Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
File:                     CB0214A5C404D6F840433B120CACBB5B8C59E613.mft (raw, json)
Hash identifier:          8w8vFp7AEDYVzMkYEhI9UqNuKsvQp7F/o9ZEBt6LIGg=
Subject key identifier:   2A:56:2D:4D:CE:6C:57:8B:94:2F:70:12:5A:F7:B6:28:D1:CB:46:71
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       356E69645DACFC350B030CA8368D7819F1F67F23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
Manifest number:          0292
Signing time:             Thu 16 Apr 2026 14:07:45 +0000
Manifest this update:     Thu 16 Apr 2026 14:02:45 +0000
Manifest next update:     Fri 17 Apr 2026 14:37:45 +0000
Files and hashes:         1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer (hash: Lq6C1vmtdv5BgsyhnRa6Bc7nZJu3wqb8EfsqK8DPUn8=)
                          2: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer (hash: tMDDxvN5y/rRtdbqBnWdBeOYsc0y7N+j0k/Rz89Qv/4=)
                          3: 1E52A9C4B7583314611765C8F6A599F283954B3C.cer (hash: WydUxs3SJNtQaRqZf83ZZ1wTRh68zDdJw6QGcpZFj4g=)
                          4: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer (hash: MAtb9XjPHB5wojgWV3idOD+myk7+izc1kGjzNkP1wRM=)
                          5: E3993DB092F827CDCF711046B493411A00A72701.cer (hash: 2qPLi1U2TT62RF34MIsQW/GPEV2zuHtJkZFaaQ4Bvbs=)
                          6: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer (hash: 1AaS6DqbRJFC0vtmE7vWy2PJmLa8/2N7Zg8/TCx/rgc=)
                          7: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer (hash: gkIeOTGII3QU07zy2ZHE3HpgnQ0q+Dbn4e1HAV9b2k8=)
                          8: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer (hash: YVREQUBkqSV8hbreZJSrO3JHQvND6MNTUJNavjT7H9I=)
                          9: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer (hash: ckmpKPzXuGym5mAuNNOL4egrUQ55CxGBmnQxt9ryPFs=)
                          10: F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer (hash: 1qt+cCCuDTlBXzYb1bgFUCarAsIMkBcy8I1HtsFXcZk=)
                          11: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer (hash: MrCLG/KLDuK7N7aUbP0PVGdbBlDzseLqha7MU7CIhjw=)
                          12: A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer (hash: 0vGkmaTdF/cPG2QQ5aviW+cPg3IqrCLaFoM15NkMuJA=)
                          13: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer (hash: UIoHpaFbH3UFUQARcKGGfjARq1SPD38PfQRpP0ZswGk=)
                          14: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer (hash: SyEkXPI6jqAeL06Ntj+MK8+Ol5kPM2j0NJqzvrHq0qI=)
                          15: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer (hash: VGmIVfwd1QqlPSzVPZYBBaVwijXnoGY70v4WB9xMBVI=)
                          16: E9EED0187DAE9147812C7B516912D58FD976B964.cer (hash: KUS9LtzDrMOcNhZRLX4DYOLpBzaXv5N5PsPJyxrK1I4=)
                          17: D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer (hash: yaLbEp/Ox4j4gvJPdR9xu/NP9n1/yj4LD0OxDLQd6M8=)
                          18: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer (hash: esk9QJNLHPkVhvYP/YXQySBh8eKY7dUs8ckemn/nPGg=)
