Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
File:                     C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft (raw, json)
Hash identifier:          /Xr50U1O71nesZsS0XxlDoVyvir/eJ6gXL7FBaC3iM4=
Subject key identifier:   F3:DC:C1:84:9A:A5:9B:75:67:DE:C2:03:39:29:F6:00:AA:D9:8A:CF
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       28365D48F304ED026BADBAAB2EAB2BAAD3BFE437
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
Manifest number:          0103
Signing time:             Tue 28 Jul 2026 19:37:38 +0000
Manifest this update:     Tue 28 Jul 2026 19:32:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:56:38 +0000
Files and hashes:         1: 34352e3131332e34302e302f32322d3234203d3e203337393633.roa (hash: RYG1LzDNVXadniGjV2YPBkb1yZ+D8ilLeSbEwZV6Eak=)
                          2: 3130332e35322e3139362e302f32322d3234203d3e203337393633.roa (hash: /e68HlPUv2dOjZkFKbuODFjZsrCs3tP2yL0LmD1eHOs=)
                          3: 323430303a623230303a3a2f33322d3438203d3e203337393633.roa (hash: l9maJZAh3CM0hpVS+DdjyugaCIUwe15lRDZpwNeMGbM=)
                          4: 323430303a623230303a3a2f33322d3438203d3e203435313032.roa (hash: pY2dZ6dqSTgOgh45AcxUkhaZzPeNVeg4WabnzY7sOHE=)
                          5: 3131392e34322e3232342e302f31392d3234203d3e203337393633.roa (hash: pT0hDyH/zxwSjEnZ+i5rzSaXvj++7CGl/ttNR0PKCJA=)
                          6: 3131302e37362e302e302f31392d3234203d3e203337393633.roa (hash: /Kq+hRQAsqDgn4v6EoPlalrT6bwlRVWqpcd1Axu+pfY=)
                          7: 3131302e37362e34382e302f32302d3234203d3e203337393633.roa (hash: LtC8RzHh7EbRr5/DXsPn3/kNp3I+Is8WPl/3olH7Ijs=)
                          8: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (hash: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc=)
                          9: 3131302e37352e3132382e302f31392d3234203d3e203337393633.roa (hash: Ebg5Gac1KLUQyYv7ZNQ+SoINksfu4W2yKgqZOmTbJrc=)
                          10: 3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa (hash: NFziTk6S3pYvp6vnAmcz2xPZZtFK0ZCAJd4JgrivxjM=)
                          11: 3130332e34372e342e302f32322d3234203d3e203337393633.roa (hash: Sq3GVOKG+u2dIBV7WNDwNcIMqbeNWcAvXkgiKVYnvHI=)
                          12: 3131302e37352e3232342e302f31392d3234203d3e203337393633.roa (hash: BBXrRq1dBs684+XzgxyxLmN3kZjKe3o4jkqpub3A5Vk=)
                          13: C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl (hash: 6E6zSm2nwqu+aSUk+qChAs2DqjhkHzIY+7LY/yQP9Vw=)
                          14: 3131302e37362e302e302f31392d3234203d3e203435313032.roa (hash: KpbyfMQgiRPHc4JXVVcufeCDpffM9jStUuQqy7RhNDk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:36:5d:48:f3:04:ed:02:6b:ad:ba:ab:2e:ab:2b:aa:d3:bf:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Jul 28 19:32:38 2026 GMT
            Not After : Jul 29 21:56:38 2026 GMT
        Subject: CN=F3DCC1849AA59B7567DEC2033929F600AAD98ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b8:08:8e:0a:ab:27:bd:9b:4f:1b:a1:f0:aa:
                    81:1c:98:0c:c5:b6:80:25:7b:d1:7e:0e:57:15:07:
                    9c:ff:a6:d3:94:41:c4:ba:57:47:de:89:8b:13:95:
                    1e:61:60:d3:d6:d6:7b:fa:dd:ea:2c:8e:fe:a7:3e:
                    a8:ff:6b:af:9a:03:3d:e0:b8:8f:06:94:7c:4c:b7:
