Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
File:                     3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json)
Hash identifier:          C5+cjeJV/uzoOMSJ420/gBDBfPXCrRoIQ/hmmzwaodI=
Subject key identifier:   BF:6B:70:9E:B3:87:4C:5D:F0:89:B5:5D:E9:8F:1C:DC:7C:2B:9C:F4
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       6B1D71E7F5C16F1F6F3CBA2939CBEAFEA9118BE9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
Manifest number:          010D
Signing time:             Tue 28 Jul 2026 20:47:45 +0000
Manifest this update:     Tue 28 Jul 2026 20:42:45 +0000
Manifest next update:     Wed 29 Jul 2026 21:53:45 +0000
Files and hashes:         1: 34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa (hash: l83eIj5SYIwVCavpwqb2q7eJdR1MR1SvO0kRlN7ALug=)
                          2: 3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa (hash: RaWNNSXVR8tps2og/Ak+iaDGQJ/KY1pty8OUWmINtkg=)
                          3: 34352e3235312e332e302f32342d3234203d3e20313436373732.roa (hash: 84MNUAfErXO1nrT6PFyovWHzQ0LJbZ44LYC9o9hGmRE=)
                          4: 34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (hash: CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=)
                          5: 3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa (hash: R/rCDfiWFqlqcod2NVjhGm5lLmuyaFu/pyXuhb2N/OU=)
                          6: 34352e3235312e322e302f32342d3234203d3e20313436373732.roa (hash: 7jPxW0WvnmO/t63ZVu1I7F5VltpTwDKuxT58tOU7Syw=)
                          7: 3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa (hash: iVAXKRVA2OAi2gvS05dFXtSfuZgHOruHMQhgHWIEYzE=)
                          8: 3130332e3231392e3130302e302f32332d3233203d3e2034383136.roa (hash: IEEAMJ/et3yDLp0gz+24xRYvSyjwCAZnVUXAZLMMWZo=)
                          9: 34352e3235302e3138302e302f32332d3233203d3e203137363233.roa (hash: z5CNtqggfpBwQHvrd01NKsHY76dW1RQ+2zq6ZLkT6L8=)
                          10: 34352e3235302e3138342e302f32342d3234203d3e20313436373732.roa (hash: 7+NACEPrfZIjwyyvQX5L/jbdhCn11Xntxaa9WOvj/BI=)
                          11: 34352e3235302e3138352e302f32342d3234203d3e20313436373732.roa (hash: U8C83SFKmu1pIjhg0/yU2GWj3Qn+cHJkfJuvl1iEvOM=)
                          12: 3130332e3136312e3235342e302f32342d3234203d3e20313436373732.roa (hash: fj/sfPPmAd9753TITYEO7kcwQ/mY2SreemFgpWZQiKQ=)
                          13: 3130332e3231392e3130302e302f32342d3234203d3e20313436373732.roa (hash: 219OtlcRCl/vPh6STNR1SQotbaKdym/A4i7C6d7LCR4=)
                          14: 34352e3234382e3131302e302f32332d3233203d3e20313436373732.roa (hash: NE6ljU5KjnghW4pvGF9PHCS/poej81XQVr8BeMhZs4k=)
                          15: 3130332e3231392e3130322e302f32332d3233203d3e20313436373732.roa (hash: upd/xRwcRMOyUggBsC8+yLpqU4saiLo05+rOh4II0kI=)
                          16: 34352e3235302e3138372e302f32342d3234203d3e20313436373732.roa (hash: tkBx4tWgliy7ZjUqEJENfu0FL53NI8fOevKc/nnlA/4=)
                          17: 34352e3235312e322e302f32342d3234203d3e203137383136.roa (hash: xQaZ3HVuIKpAcOlBiyMNnx2dM6eLd2p2ALqBAqxjTnM=)
                          18: 34352e3235312e322e302f32332d3233203d3e20313436373732.roa (hash: HITweSejw9LPAAPT/Jl4d6YLdDhw11XAHiVYd5sZLX4=)
                          19: 3130332e3231392e3130302e302f32332d3233203d3e20313436373732.roa (hash: P3K3OIbCzI0XzMLF0uwvrqMz53i07+O7+VjfXgy9X9k=)