                          19: 855381EC93CF009732540F616E4905D544D838C8.cer (hash: 9ZqWFHNj5yESQReKNEa/c29xnt6bqF7yJ+Gd9oV4dqU=)
                          20: 97B5B7009501E4718F06B9B36D215369C958203F.cer (hash: oI1LEFu91SulHVjvAecB0WG+VtEvHu9KeaCtgF6QgGA=)
                          21: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer (hash: wteQerrrch7JWyMq6kXOLw8rQY8O02xVqBD1/zyV69E=)
                          22: A26A131411EAF25D645F4C22903078A445B073F7.cer (hash: gRul/dv53U8S0T1/StwwX016rdtdCcE7BpYsho8CVxI=)
                          23: C2DA49E3A7421A170AB2589567E7C29841F7D385.cer (hash: oibVrVOlX4Y4CnYNx0ZRn6OBKspvEiPzfDtOi/DFaC0=)
                          24: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer (hash: 6glGolNUrKnbShTBaWvlUKI2AIDxtBF8HMgmWGfR/3U=)
                          25: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer (hash: PItaArSVk6NQh/k+8ZfYk4laxh0ev3jf4U9M4r425Yg=)
                          26: BE564B2EFF08B30078A1960732464840B104EF35.cer (hash: QclbJTAbTChtpBmRHTORftsiuk21QB22Cp4nZcltPgg=)
                          27: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer (hash: vczGN+X9UC4AtAh2Y2kCLy66ylIZtx3/NUmC2qe0cXs=)
                          28: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer (hash: l5Fh8JRsthgDgewgC41E75W4ZViwpAqqnNTQLh3BoD8=)
                          29: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer (hash: OTqmalJYnGJ1DvTbxRIarDwZkd61tTpbUOcIuEaKNCc=)
                          30: C95DC06ABAF176962C0E90D36D939FA729AAC050.cer (hash: WYn/y0DDbn2f1NXzcIOnv3pk0u0BfvdbUL6nm77SR/4=)
                          31: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer (hash: G77qGupkauIQrFBZXdfNdvKoU0Rr9B8gDuOaNv3JueU=)
                          32: AEB6C1171350C22B2084932E16868862A537F167.cer (hash: fduRlo++MWoqzvDcQsRFGIqQ0R22lCboz6GM7JqmlZM=)
                          33: CB0214A5C404D6F840433B120CACBB5B8C59E613.crl (hash: O1vQyCcmF4PqHf6ogiBGiUT4OPXBL5RPjrS67459mHA=)
                          34: AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer (hash: UQrVv+Fmb4MMvVnnHfddObJ+G/bIhYUpeR0dC8oRPWA=)
                          35: 0503C0DCF2359A63935CA42978F7E95CF29425AD.cer (hash: nh/3tW2Q1FXZYIFrGh1TJKSojWTaH/lyH3UwKPVjheA=)
                          36: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer (hash: FhQekzTy7C6OxtpsQvxtzjCO7KZ8y0mP+yndGsKEkcI=)
                          37: AE296545389D949B88D36F0642F93E9C8AD9E79B.cer (hash: +aXRxKT2UQCZk8yDJCfMgAAkz6xGswU98zXh6gGrUKg=)
                          38: C47353D21D668838E2523770D8C0FD078215052D.cer (hash: oCx9k04rIQgohGIWZtJ6Rrco/ozT/+Os4ERvm23+OJc=)
                          39: 8A05255B735973D13F97609E45A6D000FBCD953B.cer (hash: ZmXu+OELcezsvljOGzmGVVHpzYS0EQXbYlj/YfPdKEA=)
                          40: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer (hash: y+SOhv3qe3Ga6/R46WmoKoXkdjeyTpDSFBkVyqZ1XFE=)
                          41: 12292A8CE4276ED3C82E79BA376F7A0363A06716.cer (hash: Y45dw+Ui4l9/riPoo4kYKLvAXGqwM0C0pdrhrzW25PA=)
