Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File:                     632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier:          +6MufPJKE+q9/INfoTTvEhA5Z+8lSXNLQ11xptLHJFs=
Subject key identifier:   3B:0E:30:66:A4:F9:DB:41:2A:4B:EC:77:98:76:DE:42:8F:FA:DD:A5
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       2E843A387662BFFB250A33C11278A682AA4035FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number:          76
Signing time:             Fri 17 Apr 2026 05:54:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:49:40 +0000
Manifest next update:     Sat 18 Apr 2026 08:11:40 +0000
Files and hashes:         1: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: /MSqWjRM24N8R9B7+2fqNbEXg1Lz7jSeDPy9nNaokiw=)
                          2: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
                          3: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
                          4: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
                          5: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
                          6: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
                          7: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
                          8: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
                          9: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
                          10: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
                          11: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
                          12: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
                          13: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
                          14: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
                          15: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
                          16: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
                          17: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
                          18: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
                          19: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
                          20: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
                          21: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
                          22: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
                          23: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
                          24: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
                          25: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
                          26: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
                          27: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:84:3a:38:76:62:bf:fb:25:0a:33:c1:12:78:a6:82:aa:40:35:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Apr 17 05:49:40 2026 GMT
            Not After : Apr 18 08:11:40 2026 GMT
        Subject: CN=3B0E3066A4F9DB412A4BEC779876DE428FFADDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:b8:ec:04:1d:9d:b1:8a:2d:97:de:c2:ad:
                    57:9e:61:be:98:ac:a1:41:17:b0:5d:8c:e8:43:74:
                    d0:f7:72:02:c9:8d:65:16:ed:d0:69:b9:d2:56:ec:
                    b8:12:f2:1f:53:e9:b2:7d:03:13:82:13:c2:a8:33:
                    12:49:fa:ff:f0:f9:77:95:02:a9:af:e8:64:62:26:
                    ed:f9:75:c2:f9:e3:53:ec:93:01:83:3b:7d:fd:57:
                    92:71:91:ac:e7:0b:37:5e:59:a9:f2:6f:f1:95:fd:
                    ac:de:cb:96:ef:fb:e2:82:83:99:f6:94:bf:57:06:
                    33:fb:09:dd:34:01:f7:bd:a6:30:50:44:6a:92:bd:
                    09:02:db:87:c4:a7:30:be:24:08:5e:d8:58:a2:46:
                    67:03:a8:26:2f:6b:14:03:1c:9e:09:03:3e:0f:a5:
                    4c:2f:5e:59:cd:b1:e0:d3:ba:31:e6:ea:a9:dd:b8:
                    c6:fa:56:0d:54:30:11:48:06:8d:3b:9e:04:28:47:
                    c6:1d:04:b5:c7:0f:b4:6f:2b:d4:5b:d9:2a:e4:2d:
                    d8:a2:4f:34:77:3d:d5:7e:82:8e:62:d4:b2:e0:1e:
                    c5:1e:5b:df:9b:56:15:20:08:f0:47:c0:03:be:e1:
                    9e:68:45:46:80:cc:6a:fa:bc:22:b6:bb:06:fd:99:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:30:66:A4:F9:DB:41:2A:4B:EC:77:98:76:DE:42:8F:FA:DD:A5
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:db:76:a1:2e:7d:28:5b:15:68:de:a2:0b:50:c0:1b:d6:
         d4:cf:d7:71:47:0d:75:72:e3:b3:74:d6:d5:a5:92:cd:ab:33:
         15:e7:43:be:cf:06:a8:b9:68:17:1d:32:d6:8f:e3:2b:3c:d1:
         be:bd:89:40:66:c1:18:8b:70:19:a0:6a:ca:73:f9:db:2d:6e:
         01:72:77:d0:2a:50:05:79:c9:63:4a:a0:57:32:e2:d3:3c:12:
         07:b7:cd:e2:6a:4b:2b:fe:81:9c:d4:cb:c2:a0:e1:98:56:bc:
         27:1a:e5:7d:59:31:81:af:05:0b:8e:8e:fb:ce:b0:5b:20:e3:
         8a:87:a3:c2:54:91:6d:cf:99:68:12:5a:7d:9d:b4:1d:82:77:
         5b:28:6f:ec:cd:7f:c1:75:8c:f5:d3:07:10:46:63:20:a9:01:
         80:a3:6e:58:2c:b6:73:be:ee:29:ad:4e:5a:bf:82:7c:58:e2:
         b8:e1:67:56:30:1d:4e:01:6e:df:09:be:9d:58:b2:39:b7:75:
         ad:fa:a6:eb:63:8d:fd:d6:ef:e5:e8:dc:79:39:ec:9d:8d:6f:
         82:5d:0f:79:ac:ee:17:dc:b1:e2:53:b5:cd:8b:67:85:31:e4:
         be:bd:4c:4f:ab:01:e7:ef:81:77:58:a8:69:9e:df:2c:ee:e6:
         a0:26:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:21 2026 by rpki-client