Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File:                     3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier:          5C5FUpSoyVM0bGOpiH3d43zBUKnHP+0ziYqcnXd5LQc=
Subject key identifier:   B0:BC:26:35:DA:0B:FA:FC:8C:0C:80:96:98:F2:E9:77:EF:19:0D:45
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer:       /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial:       6E12AFF5F56BF0E14979314A004C77A43A6858FB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 14:31:52 +0000
Manifest this update:     Sat 13 Jun 2026 14:26:52 +0000
Manifest next update:     Sun 14 Jun 2026 16:58:52 +0000
Files and hashes:         1: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
                          2: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
                          3: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
                          4: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
                          5: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
                          6: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
                          7: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
                          8: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
                          9: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
                          10: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
                          11: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
                          12: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
                          13: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
                          14: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
                          15: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
                          16: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
                          17: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
                          18: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
                          19: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
                          20: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
                          21: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
                          22: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
                          23: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
                          24: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
                          25: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
                          26: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
                          27: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
                          28: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
                          29: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: jMQCYDC+bO7RUn6klt281EKStwIwKILsxrFrdHwTIt8=)
                          30: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
                          31: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
                          32: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
                          33: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
                          34: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
                          35: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
                          36: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
                          37: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
                          38: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
                          39: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
                          40: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:af:f5:f5:6b:f0:e1:49:79:31:4a:00:4c:77:a4:3a:68:58:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
        Validity
            Not Before: Jun 13 14:26:52 2026 GMT
            Not After : Jun 14 16:58:52 2026 GMT
        Subject: CN=B0BC2635DA0BFAFC8C0C809698F2E977EF190D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:80:0c:98:8b:b7:84:14:a4:cf:af:ae:c0:
                    51:70:dd:cd:b2:f8:28:7c:84:da:09:c4:d9:97:8b:
                    a3:60:3f:2d:e7:31:01:c0:ca:5c:e1:86:85:35:61:
                    64:c4:7b:ce:56:19:18:68:f6:4c:2e:e0:95:f1:eb:
                    17:89:9b:99:88:f2:4b:6f:ce:bf:b1:76:9e:c8:bb:
                    5b:cd:38:a1:c5:7e:de:0f:a6:ab:d0:97:09:95:a2:
                    e1:a5:96:41:80:1a:30:7d:22:92:b8:43:53:00:6e:
                    36:df:ab:08:c3:13:f8:a3:8d:b1:55:2a:bd:00:5d:
                    b3:ad:d3:a5:74:22:db:e6:ae:9f:8c:7c:b0:a1:0a:
                    3b:dc:1f:d9:46:67:a0:f3:a6:72:e9:c9:e3:2c:ab:
                    95:5c:6d:86:ba:f2:7f:d3:c1:92:62:b8:5d:51:03:
                    56:4a:66:e2:8f:67:ca:a7:d9:b6:f9:11:56:5e:dd:
                    d3:ea:b4:71:96:94:b3:d0:4c:b0:42:d5:e2:a6:ae:
                    da:48:46:b9:c2:88:c8:38:e9:0b:81:e5:93:61:d5:
                    41:70:d3:89:53:9a:36:01:a6:3e:13:29:23:2d:7e:
                    b5:00:34:fb:a3:95:42:8e:fd:50:15:52:b1:32:16:
                    df:97:05:df:0f:0d:59:8c:2c:7d:04:b8:93:0b:d6:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:26:35:DA:0B:FA:FC:8C:0C:80:96:98:F2:E9:77:EF:19:0D:45
            X509v3 Authority Key Identifier:
                keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:d8:fb:7a:29:81:a3:df:1e:7b:57:4c:fb:7e:34:b2:c0:
         e5:52:a0:ca:30:4b:74:0c:b2:9b:6f:56:2b:cb:95:b3:20:c5:
         8e:aa:b6:d2:b4:c6:4c:7f:eb:00:3f:07:c3:6e:57:38:10:3e:
         dd:ad:84:09:05:71:7e:30:23:75:d8:55:52:3e:41:41:32:ef:
         01:0a:50:bf:d9:8e:ef:2c:96:a1:2e:bd:53:32:fa:8d:45:8c:
         67:81:f9:a0:d0:93:53:b5:7c:9d:55:e7:09:f8:73:04:f4:50:
         f3:07:a5:ec:13:bd:03:61:7d:51:58:40:34:8a:47:71:2c:fb:
         b1:7b:5c:d6:3d:04:a1:c9:1f:b1:1d:f7:4e:2d:98:e8:07:57:
         95:a8:6d:ab:7e:4d:86:04:c8:cd:c3:f7:cd:3b:7e:80:16:2d:
         4a:9e:f3:f0:d8:28:0f:90:87:02:bc:04:7c:9a:8a:74:a3:07:
         68:6a:6c:62:0f:0b:b6:73:8e:2d:a7:3b:38:f9:03:d2:be:2d:
         78:b4:f2:a6:a8:a3:6d:a9:db:09:1b:a6:37:82:08:f8:2a:b3:
         00:f5:d7:bc:02:bd:ee:cd:e4:dd:52:9f:70:60:dd:cd:44:18:
         c3:32:df:18:fc:95:54:2c:e4:32:05:36:4e:3f:31:bf:bd:eb:
         da:24:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:29 2026 by rpki-client