym/A4i7C6d7LCR4=)
                          18: 34352e3234382e3131302e302f32332d3233203d3e203137383136.roa (hash: rr5JAs6HDOFXBtLZkLqPblk/EY74JbxpAS7e2jKACc8=)
                          19: 3130332e3231392e3130302e302f32332d3233203d3e2034383136.roa (hash: IEEAMJ/et3yDLp0gz+24xRYvSyjwCAZnVUXAZLMMWZo=)
                          20: 3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa (hash: aO+DkS0zTHdPvPxlggzUbAE4Lu26a9KguQs3DYxkPts=)
                          21: 34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa (hash: 7+NACEPrfZIjwyyvQX5L/jbdhCn11Xntxaa9WOvj/BI=)
                          22: 34352e3235302e3138342e302f32322d3232203d3e2034383136.roa (hash: RI+idagZL3rCO8K59vR3lwVwbOqjyorKRH3k++Z9FWE=)
                          23: 34352e3234382e3131312e302f32342d3234203d3e203137383136.roa (hash: ttRx26kC00IoCX1/dzaef5ghHPQ/v6BLKOJI3sa9q2U=)
                          24: 34352e3235312e332e302f32342d3234203d3e203137383136.roa (hash: uSuFlHn4k3bVuC52zHUSyzhTBc5Fm6FctXux3T7DbQ4=)
                          25: 34352e3235302e3138302e302f32332d3233203d3e2034383136.roa (hash: h33Ywf61tukA2QkrBnvDjXYDOBhCWihy9GsVOA4UzB4=)
                          26: 34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa (hash: W1l5mudPYcSen+JGIjiH5OvFJniliEIgw6W/cZ0DGIg=)
                          27: 3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa (hash: xfHtUllvBPTAy6/27hVdOv327Oe+DuxYun8lGyDGb9E=)
                          28: 3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa (hash: gOtBt5dxmbqpIh35k3uBcEVYq2I9ADjt7aYmNTPxKwo=)
                          29: 34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa (hash: U8C83SFKmu1pIjhg0/yU2GWj3Qn+cHJkfJuvl1iEvOM=)
                          30: 3130332e3231392e38342e302f32342d3234203d3e2034383136.roa (hash: +UoPpbWnURpfbpIbYh3w7i8m7JadEsvpBAM9kAKWwMg=)
                          31: 3130332e3231392e38372e302f32342d3234203d3e203137383136.roa (hash: AkcodKSLOJnqmykPjfYRdG32yI0Bg0CB2+vqj+ECd+o=)
                          32: 34352e3235312e322e302f32332d3233203d3e20313436373732.roa (hash: HITweSejw9LPAAPT/Jl4d6YLdDhw11XAHiVYd5sZLX4=)
                          33: 34352e3234382e3131302e302f32332d3233203d3e20313436373732.roa (hash: NE6ljU5KjnghW4pvGF9PHCS/poej81XQVr8BeMhZs4k=)
                          34: 34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (hash: CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=)
                          35: 3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa (hash: R/rCDfiWFqlqcod2NVjhGm5lLmuyaFu/pyXuhb2N/OU=)
                          36: 34352e3235312e322e302f32342d3234203d3e20313436373732.roa (hash: 7jPxW0WvnmO/t63ZVu1I7F5VltpTwDKuxT58tOU7Syw=)
                          37: 3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa (hash: a2fwyzRSRqL4WwFa/yyzGlykbolRD7Y3AfnVVrYXKX4=)