                          42: D850080623F8BDB006D1C2A5705B45346A8CA661.cer (hash: 1hqS2reNU6w6jabkJ89V24C370HZiqo537RLLWU8IjY=)
                          43: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer (hash: O5Aqpeq/kZcfHJ2H0u+k2L3bZ42gmrdlPUk2s6js8js=)
                          44: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer (hash: XNdbMO/qJ0ItrhogJqEeaWhMfM45eo5FJcgzxhcLcN4=)
                          45: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer (hash: NrpIcF6toAp1eMOj5hKOZthRQlcBgcBtKoUAveRUJ7w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 14:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6e:69:64:5d:ac:fc:35:0b:03:0c:a8:36:8d:78:19:f1:f6:7f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Apr 16 14:02:45 2026 GMT
            Not After : Apr 17 14:37:45 2026 GMT
        Subject: CN=2A562D4DCE6C578B942F70125AF7B628D1CB4671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:36:8d:ab:c6:4d:7e:bb:54:04:cb:d9:68:
                    b8:54:1c:8d:e6:4e:8d:51:4a:92:fc:ae:ee:02:aa:
                    33:90:3d:a0:80:cc:f5:f9:92:29:dd:0c:59:c0:35:
                    b7:f5:65:bb:ae:56:86:d2:2e:9f:39:41:77:e8:c2:
                    53:24:d8:12:79:76:5e:5e:47:c3:8c:6e:b6:27:8a:
                    65:c3:06:d6:df:05:cf:8e:fb:06:9f:0d:5b:d6:cd:
                    6f:25:71:ab:40:5e:6a:4a:4e:73:38:bc:2c:d9:af:
                    8f:88:79:35:ef:3a:dd:4d:42:4c:6a:fd:d7:da:aa:
                    c7:95:1f:d0:06:f1:51:14:d9:01:b6:94:40:25:06:
                    c8:15:b5:52:ef:8d:2b:2f:e3:44:35:76:3b:30:ce:
                    cc:52:0d:50:4b:d3:70:5d:82:4f:1b:4e:0d:46:be:
                    9c:53:72:8e:15:a3:fb:7d:4a:6f:99:6e:37:14:a1:
                    6c:0f:67:1b:7a:d1:df:4d:42:13:25:ed:e5:18:5a:
                    56:7f:6c:fa:9d:2f:77:af:09:fa:f0:fd:4c:1b:fb:
                    92:a3:10:94:cc:de:f8:03:62:5d:7b:58:eb:e7:5e:
                    28:8b:0f:48:22:16:9a:e7:9f:0d:da:92:08:ae:22:
                    72:de:a6:00:73:3b:39:5d:e2:37:78:63:d5:7e:15:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:2D:4D:CE:6C:57:8B:94:2F:70:12:5A:F7:B6:28:D1:CB:46:71
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:48:79:b1:14:c3:a5:7a:f2:20:39:d7:6c:af:6d:e3:30:
         93:62:f1:6c:83:b0:3e:a5:00:ec:81:8e:fa:6b:dd:2d:c9:18:
         3b:a1:df:97:ff:ae:61:81:38:26:d9:f1:95:e5:c3:81:67:2b:
         b9:8f:01:a7:6f:ed:a6:7d:d0:95:78:38:86:c3:78:67:56:bf:
         0c:61:00:01:31:1f:a4:ef:86:5b:cf:5e:ff:d8:04:78:26:b9:
         0b:1f:78:5d:19:56:25:96:c4:31:f0:df:86:e9:ca:18:06:2d:
         77:1a:24:c1:94:f5:4e:a5:b1:e9:07:75:d0:57:cb:47:22:93:
         d3:c2:eb:ef:82:a7:42:96:50:82:6e:28:b5:a3:8f:b9:8c:c6:
         85:8e:65:e6:6b:d5:59:2e:d5:da:26:22:be:84:2d:9c:10:98:
         26:be:97:74:2c:9d:70:21:62:e0:35:b6:7a:bd:67:43:68:9b:
         b4:0b:59:7b:92:0e:75:a6:b8:06:d3:91:8e:13:00:ae:5c:d4:
         b2:8f:cb:9c:b8:bb:e7:28:69:e0:63:ab:98:93:43:1f:a2:b5:
         54:21:3f:84:82:60:fb:2b:8e:1b:86:0e:20:08:ee:6f:6c:9d:
         01:57:cd:2e:2f:49:ec:d2:be:f4:53:e7:0d:57:12:69:b2:1c:
         f0:e6:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----