                          20: 34352e3235312e322e302f32332d3233203d3e203137383136.roa (hash: Rx5OuBmdni1w5P8Xxxw5Y5JHc1feX0tCf3IRIhgjjW0=)
                          21: 34352e3235312e332e302f32342d3234203d3e203137383136.roa (hash: uSuFlHn4k3bVuC52zHUSyzhTBc5Fm6FctXux3T7DbQ4=)
                          22: 34352e3234382e3131312e302f32342d3234203d3e20313436373732.roa (hash: VbxRPo9naVUIyurSkLBtg7k/srQp6uo7BW4532v3aR8=)
                          23: 3130332e3231392e38352e302f32342d3234203d3e203137383136.roa (hash: jRq5VBloVwPh4dKWaqfMlW8C2DOGJE+e3Rmxbqfjc8U=)
                          24: 34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa (hash: W1l5mudPYcSen+JGIjiH5OvFJniliEIgw6W/cZ0DGIg=)
                          25: 3130332e3231392e38372e302f32342d3234203d3e203137383136.roa (hash: AkcodKSLOJnqmykPjfYRdG32yI0Bg0CB2+vqj+ECd+o=)
                          26: 34352e3235302e3138302e302f32332d3233203d3e2034383136.roa (hash: h33Ywf61tukA2QkrBnvDjXYDOBhCWihy9GsVOA4UzB4=)
                          27: 34352e3235302e3138342e302f32322d3232203d3e2034383136.roa (hash: RI+idagZL3rCO8K59vR3lwVwbOqjyorKRH3k++Z9FWE=)
                          28: 34352e3234382e3131302e302f32332d3233203d3e203137383136.roa (hash: rr5JAs6HDOFXBtLZkLqPblk/EY74JbxpAS7e2jKACc8=)
                          29: 3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa (hash: a2fwyzRSRqL4WwFa/yyzGlykbolRD7Y3AfnVVrYXKX4=)
                          30: 34352e3234382e3131312e302f32342d3234203d3e203137383136.roa (hash: ttRx26kC00IoCX1/dzaef5ghHPQ/v6BLKOJI3sa9q2U=)
                          31: 323430353a38303a313a3a2f34382d3438203d3e20313436373732.roa (hash: vlXgtjBVbJFOq7vuvdpiEzr6ie8jb0e5+nOu4Vmglas=)
                          32: 34352e3235302e3138362e302f32342d3234203d3e20313436373732.roa (hash: +bdBZ80rAX6pNZJiJAuhtUYUM70FL/Zy8XUK4RRkC4Q=)
                          33: 3130332e3234392e3139322e302f32322d3232203d3e20313436373732.roa (hash: 8mPsT5oJQF3AQL5nN4rKEPJ/o9mbd8uFLbuw1ua6Ufs=)
                          34: 3130332e3231392e38352e302f32342d3234203d3e20313436373732.roa (hash: bfPR+n8MVZYvIWDo9z+iW70WBR828zNBS45aog4V7kE=)
                          35: 3130332e3231362e3235322e302f32332d3233203d3e20313436373732.roa (hash: 85cogqW3cgBvb1qEBXnDojaIEGBNKaYMbROIlE3CxvI=)
                          36: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: A3Z8QfaaF1DA1X7I3XqAzzwgpIZMyCRtvHEiBE5c9Fk=)
                          37: 3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa (hash: gOtBt5dxmbqpIh35k3uBcEVYq2I9ADjt7aYmNTPxKwo=)
                          38: 3130332e3231392e38362e302f32332d3233203d3e20313436373732.roa (hash: Yfoz9xxwKjmqfnw2q9PyUtn0eB7o9iKc8OYzqt5CXtk=)
                          39: 3130332e3136312e3235342e302f32332d3233203d3e20313436373732.roa (hash: ey8SNdqgz102zC4nsGIO+c2poo9UqPVjBV8E8DOwA8c=)
                          40: 3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa (hash: aO+DkS0zTHdPvPxlggzUbAE4Lu26a9KguQs3DYxkPts=)
                          41: 3130332e3231392e38362e302f32332d3233203d3e203137383136.roa (hash: DBr6cLEVJ7XwREP4pQQSd50m/dudrJ8YOhAiFdwuqI4=)
                          42: 3130332e3234392e3139322e302f32322d3232203d3e2032393134.roa (hash: 6Dd6bY/19hb8Fb1XB6oGcDAKn2zllhJNly+dgxbJ3ks=)
                          43: 323430353a38303a31333a3a2f34382d3438203d3e20313436373732.roa (hash: Gxt4Ykxs/NSO3oYxAyGpx1JRUm/GbqTBMNiXb0ZzAy0=)
