Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File:                     DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier:          kJUrhwZV887vUaiQPF/jCUTlBcV4bm9EABnps9b0azY=
Subject key identifier:   60:63:C7:A5:3B:04:76:E9:81:0B:51:03:9C:39:4E:2C:1E:36:A8:4C
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       283EF8C44017224837C7160DBB622C6F1F934776
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number:          98
Signing time:             Tue 12 May 2026 19:45:42 +0000
Manifest this update:     Tue 12 May 2026 19:40:42 +0000
Manifest next update:     Wed 13 May 2026 23:43:42 +0000
Files and hashes:         1: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
                          2: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
                          3: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
                          4: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
                          5: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
                          6: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
                          7: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
                          8: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
                          9: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
                          10: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
                          11: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
                          12: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
                          13: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
                          14: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
                          15: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: Mqq3usQRGfpWiqo+F5USzEAv5KM2igya4w1JcHqW1hI=)
                          16: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
                          17: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
                          18: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
                          19: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
                          20: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
                          21: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
                          22: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
                          23: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
                          24: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
                          25: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
                          26: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
                          27: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
                          28: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3e:f8:c4:40:17:22:48:37:c7:16:0d:bb:62:2c:6f:1f:93:47:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: May 12 19:40:42 2026 GMT
            Not After : May 13 23:43:42 2026 GMT
        Subject: CN=6063C7A53B0476E9810B51039C394E2C1E36A84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:63:a0:9a:76:cf:67:95:83:fb:4b:3d:b3:
                    e9:93:31:02:0c:ee:1b:3d:65:cd:01:82:60:56:b8:
                    79:3a:85:de:21:a8:fe:9f:bb:6c:07:63:c7:39:94:
                    5f:fc:af:c3:0f:79:ea:85:57:16:35:23:67:0d:0d:
                    3f:1d:07:c9:49:20:1c:3f:4f:f6:1f:15:ab:0e:72:
                    a3:be:9a:25:2f:0f:8c:9d:b3:2e:7a:6a:6b:b3:6e:
                    1b:6a:a1:ed:cc:13:e9:2d:9e:bb:2b:ca:89:89:75:
                    72:f0:93:0b:3c:b8:fd:b1:85:03:24:a3:6e:a2:1c:
                    26:99:48:06:a0:c1:41:0d:cb:17:db:b7:1e:da:b8:
                    5a:5a:ea:1e:77:d7:51:95:e7:d0:c8:49:d4:6c:1c:
                    30:66:4a:fe:9f:d9:6c:8c:85:62:bf:6d:28:9a:0a:
                    db:e7:23:83:5c:94:af:71:ed:3d:7e:dc:da:27:ae:
                    09:6a:72:c1:eb:4a:a4:c5:8a:0a:5e:7c:71:21:40:
                    5c:05:72:a3:05:6d:89:92:87:91:7b:71:17:2b:19:
                    20:f1:a3:aa:0f:6a:63:e2:10:c4:c0:65:31:73:54:
                    d4:46:8c:fe:32:ba:ba:d1:af:ed:33:c7:3a:30:b3:
                    f7:9d:b6:4f:55:64:14:b9:cb:ec:81:32:b8:d9:27:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:C7:A5:3B:04:76:E9:81:0B:51:03:9C:39:4E:2C:1E:36:A8:4C
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:bd:16:7e:c9:ae:db:a6:0e:7f:62:62:ce:a2:a4:5b:e4:
         e5:31:a4:62:cd:58:24:dc:88:9d:e1:b7:aa:d4:39:a0:f4:85:
         ae:cb:36:b4:ee:0d:51:2b:7e:8a:b2:e5:fc:48:fa:5a:cb:3f:
         22:5d:82:7c:37:8d:58:02:15:c2:db:b4:25:43:41:97:da:b0:
         c8:93:c6:b1:f5:2d:7e:28:62:57:f4:2f:ba:90:df:3e:70:b2:
         1c:48:4a:d0:7a:69:a1:0e:fe:75:3f:8e:57:f4:ef:89:ec:a2:
         57:02:ed:21:89:36:43:fc:45:24:cb:11:7f:d5:c9:2e:40:36:
         2a:4a:58:24:ef:f9:1b:ce:2e:e8:6a:df:83:00:b8:a5:a2:63:
         2e:85:14:8b:cb:c4:0d:f7:5b:5e:36:4c:92:c2:46:a5:9a:eb:
         a8:ac:bf:52:57:1c:18:17:2f:b0:b0:a3:b5:6b:e0:fc:e9:f4:
         e2:f2:e8:a6:84:bb:57:dd:90:d1:02:90:93:ef:7c:d0:9a:7d:
         3c:a1:bb:25:df:3a:2a:ec:ac:fc:28:b0:b8:43:e9:e9:b3:e5:
         c5:9a:ac:8d:fc:79:74:b9:ba:23:2d:31:d4:bf:2b:2a:2f:0b:
         79:ad:2a:0e:04:cd:a3:d7:12:59:c1:0f:d1:38:f9:c0:76:68:
         7f:70:ca:50
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKD74xEAXIkg3xxYNu2Isbx+TR3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjA1MTIxOTQwNDJaFw0yNjA1MTMyMzQzNDJaMDMxMTAvBgNV
BAMTKDYwNjNDN0E1M0IwNDc2RTk4MTBCNTEwMzlDMzk0RTJDMUUzNkE4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvmOgmnbPZ5WD+0s9s+mTMQIM
7hs9Zc0BgmBWuHk6hd4hqP6fu2wHY8c5lF/8r8MPeeqFVxY1I2cNDT8dB8lJIBw/
T/YfFasOcqO+miUvD4ydsy56amuzbhtqoe3ME+ktnrsryomJdXLwkws8uP2xhQMk
o26iHCaZSAagwUENyxfbtx7auFpa6h5311GV59DISdRsHDBmSv6f2WyMhWK/bSia
CtvnI4NclK9x7T1+3NonrglqcsHrSqTFigpefHEhQFwFcqMFbYmSh5F7cRcrGSDx
o6oPamPiEMTAZTFzVNRGjP4yurrRr+0zxzows/edtk9VZBS5y+yBMrjZJ9eRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUYGPHpTsEdumBC1EDnDlOLB42qEwwHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxMjc0MjcvMC9ERTRBRjVFNTUxRjgy
MDIxMjg4NDE3M0YyQUJCQjE2NjVEOTJGMDNDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6a9Fn7Jrtum
Dn9iYs6ipFvk5TGkYs1YJNyIneG3qtQ5oPSFrss2tO4NUSt+irLl/Ej6Wss/Il2C
fDeNWAIVwtu0JUNBl9qwyJPGsfUtfihiV/QvupDfPnCyHEhK0HppoQ7+dT+OV/Tv
ieyiVwLtIYk2Q/xFJMsRf9XJLkA2KkpYJO/5G84u6GrfgwC4paJjLoUUi8vEDfdb
XjZMksJGpZrrqKy/UlccGBcvsLCjtWvg/On04vLopoS7V92Q0QKQk+980Jp9PKG7
Jd86Kuys/CiwuEPp6bPlxZqsjfx5dLm6Iy0x1L8rKi8Lea0qDgTNo9cSWcEP0Tj5
wHZof3DKUA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:53:20 2026 by rpki-client