                    9c:7f:9f:77:3c:24:89:a3:80:ea:57:87:fa:f5:bf:
                    70:8d:d7:51:f7:d3:d7:94:7c:56:e9:d7:b4:e9:76:
                    50:2c:0e:b6:bb:e0:b0:04:39:42:ab:6f:c6:a1:9d:
                    e6:47:ee:72:0d:8b:14:52:41:5b:4b:e6:e2:29:ea:
                    54:eb:d3:8d:f0:48:4e:7c:70:3d:98:a1:6c:6b:2f:
                    bc:2a:4c:a1:61:7c:46:a3:d4:8b:dc:8f:85:ea:12:
                    be:b0:4e:cf:e5:3b:f9:23:6e:89:59:d9:92:9c:13:
                    bb:75:b0:92:59:58:10:75:8e:e7:26:8b:13:57:5a:
                    15:e6:28:7d:ef:53:7e:85:fe:57:87:a0:d8:29:9a:
                    8e:23:9c:62:8c:2e:e7:ad:b9:ec:17:e0:d3:13:03:
                    a8:1b:d5:80:b0:19:47:00:84:95:4c:d2:f4:66:7d:
                    c0:80:75:42:27:41:e8:44:d9:f3:f3:c8:1c:9e:e4:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DC:C1:84:9A:A5:9B:75:67:DE:C2:03:39:29:F6:00:AA:D9:8A:CF
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:5f:f3:0d:2a:df:54:18:d6:0d:46:5a:ce:f3:bc:d5:b5:
         68:a8:5c:c6:ad:e6:dc:9e:6e:63:dc:56:91:f8:c8:74:2b:23:
         31:ff:a5:0d:a2:65:bb:c6:71:13:43:02:e3:fa:3f:bb:22:4c:
         b0:9d:d6:82:f0:ec:c6:d5:5d:d4:fd:ca:c8:41:9e:7b:86:e7:
         7b:66:ab:ae:99:10:19:c2:a9:cb:15:44:1f:0b:67:05:f2:19:
         b8:75:ba:5f:db:f4:ae:b6:22:62:2b:fa:70:b5:a4:f9:d3:6c:
         68:15:e4:1a:ed:e9:d4:62:58:65:34:47:0e:40:87:ec:38:e0:
         52:a5:f7:d1:46:6d:e5:11:02:f8:88:9c:e9:d0:2c:cc:c0:86:
         8e:3e:af:18:9f:c0:59:47:33:d2:16:8b:73:5c:4c:c4:08:f0:
         2d:cf:51:60:de:72:57:f1:f9:c1:73:42:03:d0:91:fd:1f:5b:
         1e:69:3f:e7:30:67:1e:c7:4b:4b:26:9f:a4:da:94:bf:0f:5e:
         e1:fe:71:62:2a:ae:b1:94:59:68:d9:c4:72:cf:47:c2:1d:e3:
         6e:a4:f6:8f:fe:db:ee:13:02:7e:6d:f8:c2:2e:b7:cc:33:c7:
         1e:b0:8d:1c:de:5b:0e:e7:ff:1d:c4:cb:56:0f:bc:74:d6:6f:
         03:b7:f4:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKDZdSPME7QJrrbqrLqsrqtO/5DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw
NTIxRDVERDAeFw0yNjA3MjgxOTMyMzhaFw0yNjA3MjkyMTU2MzhaMDMxMTAvBgNV
BAMTKEYzRENDMTg0OUFBNTlCNzU2N0RFQzIwMzM5MjlGNjAwQUFEOThBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuAiOCqsnvZtPG6HwqoEcmAzF
toAle9F+DlcVB5z/ptOUQcS6V0feiYsTlR5hYNPW1nv63eosjv6nPqj/a6+aAz3g
uI8GlHxMt5x/n3c8JImjgOpXh/r1v3CN11H309eUfFbp17TpdlAsDra74LAEOUKr
b8ahneZH7nINixRSQVtL5uIp6lTr043wSE58cD2YoWxrL7wqTKFhfEaj1Ivcj4Xq
Er6wTs/lO/kjbolZ2ZKcE7t1sJJZWBB1jucmixNXWhXmKH3vU36F/leHoNgpmo4j
nGKMLuetuewX4NMTA6gb1YCwGUcAhJVM0vRmfcCAdUInQehE2fPzyBye5IXHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU89zBhJqlm3Vn3sIDOSn2AKrZis8wHwYDVR0j
BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC
MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk0NTk3MTUvMC9DODI2NjdDMkJDQkI1
MzdERUI3QTNFNDE1NTc3QjI2OTA1MjFENURELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMFf8w0q31QY
1g1GWs7zvNW1aKhcxq3m3J5uY9xWkfjIdCsjMf+lDaJlu8ZxE0MC4/o/uyJMsJ3W
gvDsxtVd1P3KyEGee4bne2arrpkQGcKpyxVEHwtnBfIZuHW6X9v0rrYiYiv6cLWk
+dNsaBXkGu3p1GJYZTRHDkCH7DjgUqX30UZt5REC+Iic6dAszMCGjj6vGJ/AWUcz
0haLc1xMxAjwLc9RYN5yV/H5wXNCA9CR/R9bHmk/5zBnHsdLSyafpNqUvw9e4f5x
YiqusZRZaNnEcs9Hwh3jbqT2j/7b7hMCfm34wi63zDPHHrCNHN5bDuf/HcTLVg+8
dNZvA7f0Fg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:43 2026 by rpki-client