                          44: 34352e3235302e3138302e302f32332d3233203d3e20313436373732.roa (hash: +b2dhVOVKDtioYPTzWNdeYIhHzc/eT7XuKHHyYYXG4c=)
                          45: 3130332e3139312e3234322e302f32332d3233203d3e2034383136.roa (hash: 3MO4WAS/mIlJMIrVI+85+WeNsWtQva36XIGPGXTaHbI=)
                          46: 3130332e3231392e38342e302f32342d3234203d3e2034383136.roa (hash: +UoPpbWnURpfbpIbYh3w7i8m7JadEsvpBAM9kAKWwMg=)
                          47: 3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa (hash: xfHtUllvBPTAy6/27hVdOv327Oe+DuxYun8lGyDGb9E=)
                          48: 3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa (hash: BRl4mQ6cdOwfk/Kx+aDhlCnxDNICpywBM8raPfvbf6o=)
                          49: 3130332e3231392e38362e302f32342d3234203d3e203137383136.roa (hash: MsotgNCbJVnwcF6GNHfJFvug+8qFy3u27Fwx0K4RaYs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1d:71:e7:f5:c1:6f:1f:6f:3c:ba:29:39:cb:ea:fe:a9:11:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: Jul 28 20:42:45 2026 GMT
            Not After : Jul 29 21:53:45 2026 GMT
        Subject: CN=BF6B709EB3874C5DF089B55DE98F1CDC7C2B9CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:55:b3:e8:61:9e:11:03:75:18:39:8e:78:
                    04:ed:50:2f:d0:84:ba:60:ce:e4:b4:8d:7b:3b:a3:
                    37:b0:b3:14:f0:19:19:4f:cb:d7:d6:4f:30:e7:42:
                    77:2c:40:63:b7:72:aa:c7:81:ea:46:5b:ea:ce:2f:
                    8c:3c:74:f1:5c:db:27:90:0b:2e:da:71:cc:c7:34:
                    af:5b:95:2d:68:89:38:fa:9f:9e:03:cf:14:83:5b:
                    ce:54:26:34:1b:f7:68:41:10:0b:20:09:c9:3a:f4:
                    2c:ad:3f:c4:00:90:09:b0:a7:54:35:d7:a5:8e:32:
                    21:8a:6f:21:80:6c:53:eb:ed:9a:ea:38:02:79:10:
                    9b:88:e0:50:23:ef:50:5b:4c:83:f4:f6:3f:d9:ba:
                    d4:fb:ed:f4:96:6b:6e:29:b5:88:a9:b8:28:81:ce:
                    ad:57:e0:87:31:3f:85:e6:15:ac:52:4c:6b:fe:81:
                    2d:ad:2a:a5:97:f9:1c:18:73:16:1c:3b:6d:cf:77:
                    f9:18:ad:78:0d:b0:97:bf:e6:ce:12:6f:dc:be:cb:
                    0b:c0:ff:e9:6d:7f:25:0a:20:ea:3b:c3:a0:26:cf:
                    54:4c:95:c5:ec:49:35:d2:42:9d:b6:ce:85:e2:38:
                    fc:50:01:e1:df:15:01:a5:60:18:b5:99:3e:d1:1c:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:70:9E:B3:87:4C:5D:F0:89:B5:5D:E9:8F:1C:DC:7C:2B:9C:F4
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:50:3d:04:2d:01:89:ed:8b:2e:f0:23:f0:cf:ef:23:da:
         75:28:b3:d0:ff:15:20:19:5f:65:bc:54:93:96:c1:eb:f6:3d:
         3d:0d:f8:fe:79:d7:3a:e1:7c:9f:40:db:5c:88:8b:75:37:fe:
         1c:e8:78:05:3d:b1:a5:e5:4b:73:36:f6:63:1e:20:d5:c0:66:
         f9:98:ef:33:33:4c:f8:f2:10:db:2e:20:4e:66:e4:8a:cf:d8:
         c5:a0:4a:c2:50:1a:23:0b:3b:fa:1f:36:ca:7a:8e:8a:c2:15:
         e4:ec:e0:7d:13:01:42:61:53:44:80:1e:d9:e4:50:d7:50:60:
         99:65:02:7e:27:d4:f9:6e:58:2e:09:f3:ef:06:68:20:a7:57:
         18:77:76:bb:36:ed:c5:8f:e4:3c:3c:ea:3f:73:4e:0e:24:13:
         fb:ae:da:73:7f:3e:f9:8e:e3:35:da:1b:58:da:e4:28:9b:27:
         f9:d2:6f:2d:d6:a3:db:1f:ca:9d:e1:38:10:56:a2:29:0e:e6:
         43:b7:b8:11:52:82:17:1a:26:f6:c4:c3:fc:99:79:14:8e:3b:
         2f:a4:7c:38:81:d5:32:98:1f:87:11:2a:41:59:cf:ab:b9:92:
         a5:dd:74:86:05:aa:f2:24:d6:d2:59:f2:2d:a7:dc:5e:83:f0:
         f4:aa:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:07 2026 by rpki-client