Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File:                     DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier:          RNmgC776ypIRqbHb8qKo+nyCSeqGwKQx8H611J9Qr4Q=
Subject key identifier:   C1:4F:60:21:DA:E0:1F:81:45:0E:A3:E3:41:80:0F:7A:E8:34:DE:7F
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       216D2B2660B9AE9A06AC2C67E7D1EAE83A469EDE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number:          59
Signing time:             Thu 26 Mar 2026 19:38:28 +0000
Manifest this update:     Thu 26 Mar 2026 19:33:28 +0000
Manifest next update:     Fri 27 Mar 2026 22:57:28 +0000
Files and hashes:         1: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
                          2: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
                          3: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
                          4: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
                          5: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
                          6: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
                          7: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
                          8: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
                          9: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
                          10: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
                          11: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
                          12: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
                          13: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
                          14: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
                          15: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
                          16: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
                          17: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
                          18: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
                          19: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
                          20: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
                          21: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
                          22: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
                          23: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
                          24: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
                          25: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
                          26: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
                          27: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: W4+JA/HC52toUbVNhmariu8P8cpWqCAkqT89M0yqQLE=)
                          28: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:2b:26:60:b9:ae:9a:06:ac:2c:67:e7:d1:ea:e8:3a:46:9e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Mar 26 19:33:28 2026 GMT
            Not After : Mar 27 22:57:28 2026 GMT
        Subject: CN=C14F6021DAE01F81450EA3E341800F7AE834DE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:98:ad:a2:c8:c1:bc:43:b4:e1:d9:41:15:
                    a3:c6:46:41:7c:e7:b5:a9:f7:82:3f:60:52:7d:66:
                    92:a6:78:3d:b1:fc:52:ff:1c:84:e3:84:9d:5c:75:
                    5b:42:ba:75:0d:61:1f:21:41:9b:6b:73:66:6d:37:
                    10:8c:7e:df:4f:ea:35:e5:09:e5:fc:27:e0:93:15:
                    1e:12:1c:34:bf:83:fe:34:12:70:cd:38:1b:14:be:
                    ad:c4:cf:ec:3e:20:f6:c4:a7:13:a9:20:da:35:ae:
                    f0:39:af:73:ae:ba:1b:7d:13:d3:d3:cb:06:86:b9:
                    da:be:25:c1:b0:15:9d:e5:24:6e:68:50:b0:be:f8:
                    26:ad:27:5b:8b:0d:9c:a0:6e:72:b7:d1:cc:a4:62:
                    90:e1:7a:99:ac:a3:ca:f7:f9:4c:1b:64:88:ce:2c:
                    6f:6d:70:73:59:a3:3e:46:39:16:b3:45:12:34:f7:
                    45:73:eb:f3:97:27:5f:e2:8d:fe:01:71:70:51:38:
                    b3:5d:8a:b3:d8:7d:cf:31:d5:96:5c:55:a3:1d:f8:
                    c6:c8:2f:89:0b:0f:0c:3f:64:c3:c6:47:41:74:6c:
                    4f:c4:f4:b0:c7:77:49:59:ef:fc:08:fc:3c:ab:3b:
                    6d:3a:88:eb:43:76:91:c3:79:85:76:e8:af:6f:b6:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:60:21:DA:E0:1F:81:45:0E:A3:E3:41:80:0F:7A:E8:34:DE:7F
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:70:99:2e:81:fe:11:8a:22:53:a0:57:c4:ac:b9:fc:76:
         46:26:1f:73:9c:9f:fa:55:14:e7:4d:12:c7:9d:56:45:57:09:
         ce:64:30:f8:1a:82:b7:0b:cd:9b:78:9f:81:77:2f:d2:07:f8:
         b0:60:61:00:35:b5:c9:c0:c5:0d:0c:bf:26:82:94:ae:ec:fc:
         3e:22:39:2a:d7:7e:86:38:43:f5:9e:7a:2c:f0:95:19:a2:ed:
         18:b7:d2:61:a3:6d:6a:b5:e2:24:b3:10:09:03:f4:52:66:82:
         21:47:ec:6f:e8:22:06:d3:bb:7b:46:ad:b0:20:56:0f:cb:40:
         b9:a1:4b:6d:7c:78:d5:0f:b2:d2:8e:5b:c0:98:a0:f8:c0:5b:
         dd:6b:73:42:06:e9:f6:5e:bb:b1:fd:cd:d4:52:3e:86:82:6c:
         40:0f:f4:8f:1b:62:8d:31:86:62:64:04:0f:2a:65:97:68:7a:
         fa:c0:af:63:b4:79:01:65:af:a2:d3:00:3b:d7:f3:1d:8c:5e:
         dd:97:29:2d:ff:75:b4:ec:94:43:3f:7f:be:7e:cc:d4:50:c7:
         74:76:9f:76:83:72:56:88:8b:ba:02:69:2f:cd:62:e0:93:32:
         18:6a:4a:cd:46:95:1f:31:bd:09:81:e0:45:04:2a:a5:9c:89:
         d6:c0:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:32 2026 by rpki-client