Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
File:                     D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft (raw, json)
Hash identifier:          PRvQJsfsh+c3IbmAkAmllRIxmLA/Xur0uDAGU4La0JE=
Subject key identifier:   C2:8F:16:EE:E4:52:25:78:B2:92:7D:EC:02:E0:1E:4A:3A:57:BC:D7
Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D
Certificate issuer:       /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
Certificate serial:       6F2DBA5A2C43B939B5FF8023F591360A14040F86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
Manifest number:          C2
Signing time:             Sat 13 Jun 2026 11:11:45 +0000
Manifest this update:     Sat 13 Jun 2026 11:06:45 +0000
Manifest next update:     Sun 14 Jun 2026 14:11:45 +0000
Files and hashes:         1: 3130332e322e3135362e302f32342d3234203d3e20313436373632.roa (hash: ZT6T2FjjqBr9ft4J2Y3eyVRDUROWQVDrmyy7K6YoBoI=)
                          2: 3131342e3131312e3137382e302f32342d3234203d3e20313436373632.roa (hash: KonUV/ojd1MNml5rROTSxf3fIHa2czkDZZNwNKw8A44=)
                          3: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl (hash: 9cHQurSkGzl02JicrhRnq66VTBsL+KJMwXVO1Kh9/x8=)
                          4: 3131342e3131312e3139302e302f32342d3234203d3e20313436373632.roa (hash: C7VfQ5RZhf5OnAeKfKA9NgZGlrBddmIBCn4gvV8/SvE=)
                          5: 3131342e3131312e3137362e302f32302d3230203d3e20313436373632.roa (hash: eoYlD0RAPkGnyRtlK8iXT60W+N/fDNkGjE7hNOcXIoA=)
                          6: 3131342e3131312e3137392e302f32342d3234203d3e20313436373632.roa (hash: C5mjk+1CG6r0bzt4b18un9KgRI/Xnp9P0cDH3RA0Hy4=)
                          7: 3130332e322e3135372e302f32342d3234203d3e20313436373632.roa (hash: 0lnVRbIs/e81a/ombdJYKhr/uI3gJ/7kYg5290LJFdI=)
                          8: 3130332e322e3135392e302f32342d3234203d3e20313436373632.roa (hash: 9g0xW7AmpZhtlTL3yKRzbCzVa8h7KeJrq49B9jPei30=)
                          9: 3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (hash: euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=)
                          10: 3130332e322e3135382e302f32342d3234203d3e20313436373632.roa (hash: KmAN9co8g8woRBt62qGsshlijcSmsXQ7J65gVIPP3WY=)
                          11: 3131342e3131312e3138382e302f32342d3234203d3e20313436373632.roa (hash: d3dxWmoPXxo1nO5RHMRT4MjQS31UKEZUCxDP0qx+gPI=)
                          12: 3131342e3131312e3138372e302f32342d3234203d3e20313436373632.roa (hash: jV0UQMUSzuX46lyxU9Q1TIad3C+g694F7rPF2x053cs=)
                          13: 3130332e3138332e32362e302f32332d3233203d3e20313436373631.roa (hash: n2yJFDGxv025XpKqavpDIa1XF9Rdfe1uA9zzY9nQ+sg=)
                          14: 3131342e3131312e3138352e302f32342d3234203d3e20313436373632.roa (hash: DfoNTHHHPPQvz5ij9Tse9a3EdCP3ruj/rqOSevyve2I=)
                          15: 3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (hash: 7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=)
                          16: 3131342e3131312e3138332e302f32342d3234203d3e20313436373632.roa (hash: EI1qa8y78SWxMil8dnhbXcjeLjq6LDygLF5SIMrC0BA=)
                          17: 323430303a356636303a3a2f33322d3332203d3e20313436373631.roa (hash: DyboZUW+ZsHiG0TQ2QlXg9N1Udo8DukmD2LIGfkwL6w=)
                          18: 3131342e3131312e3139312e302f32342d3234203d3e2034383132.roa (hash: 0Tz94FSnf8noh/jg+K+xGNe+oMRaQWPqA1KdljfT0sI=)
                          19: 323430303a356636303a3a2f33322d3332203d3e20313436373632.roa (hash: 2zf8ptIuNWz/ytNogvE5KsEgpil1bYy9wjHUWvs6PfU=)
