Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File:                     632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier:          RYwZ0RxmrY1YjdNX1xhRS8A75lZdqpqkiUIIlYe0wyA=
Subject key identifier:   E4:78:82:A8:69:D5:37:D4:B5:F2:DA:CB:BA:A6:57:4E:D5:29:33:24
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       28EC4C43623ECEE28C1927A15B2F02F4D5BA3993
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 09:31:03 +0000
Manifest this update:     Wed 13 May 2026 09:26:03 +0000
Manifest next update:     Thu 14 May 2026 11:23:03 +0000
Files and hashes:         1: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
                          2: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
                          3: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
                          4: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
                          5: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: /060n0TH7g5LiUCbS4zVcUuFZ41JqoYO9IBBgdqegic=)
                          6: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
                          7: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
                          8: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
                          9: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
                          10: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
                          11: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
                          12: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
                          13: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
                          14: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
                          15: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
                          16: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
                          17: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
                          18: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
                          19: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
                          20: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
                          21: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
                          22: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
                          23: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
                          24: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
                          25: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
                          26: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
                          27: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ec:4c:43:62:3e:ce:e2:8c:19:27:a1:5b:2f:02:f4:d5:ba:39:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: May 13 09:26:03 2026 GMT
            Not After : May 14 11:23:03 2026 GMT
        Subject: CN=E47882A869D537D4B5F2DACBBAA6574ED5293324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:96:dc:1e:ae:d3:f6:9c:20:18:10:eb:eb:
                    43:dc:d4:41:d0:d8:3b:eb:7a:42:f9:db:cd:d0:bd:
                    87:e5:8d:00:ac:a9:d1:45:69:e1:86:87:44:21:84:
                    5c:46:bc:6d:ea:4a:14:8b:6d:ed:4e:a1:80:60:31:
                    ab:84:c9:bf:e5:59:60:51:52:12:7c:a4:f3:53:27:
                    fb:4f:11:08:5e:65:b3:c9:eb:f4:63:49:2f:1c:68:
                    a4:a5:1c:76:c8:03:c5:42:1f:52:30:c2:78:8e:0e:
                    ee:24:45:fe:81:82:d4:fa:7e:2e:c2:c3:07:d8:f0:
                    eb:c1:f4:e5:d8:c0:67:3e:82:db:dc:27:ff:92:ca:
                    10:60:8d:f3:ad:25:09:c7:59:25:45:a3:19:d7:27:
                    89:00:29:83:e5:1c:53:e5:e8:49:63:b7:46:dd:fd:
                    93:5d:38:81:9b:cd:7b:b8:17:ef:27:78:5d:54:e5:
                    6a:52:e5:ea:c8:f7:89:7c:e9:8d:12:87:16:b5:19:
                    03:68:9a:ee:fb:27:a6:12:b9:9f:87:11:62:96:56:
                    87:f3:fb:24:a2:90:2d:32:d7:af:ec:56:74:9a:76:
                    1e:65:b5:90:1b:e0:b0:f3:41:58:e1:07:4a:a9:3d:
                    e4:78:5c:6f:04:62:dc:88:82:f1:83:6c:8f:9a:f3:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:82:A8:69:D5:37:D4:B5:F2:DA:CB:BA:A6:57:4E:D5:29:33:24
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:8b:55:30:c4:69:1d:8a:be:13:37:fc:ce:4b:cf:05:1d:
         5a:85:08:8e:fe:49:10:07:53:b3:24:82:07:ff:8d:d1:fc:1a:
         ff:c0:da:3a:1e:5b:92:46:ab:8c:7d:91:31:f6:69:9a:7f:6c:
         61:cb:e3:21:74:59:98:cd:e2:49:7b:fb:2a:8d:90:1d:cc:5b:
         c8:31:87:4e:0b:aa:86:63:d6:c7:16:4b:63:cd:0a:f3:8e:5a:
         f6:20:22:9f:9e:41:76:5f:30:e8:2e:ad:62:ce:5e:0b:23:a3:
         41:53:70:02:02:ad:b3:2b:6e:af:00:a9:b1:4e:68:09:af:77:
         7e:ab:2b:15:d2:f2:1c:5f:c2:bf:77:5b:3d:21:6e:f9:7d:72:
         2c:37:62:07:05:c4:43:3e:95:75:fd:95:54:a9:ab:8a:a4:33:
         46:5a:46:e9:a5:a9:61:46:46:b0:c8:a5:35:fb:00:38:d1:6c:
         97:b1:0c:be:4d:1d:85:7e:14:4c:f8:e9:57:d4:2a:81:55:57:
         9f:24:31:cc:95:fa:53:3e:bc:86:3e:79:96:67:70:ec:63:15:
         1a:7c:04:06:ac:71:75:cd:17:71:15:05:b3:97:93:14:03:ef:
         63:1c:f8:f0:f3:49:22:2a:54:30:23:75:bf:24:81:16:5b:5a:
         c4:14:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:01 2026 by rpki-client