Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
File:                     3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json)
Hash identifier:          jx6w+n4K6F4ob6uFQFhXuI+9udrJsdmjuxslmHdrl7Y=
Subject key identifier:   44:6A:30:01:FD:9A:C3:DC:AC:3B:68:1A:79:4A:66:8B:8E:2C:9E:1A
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Certificate issuer:       /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial:       32615537A3AED7F247ACFB7522962AC23F3D4F05
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
Manifest number:          0144
Signing time:             Thu 16 Apr 2026 21:54:35 +0000
Manifest this update:     Thu 16 Apr 2026 21:49:35 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:35 +0000
Files and hashes:         1: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=)
                          2: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=)
                          3: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=)
                          4: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=)
                          5: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=)
                          6: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=)
                          7: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=)
                          8: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=)
                          9: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: QoyczAHWqFlOkatC4ZApHpPmQKtukmayRWoC7yDg59w=)
                          10: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=)
                          11: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=)
                          12: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=)
                          13: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=)
                          14: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=)
                          15: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=)
                          16: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=)
                          17: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:61:55:37:a3:ae:d7:f2:47:ac:fb:75:22:96:2a:c2:3f:3d:4f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
        Validity
            Not Before: Apr 16 21:49:35 2026 GMT
            Not After : Apr 18 00:00:35 2026 GMT
        Subject: CN=446A3001FD9AC3DCAC3B681A794A668B8E2C9E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:14:fa:bc:46:24:3f:6a:1b:a1:89:fa:1d:
                    f2:ad:5f:48:8a:23:00:4b:c1:7e:45:71:2f:64:df:
                    d7:79:52:d5:12:e0:e7:32:1e:7c:60:2d:6a:31:bf:
                    c0:34:71:18:86:ea:30:77:ba:07:cb:31:9b:01:aa:
                    35:66:cb:7e:1a:05:70:6a:63:49:74:dd:6e:a9:e5:
                    59:ff:3a:77:f9:0c:88:1a:83:e1:1b:d8:77:a4:c9:
                    17:d3:31:6a:3e:a7:22:26:22:40:c5:00:2c:0a:4b:
                    84:52:77:e7:59:7a:50:be:3d:c0:d2:9f:c7:19:b8:
                    5b:88:fd:21:2c:a5:28:a8:e7:0a:a1:f3:43:ff:8b:
                    da:3c:90:19:00:ed:3d:43:de:8d:83:5f:d7:f4:da:
                    a3:23:a7:23:b6:3a:68:a1:d4:9c:74:86:eb:79:d9:
                    40:4f:d3:26:05:27:bb:00:0c:1b:ca:b2:49:ff:33:
                    9a:6c:3c:10:08:44:de:0e:ff:4d:9d:75:97:ff:79:
                    68:a3:a5:5f:6f:a6:15:0f:e4:e5:b2:18:e6:d8:56:
                    60:5c:3f:74:9e:b7:94:22:d0:fb:c3:15:21:e0:5c:
                    44:59:7a:c2:87:0f:b6:2f:d7:28:2a:c5:d7:9f:51:
                    92:5f:fe:d6:e8:3b:6c:ff:76:3d:13:d5:27:b3:3e:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6A:30:01:FD:9A:C3:DC:AC:3B:68:1A:79:4A:66:8B:8E:2C:9E:1A
            X509v3 Authority Key Identifier:
                keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:40:16:89:9e:99:3c:60:fb:7c:2d:27:dd:aa:9a:68:06:
         70:cb:33:7c:bf:26:ec:bc:b2:4a:da:ea:5d:21:bc:3b:31:cb:
         22:53:e9:3b:95:99:77:b1:b8:5e:bd:6f:7d:1b:5e:cb:48:96:
         9a:aa:2e:5c:58:1e:2e:00:6d:8a:f7:da:d1:bb:1a:3d:8b:ed:
         ef:44:06:82:91:33:ca:9a:c5:df:ab:83:54:cd:55:96:c3:4b:
         f8:33:db:5e:16:5a:c5:18:10:80:bd:6c:2f:83:f0:97:58:83:
         ab:d4:02:8e:33:ab:1c:58:7b:8a:34:9a:36:cc:4d:8b:db:18:
         eb:63:e3:5c:5a:13:fd:42:99:6f:70:9e:ef:7d:54:74:34:21:
         72:4b:94:4f:0b:20:1a:d0:58:23:1a:73:da:df:61:3f:64:40:
         8b:cd:cc:90:e5:41:32:42:7a:6a:54:0c:64:d5:8f:bb:56:1b:
         27:47:29:62:15:06:85:2d:e2:8c:5b:a9:e4:58:66:32:04:0f:
         c0:fc:7e:48:c1:cf:dd:4b:38:51:d1:1c:a7:4c:67:80:41:ee:
         80:8e:44:0b:80:0f:13:22:f6:5f:53:ac:50:e1:fa:ca:87:4d:
         e8:c9:a1:84:b6:8d:b1:af:46:0a:71:bc:b8:b4:9f:0b:8e:0c:
         1f:af:a1:3c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMmFVN6Ou1/JHrPt1IpYqwj89TwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy
NjVGOTZDRTAeFw0yNjA0MTYyMTQ5MzVaFw0yNjA0MTgwMDAwMzVaMDMxMTAvBgNV
BAMTKDQ0NkEzMDAxRkQ5QUMzRENBQzNCNjgxQTc5NEE2NjhCOEUyQzlFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9BT6vEYkP2oboYn6HfKtX0iK
IwBLwX5FcS9k39d5UtUS4OcyHnxgLWoxv8A0cRiG6jB3ugfLMZsBqjVmy34aBXBq
Y0l03W6p5Vn/Onf5DIgag+Eb2HekyRfTMWo+pyImIkDFACwKS4RSd+dZelC+PcDS
n8cZuFuI/SEspSio5wqh80P/i9o8kBkA7T1D3o2DX9f02qMjpyO2Omih1Jx0hut5
2UBP0yYFJ7sADBvKskn/M5psPBAIRN4O/02ddZf/eWijpV9vphUP5OWyGObYVmBc
P3Set5Qi0PvDFSHgXERZesKHD7Yv1ygqxdefUZJf/tboO2z/dj0T1SezPvH1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQURGowAf2aw9ysO2gaeUpmi44snhowHwYDVR0j
BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB
QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz
RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU1AFomemTxg
+3wtJ92qmmgGcMszfL8m7LyyStrqXSG8OzHLIlPpO5WZd7G4Xr1vfRtey0iWmqou
XFgeLgBtivfa0bsaPYvt70QGgpEzyprF36uDVM1VlsNL+DPbXhZaxRgQgL1sL4Pw
l1iDq9QCjjOrHFh7ijSaNsxNi9sY62PjXFoT/UKZb3Ce731UdDQhckuUTwsgGtBY
Ixpz2t9hP2RAi83MkOVBMkJ6alQMZNWPu1YbJ0cpYhUGhS3ijFup5FhmMgQPwPx+
SMHP3Us4UdEcp0xngEHugI5EC4APEyL2X1OsUOH6yodN6MmhhLaNsa9GCnG8uLSf
C44MH6+hPA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:40 2026 by rpki-client