Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File:                     632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier:          HqDnyc/goEtJJvL1tn9B/lCuRnSiOEs/dOyKI+x6UPw=
Subject key identifier:   E1:F2:0D:C1:1E:17:3B:45:AC:4F:04:D4:03:17:6A:0F:8E:A7:55:61
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       33D229EDB08755AAA064BAE1EC50279D000BFCB0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number:          58
Signing time:             Wed 25 Mar 2026 12:58:27 +0000
Manifest this update:     Wed 25 Mar 2026 12:53:27 +0000
Manifest next update:     Thu 26 Mar 2026 14:44:27 +0000
Files and hashes:         1: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
                          2: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
                          3: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
                          4: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
                          5: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
                          6: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
                          7: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
                          8: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
                          9: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
                          10: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
                          11: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
                          12: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
                          13: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
                          14: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
                          15: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
                          16: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
                          17: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
                          18: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
                          19: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
                          20: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: Sbw4Pn3X2nnTl8FqKhQTMyFLrlrHUnHRn/bFWxh54fY=)
                          21: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
                          22: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
                          23: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
                          24: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
                          25: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
                          26: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
                          27: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 09:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d2:29:ed:b0:87:55:aa:a0:64:ba:e1:ec:50:27:9d:00:0b:fc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Mar 25 12:53:27 2026 GMT
            Not After : Mar 26 14:44:27 2026 GMT
        Subject: CN=E1F20DC11E173B45AC4F04D403176A0F8EA75561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:78:90:f2:09:8a:96:ee:c6:29:61:32:da:
                    e2:25:87:b0:9b:0c:13:49:7f:44:6d:8d:ff:af:b9:
                    e2:11:b2:72:b9:08:8c:0f:7d:8f:ea:06:60:45:ce:
                    3e:a3:15:d0:6f:b6:5a:df:1e:2d:bf:2b:9f:14:46:
                    9a:39:9a:6f:66:df:e1:a3:dd:04:e4:6f:e5:05:5e:
                    ac:6b:a4:e6:ad:36:99:57:74:98:6e:72:6d:3d:bb:
                    0c:47:6b:9f:88:7a:b0:05:ae:27:07:16:e8:c9:e3:
                    4f:f0:e3:81:2b:a2:5d:21:7a:42:ea:fd:72:8a:c5:
                    12:78:4d:e9:d0:fc:30:65:33:f2:31:8f:3f:82:e5:
                    2a:d0:bf:e5:0d:74:37:dd:35:af:2c:21:98:92:db:
                    57:d2:81:89:e0:ff:66:55:98:e8:cf:93:5a:53:42:
                    d3:5b:78:b2:4b:dc:ba:74:bb:1e:6e:98:1c:20:38:
                    cf:2a:84:df:a5:a7:05:31:62:28:ab:12:30:26:38:
                    43:b1:80:31:e9:dd:de:47:77:2e:f0:5b:3b:ec:c0:
                    df:cb:e7:ee:63:c3:3b:78:96:4f:f2:44:92:8d:1d:
                    c1:0d:67:0f:fc:8e:89:0d:0c:b0:ef:e1:99:f2:c4:
                    ce:55:91:7d:e9:4c:49:3f:ba:0e:a5:18:d0:f9:c0:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:0D:C1:1E:17:3B:45:AC:4F:04:D4:03:17:6A:0F:8E:A7:55:61
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:aa:70:53:36:6c:61:8d:59:52:0f:86:c2:ec:5c:7f:a5:
         3e:1c:d3:84:06:f6:1c:9c:b5:4f:6f:26:a6:c4:9e:ce:6a:c2:
         29:c3:4d:55:3e:8d:6d:68:2e:a3:6e:01:63:65:b9:da:71:f4:
         58:9b:1c:54:3d:96:4b:08:2c:0a:86:03:c4:e4:d5:83:24:63:
         3a:72:71:60:27:93:7e:5e:ca:2e:20:ba:87:bc:1b:ad:8b:9d:
         6d:29:9b:e0:fb:f4:0e:f4:03:69:40:68:7f:80:8b:e7:3a:8c:
         48:87:97:ab:fd:7c:8d:d9:f3:e5:9c:63:81:5c:b7:8b:8b:b1:
         39:d0:f6:03:c2:46:57:a6:6c:ad:87:82:e2:12:3b:65:eb:c0:
         02:f3:91:2f:e4:d3:ce:b6:f5:67:68:14:f5:6c:49:40:73:5e:
         84:74:6d:35:6b:be:3c:f3:65:73:38:c9:75:85:13:31:bd:60:
         8b:54:61:c2:62:27:b8:59:9a:62:92:fb:2c:84:e4:5a:69:30:
         82:8f:22:e0:f0:1b:46:20:44:f8:7a:b7:70:2e:09:80:d0:ac:
         cc:6c:86:dd:7c:b6:2f:f0:ba:de:93:80:ee:1c:da:5e:3c:4a:
         56:72:df:70:44:77:4c:1b:c2:24:13:8f:8d:ce:f8:77:c0:a7:
         f2:b2:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:35 2026 by rpki-client