                          38: 3130332e3139312e3234322e302f32332d3233203d3e2034383136.roa (hash: 3MO4WAS/mIlJMIrVI+85+WeNsWtQva36XIGPGXTaHbI=)
                          39: 34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa (hash: +bdBZ80rAX6pNZJiJAuhtUYUM70FL/Zy8XUK4RRkC4Q=)
                          40: 3130332e3231392e38352e302f32342d3234203d3e203137383136.roa (hash: jRq5VBloVwPh4dKWaqfMlW8C2DOGJE+e3Rmxbqfjc8U=)
                          41: 3130332e3234392e3139322e302f32322d3232203d3e2032393134.roa (hash: 6Dd6bY/19hb8Fb1XB6oGcDAKn2zllhJNly+dgxbJ3ks=)
                          42: 3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa (hash: RaWNNSXVR8tps2og/Ak+iaDGQJ/KY1pty8OUWmINtkg=)
                          43: 3130332e3231392e38362e302f32332d3233203d3e203137383136.roa (hash: DBr6cLEVJ7XwREP4pQQSd50m/dudrJ8YOhAiFdwuqI4=)
                          44: 34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa (hash: tkBx4tWgliy7ZjUqEJENfu0FL53NI8fOevKc/nnlA/4=)
                          45: 3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa (hash: BRl4mQ6cdOwfk/Kx+aDhlCnxDNICpywBM8raPfvbf6o=)
                          46: 3130332e3234392e3139322e302f32322d3232203d3e20313436373732.roa (hash: 8mPsT5oJQF3AQL5nN4rKEPJ/o9mbd8uFLbuw1ua6Ufs=)
                          47: 3130332e3136312e3235342e302f32332d3233203d3e20313436373732.roa (hash: ey8SNdqgz102zC4nsGIO+c2poo9UqPVjBV8E8DOwA8c=)
                          48: 34352e3235312e322e302f32332d3233203d3e203137383136.roa (hash: Rx5OuBmdni1w5P8Xxxw5Y5JHc1feX0tCf3IRIhgjjW0=)
                          49: 34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa (hash: l83eIj5SYIwVCavpwqb2q7eJdR1MR1SvO0kRlN7ALug=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:ab:ce:d4:83:23:32:70:45:38:6c:a0:e5:7c:12:36:0f:a2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: Oct  2 06:55:17 2026 GMT
            Not After : Oct  5 18:25:17 2026 GMT
        Subject: CN=2E8E1AC24A86549169000FF0379300C0B1C2E39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:06:09:8c:24:35:c2:64:78:51:b5:80:85:
                    81:1c:81:4c:10:97:f4:3b:f7:7b:33:26:41:8a:5f:
                    f7:13:2d:b5:16:11:59:52:77:d4:90:ff:13:54:5e:
                    29:3e:c6:52:3d:9c:f0:6f:7d:1a:ba:39:b0:ac:dc:
                    e7:7c:8e:4f:e4:9c:e3:59:0e:ea:c4:69:a7:1e:ab:
                    1b:45:af:07:2a:28:33:eb:2f:48:54:35:06:ee:e4:
                    1c:62:dd:bc:83:90:71:02:c9:c3:69:50:9f:3e:98:
                    09:dd:22:e4:ea:2e:fa:1a:19:cf:8f:5d:9d:87:10:
                    ae:a3:0e:b7:b7:f1:4a:24:21:05:ca:eb:c7:ee:16:
                    c9:73:85:47:05:b1:c1:b9:9e:d1:01:65:e2:93:0d:
                    e7:3b:22:ae:95:11:3f:fe:f1:4f:62:73:92:1f:00:
                    ce:31:e1:58:85:29:41:eb:e2:cb:5d:ba:38:a8:93:
                    c9:57:78:a2:01:53:e7:59:25:cb:11:43:57:d6:4d:
                    c9:ab:75:69:47:f1:50:21:e6:3a:c6:f5:e4:1b:f0:
                    3c:91:ee:41:6e:c9:3e:3f:96:88:a6:ba:64:75:02:
                    7e:b0:0b:7d:ad:66:6c:80:95:a1:6a:7f:09:d6:45:
                    96:57:53:72:e5:81:7b:15:95:b8:8d:75:35:64:64:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:1A:C2:4A:86:54:91:69:00:0F:F0:37:93:00:C0:B1:C2:E3:9D
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:38:1a:a3:90:b5:ad:91:20:f4:25:df:96:fd:67:3f:9f:53:
         27:c8:07:cd:84:34:79:02:41:f6:37:42:df:ee:be:71:e9:69:
         c0:d8:52:13:06:98:7a:e9:93:91:46:a5:c0:4b:8a:ae:17:09:
         56:44:65:2a:4d:5f:22:f1:4f:fd:66:13:42:e2:b3:be:49:60:
         79:cf:f3:45:aa:f2:bc:ec:3b:d3:32:f4:fc:2a:81:82:6b:82:
         c7:6a:76:4e:30:76:4a:3c:67:bc:55:c8:93:c7:04:23:24:9f:
         89:9e:e7:be:f8:6d:b6:91:f9:ca:45:4b:0b:e8:da:f7:cf:dc:
         e0:a7:6f:e8:2c:c0:f1:5e:32:92:87:f1:c6:f8:e8:be:71:d5:
         dc:2a:0c:dd:35:3c:71:ed:33:ed:c3:dd:30:aa:a6:f9:00:2a:
         3d:a3:1d:d9:22:12:a1:e8:76:3a:06:cf:bc:ae:fe:c3:6d:ed:
         d9:86:c0:6a:c1:f3:83:60:a4:8a:6a:3b:6f:ec:fd:87:bf:3b:
         b1:01:5d:4a:a6:b8:fa:2f:a3:4e:bc:41:2b:c6:90:22:52:fa:
         44:32:b9:72:9f:1f:bd:21:b0:80:9b:8a:07:7f:f7:4a:4d:40:
         ca:33:ff:72:09:85:26:1a:3e:61:3d:b3:fa:71:25:56:9a:39:
         77:32:ff:f9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUD7CrztSDIzJwRThsoOV8EjYPomUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy
RjFBMTJCODAeFw0yNjEwMDIwNjU1MTdaFw0yNjEwMDUxODI1MTdaMDMxMTAvBgNV
BAMTKDJFOEUxQUMyNEE4NjU0OTE2OTAwMEZGMDM3OTMwMEMwQjFDMkUzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqAYJjCQ1wmR4UbWAhYEcgUwQ
l/Q793szJkGKX/cTLbUWEVlSd9SQ/xNUXik+xlI9nPBvfRq6ObCs3Od8jk/knONZ
DurEaaceqxtFrwcqKDPrL0hUNQbu5Bxi3byDkHECycNpUJ8+mAndIuTqLvoaGc+P
XZ2HEK6jDre38UokIQXK68fuFslzhUcFscG5ntEBZeKTDec7Iq6VET/+8U9ic5If
AM4x4ViFKUHr4stdujiok8lXeKIBU+dZJcsRQ1fWTcmrdWlH8VAh5jrG9eQb8DyR
7kFuyT4/loimumR1An6wC32tZmyAlaFqfwnWRZZXU3LlgXsVlbiNdTVkZECTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQULo4awkqGVJFpAA/wN5MAwLHC450wHwYDVR0j
BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw
NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF
OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezgao5C1rZEg
9CXflv1nP59TJ8gHzYQ0eQJB9jdC3+6+celpwNhSEwaYeumTkUalwEuKrhcJVkRl
Kk1fIvFP/WYTQuKzvklgec/zRaryvOw70zL0/CqBgmuCx2p2TjB2SjxnvFXIk8cE
IySfiZ7nvvhttpH5ykVLC+ja98/c4Kdv6CzA8V4ykofxxvjovnHV3CoM3TU8ce0z
7cPdMKqm+QAqPaMd2SISoeh2OgbPvK7+w23t2YbAasHzg2Ckimo7b+z9h787sQFd
Sqa4+i+jTrxBK8aQIlL6RDK5cp8fvSGwgJuKB3/3Sk1AyjP/cgmFJho+YT2z+nEl
Vpo5dzL/+Q==
-----END CERTIFICATE-----
Generated at Sat Oct 3 12:57:08 2026 by rpki-client