Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
File:                     3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json)
Hash identifier:          YzoZS9QzCyT1427o6+AkKl32ElF9MwphizaMG44MjVw=
Subject key identifier:   2E:9B:33:06:3D:19:CD:EB:D5:E2:DB:48:DE:23:4E:51:43:46:8F:98
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       2ADF9FB7F53EE3D77CB06B2DFE45199053487BB2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
Manifest number:          D0
Signing time:             Sat 13 Jun 2026 15:06:52 +0000
Manifest this update:     Sat 13 Jun 2026 15:01:52 +0000
Manifest next update:     Sun 14 Jun 2026 17:22:52 +0000
Files and hashes:         1: 3130332e3231392e38362e302f32342d3234203d3e203137383136.roa (hash: MsotgNCbJVnwcF6GNHfJFvug+8qFy3u27Fwx0K4RaYs=)
                          2: 34352e3235312e332e302f32342d3234203d3e203137383136.roa (hash: uSuFlHn4k3bVuC52zHUSyzhTBc5Fm6FctXux3T7DbQ4=)
                          3: 3130332e3234392e3139322e302f32322d3232203d3e2032393134.roa (hash: 6Dd6bY/19hb8Fb1XB6oGcDAKn2zllhJNly+dgxbJ3ks=)
                          4: 34352e3234382e3131312e302f32342d3234203d3e203137383136.roa (hash: ttRx26kC00IoCX1/dzaef5ghHPQ/v6BLKOJI3sa9q2U=)
                          5: 3130332e3139312e3234322e302f32332d3233203d3e2034383136.roa (hash: 3MO4WAS/mIlJMIrVI+85+WeNsWtQva36XIGPGXTaHbI=)
                          6: 3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa (hash: BRl4mQ6cdOwfk/Kx+aDhlCnxDNICpywBM8raPfvbf6o=)
                          7: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: +hixN/Jzz4hgGvmfzoOLghZrK39gL0V0pIYRquFNZGw=)
                          8: 34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (hash: CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=)
                          9: 323430353a38303a313a3a2f34382d3438203d3e20313436373732.roa (hash: vlXgtjBVbJFOq7vuvdpiEzr6ie8jb0e5+nOu4Vmglas=)
                          10: 34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa (hash: W1l5mudPYcSen+JGIjiH5OvFJniliEIgw6W/cZ0DGIg=)
                          11: 3130332e3231392e3130302e302f32332d3233203d3e20313436373732.roa (hash: P3K3OIbCzI0XzMLF0uwvrqMz53i07+O7+VjfXgy9X9k=)
                          12: 3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa (hash: gOtBt5dxmbqpIh35k3uBcEVYq2I9ADjt7aYmNTPxKwo=)
                          13: 34352e3235302e3138302e302f32332d3233203d3e203137363233.roa (hash: z5CNtqggfpBwQHvrd01NKsHY76dW1RQ+2zq6ZLkT6L8=)
                          14: 3130332e3231392e3130302e302f32332d3233203d3e2034383136.roa (hash: IEEAMJ/et3yDLp0gz+24xRYvSyjwCAZnVUXAZLMMWZo=)
                          15: 34352e3234382e3131302e302f32332d3233203d3e20313436373732.roa (hash: NE6ljU5KjnghW4pvGF9PHCS/poej81XQVr8BeMhZs4k=)
                          16: 34352e3234382e3131312e302f32342d3234203d3e20313436373732.roa (hash: VbxRPo9naVUIyurSkLBtg7k/srQp6uo7BW4532v3aR8=)
                          17: 3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa (hash: RaWNNSXVR8tps2og/Ak+iaDGQJ/KY1pty8OUWmINtkg=)