                          20: 3131342e3131312e3138362e302f32342d3234203d3e20313436373632.roa (hash: 14KdTLxuOOqp83g/G/Ys/4m/YS+CsQCpCaT1Ppveym0=)
                          21: 3131342e3131312e3138392e302f32342d3234203d3e20313436373632.roa (hash: UN7Qnirh/2XzM0qJ+K46LJtDxxzQ/o9T5wdOdPQYwgw=)
                          22: 3131342e3131312e3138342e302f32342d3234203d3e20313436373632.roa (hash: Yd2hPJhMjdqd3tfkS6BhuAHKfqEvDiNjI/wreHyMlDM=)
                          23: 3131342e3131312e3137362e302f32342d3234203d3e20313436373632.roa (hash: VC+9ee95pNmMQJysCZRaAUqZrztwr1iHfxKQUtLwzeU=)
                          24: 3131342e3131312e3138302e302f32342d3234203d3e20313436373632.roa (hash: PPgkSPwD1+U5stprn1D0dN8dTyE3ZUS4cSC5pqU8EBA=)
                          25: 3131342e3131312e3138322e302f32342d3234203d3e20313436373632.roa (hash: G3+LeensaDFmePqko03P1I/U70ppCM1tFWwCVpmhfxk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2d:ba:5a:2c:43:b9:39:b5:ff:80:23:f5:91:36:0a:14:04:0f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
        Validity
            Not Before: Jun 13 11:06:45 2026 GMT
            Not After : Jun 14 14:11:45 2026 GMT
        Subject: CN=C28F16EEE4522578B2927DEC02E01E4A3A57BCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:b5:59:4a:d7:c3:d2:ae:b5:24:e5:d7:bc:
                    ae:1a:9c:69:61:36:4c:97:67:7f:45:e7:e4:6c:8a:
                    3e:ab:40:0b:e5:83:f3:d5:b5:ca:5e:2c:e8:7b:56:
                    e8:f9:22:3c:1e:e6:27:21:8f:88:ee:6a:0d:8f:13:
                    39:08:ad:20:7b:b0:06:5c:3b:cc:30:53:c1:22:6b:
                    06:4f:48:86:46:0c:60:2f:0a:9a:0a:ee:76:77:22:
                    82:3d:53:94:85:42:4b:9c:32:75:5c:c1:c4:3a:e5:
                    9a:b1:a6:b1:12:c1:97:bb:2d:5a:74:99:85:d3:d2:
                    74:b0:fa:ee:ac:b9:a9:4b:a4:c8:63:34:97:02:72:
                    e9:e9:2e:5b:e6:87:2e:d5:8b:41:48:ae:f1:f5:79:
                    cc:cf:3f:61:01:2d:78:06:cc:9c:6e:41:54:3e:37:
                    58:bc:cb:f9:07:dd:fc:11:07:53:ea:e3:07:ad:7d:
                    19:da:d9:b8:ca:b3:03:c5:59:e3:ba:63:b2:fc:f8:
                    6f:73:1d:39:89:36:41:54:61:cc:87:76:ba:cd:d3:
                    ca:0e:ca:1e:2f:4c:0d:e6:d7:52:66:69:37:7c:a9:
                    3f:9c:e2:e3:70:56:1a:e5:53:36:1b:36:85:dc:08:
                    c9:9b:d3:87:7c:27:6b:7f:c1:c8:5b:6d:74:93:6c:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:16:EE:E4:52:25:78:B2:92:7D:EC:02:E0:1E:4A:3A:57:BC:D7
            X509v3 Authority Key Identifier:
                keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:fb:4c:b1:8a:cd:fd:a4:25:32:1b:b7:06:14:bf:c4:3b:
         05:4e:bc:a5:d5:46:3e:58:c6:1c:13:a4:6e:ff:b5:c7:7a:58:
         15:34:11:a3:29:42:3e:38:ec:16:a7:5a:a6:a2:f9:3c:78:8e:
         c9:a9:cd:24:8e:c4:8b:67:b0:a0:1d:0d:bd:ab:d3:96:ca:4b:
         b6:cc:d9:c2:04:75:49:02:92:39:1e:d3:72:d0:9c:e6:63:1a:
         ce:3d:88:de:ca:84:57:44:23:40:c8:57:17:43:b5:25:2c:4d:
         c0:25:30:2c:45:34:4e:86:75:ac:df:4f:ad:80:a7:d5:2b:f5:
         f2:10:ec:22:e9:b6:fb:a1:29:8a:1c:a0:8c:aa:b2:e8:cf:db:
         d1:88:cb:83:3b:db:98:8a:20:ad:de:fc:f4:a0:ee:33:be:5f:
         2c:e6:f9:b6:e5:7b:9b:55:26:20:9f:81:5a:4f:50:01:e1:ce:
         b6:f3:cb:c6:36:33:09:78:c9:72:0f:33:eb:5b:fb:e2:e3:bc:
         02:dc:01:4c:67:f7:d0:8c:3a:87:f8:37:14:c5:84:bd:63:cb:
         37:1e:c8:b2:4f:f5:4c:72:fe:5b:19:3b:c8:5a:3b:59:5f:30:
         43:61:e2:b3:3b:00:28:04:10:b5:9e:0d:0e:cb:40:ed:ce:f6:
         6e:d3:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:31 2026 by rpki-client