                          18: 34352e3235302e3138342e302f32322d3232203d3e2034383136.roa (hash: RI+idagZL3rCO8K59vR3lwVwbOqjyorKRH3k++Z9FWE=)
                          19: 34352e3235302e3138302e302f32332d3233203d3e20313436373732.roa (hash: +b2dhVOVKDtioYPTzWNdeYIhHzc/eT7XuKHHyYYXG4c=)
                          20: 3130332e3231392e3130322e302f32332d3233203d3e20313436373732.roa (hash: upd/xRwcRMOyUggBsC8+yLpqU4saiLo05+rOh4II0kI=)
                          21: 34352e3235312e322e302f32342d3234203d3e203137383136.roa (hash: xQaZ3HVuIKpAcOlBiyMNnx2dM6eLd2p2ALqBAqxjTnM=)
                          22: 34352e3234382e3131302e302f32332d3233203d3e203137383136.roa (hash: rr5JAs6HDOFXBtLZkLqPblk/EY74JbxpAS7e2jKACc8=)
                          23: 3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa (hash: a2fwyzRSRqL4WwFa/yyzGlykbolRD7Y3AfnVVrYXKX4=)
                          24: 34352e3235312e332e302f32342d3234203d3e20313436373732.roa (hash: 84MNUAfErXO1nrT6PFyovWHzQ0LJbZ44LYC9o9hGmRE=)
                          25: 3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa (hash: R/rCDfiWFqlqcod2NVjhGm5lLmuyaFu/pyXuhb2N/OU=)
                          26: 3130332e3136312e3235342e302f32332d3233203d3e20313436373732.roa (hash: ey8SNdqgz102zC4nsGIO+c2poo9UqPVjBV8E8DOwA8c=)
                          27: 323430353a38303a31333a3a2f34382d3438203d3e20313436373732.roa (hash: Gxt4Ykxs/NSO3oYxAyGpx1JRUm/GbqTBMNiXb0ZzAy0=)
                          28: 3130332e3234392e3139322e302f32322d3232203d3e20313436373732.roa (hash: 8mPsT5oJQF3AQL5nN4rKEPJ/o9mbd8uFLbuw1ua6Ufs=)
                          29: 3130332e3231392e3130302e302f32342d3234203d3e20313436373732.roa (hash: 219OtlcRCl/vPh6STNR1SQotbaKdym/A4i7C6d7LCR4=)
                          30: 34352e3235302e3138302e302f32332d3233203d3e2034383136.roa (hash: h33Ywf61tukA2QkrBnvDjXYDOBhCWihy9GsVOA4UzB4=)
                          31: 3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa (hash: aO+DkS0zTHdPvPxlggzUbAE4Lu26a9KguQs3DYxkPts=)
                          32: 34352e3235312e322e302f32332d3233203d3e20313436373732.roa (hash: HITweSejw9LPAAPT/Jl4d6YLdDhw11XAHiVYd5sZLX4=)
                          33: 3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa (hash: iVAXKRVA2OAi2gvS05dFXtSfuZgHOruHMQhgHWIEYzE=)
                          34: 3130332e3231362e3235322e302f32332d3233203d3e20313436373732.roa (hash: 85cogqW3cgBvb1qEBXnDojaIEGBNKaYMbROIlE3CxvI=)
                          35: 3130332e3136312e3235342e302f32342d3234203d3e20313436373732.roa (hash: fj/sfPPmAd9753TITYEO7kcwQ/mY2SreemFgpWZQiKQ=)
                          36: 3130332e3231392e38352e302f32342d3234203d3e20313436373732.roa (hash: bfPR+n8MVZYvIWDo9z+iW70WBR828zNBS45aog4V7kE=)
                          37: 3130332e3231392e38362e302f32332d3233203d3e20313436373732.roa (hash: Yfoz9xxwKjmqfnw2q9PyUtn0eB7o9iKc8OYzqt5CXtk=)
                          38: 34352e3235312e322e302f32342d3234203d3e20313436373732.roa (hash: 7jPxW0WvnmO/t63ZVu1I7F5VltpTwDKuxT58tOU7Syw=)
                          39: 3130332e3231392e38352e302f32342d3234203d3e203137383136.roa (hash: jRq5VBloVwPh4dKWaqfMlW8C2DOGJE+e3Rmxbqfjc8U=)
                          40: 34352e3235312e322e302f32332d3233203d3e203137383136.roa (hash: Rx5OuBmdni1w5P8Xxxw5Y5JHc1feX0tCf3IRIhgjjW0=)
                          41: 34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa (hash: l83eIj5SYIwVCavpwqb2q7eJdR1MR1SvO0kRlN7ALug=)
                          42: 3130332e3231392e38372e302f32342d3234203d3e203137383136.roa (hash: AkcodKSLOJnqmykPjfYRdG32yI0Bg0CB2+vqj+ECd+o=)
                          43: 3130332e3231392e38362e302f32332d3233203d3e203137383136.roa (hash: DBr6cLEVJ7XwREP4pQQSd50m/dudrJ8YOhAiFdwuqI4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:df:9f:b7:f5:3e:e3:d7:7c:b0:6b:2d:fe:45:19:90:53:48:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: Jun 13 15:01:52 2026 GMT
            Not After : Jun 14 17:22:52 2026 GMT
        Subject: CN=2E9B33063D19CDEBD5E2DB48DE234E5143468F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:7d:6f:f6:99:bb:7e:a2:1e:76:c0:73:df:
                    58:93:ae:e3:19:41:6b:b6:44:34:27:3a:57:59:63:
                    f8:dc:37:3e:5c:e5:7c:e4:33:31:59:9f:d2:5e:5c:
                    34:b3:29:91:98:3f:96:c6:84:f1:e4:88:a9:39:35:
                    35:cd:ca:5b:56:8c:10:d2:2f:fe:5a:ff:2a:b2:4f:
                    09:96:cd:ba:77:64:73:1f:cf:51:23:44:be:d2:22:
                    ad:8e:f5:60:c8:0d:39:a0:73:ed:a7:0e:2a:22:00:
                    d2:74:3b:ff:9e:3b:03:a6:6f:9d:96:ac:e8:bc:f2:
                    6a:34:bf:a5:4e:e2:f6:2a:30:f4:c3:af:30:30:e0:
                    25:f6:50:1a:2f:42:1b:da:00:65:d0:d0:4c:cd:d4:
                    34:4f:91:00:f9:f4:08:2c:b7:f8:72:2e:a5:36:b7:
                    c5:d8:88:0e:70:b3:0b:0d:67:d1:f7:1e:1b:a6:96:
                    d5:48:63:9a:7e:72:ac:ec:44:c7:6b:cd:e7:1f:fb:
                    44:23:5a:10:ad:56:0c:75:a3:8e:e8:10:28:b9:21:
                    b2:46:01:c0:30:ba:a7:cf:23:2a:ad:eb:fe:d1:f5:
                    dd:7d:32:d8:1b:26:6c:03:76:a4:6b:5c:50:00:20:
                    77:30:ad:3e:73:15:ac:5e:ab:33:3a:22:f5:5b:19:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:33:06:3D:19:CD:EB:D5:E2:DB:48:DE:23:4E:51:43:46:8F:98
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:d8:e0:98:37:0d:c8:ed:ac:a6:c4:10:4e:9c:d9:86:d1:
         13:67:c5:70:a7:db:23:92:ec:3f:36:d4:c4:27:34:ff:87:3a:
         d6:80:99:49:14:22:41:7f:a5:4f:4b:e5:d1:6c:2e:54:cd:0d:
         ce:09:63:11:8b:bd:fe:c9:c0:2e:66:5c:71:5a:95:2a:c7:44:
         2f:12:ac:b5:68:df:a0:15:5b:e0:8c:2a:cb:f7:f8:ce:c7:32:
         6c:c2:22:61:59:18:5a:cc:05:21:c3:81:04:3a:ba:1d:5b:a5:
         3b:13:bf:51:64:5c:3f:f3:44:c9:d7:e5:e4:c2:ee:26:da:1d:
         42:e0:20:fc:56:da:81:a0:44:48:de:8a:6d:c2:96:53:37:5e:
         21:ef:12:f2:5d:62:ec:c0:45:55:d3:d8:13:f3:50:26:99:89:
         e9:3e:7c:eb:5e:44:5d:a7:e2:6e:2b:fe:7f:09:81:21:4c:bd:
         65:05:d5:58:0a:7b:fe:64:1d:58:1e:54:d2:d0:09:9b:92:f4:
         f2:b6:1b:c5:ae:3a:3c:64:0a:69:21:36:86:db:71:90:44:39:
         f6:d0:a0:bc:f6:63:18:6d:53:ee:e0:4e:50:6c:f9:77:8b:65:
         8a:c4:6d:a2:3b:8b:7c:1b:98:fe:57:61:47:4d:4e:0b:d8:1b:
         34:ef:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:38:58 2026 by rpki-client