Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
File:                     EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft (raw, json)
Hash identifier:          F77PJ1LO45/CdkeH3VgIzbxkYGEUogoOTn/2SLwJ3r8=
Subject key identifier:   33:3C:BD:CB:85:CE:BA:F8:2B:62:19:90:D0:7F:AB:62:45:23:55:34
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       77616A9F4ABBDB32DC0B657380EE6DD41E87EE89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
Manifest number:          C3
Signing time:             Tue 28 Jul 2026 14:01:55 +0000
Manifest this update:     Tue 28 Jul 2026 13:56:55 +0000
Manifest next update:     Wed 29 Jul 2026 17:28:55 +0000
Files and hashes:         1: 3230322e37352e3232302e302f32322d3232203d3e2034313334.roa (hash: p0NZI0GINU6BeTB+UXx+csuFUdajJF3eGRHj1Z702oc=)
                          2: 3231312e3135352e3233372e302f32342d3234203d3e2030.roa (hash: 0EzglXpArwUVhyolEnsV0yKJ1qVFbYV874R7xNgVBTc=)
                          3: 3131392e33372e3230382e302f32302d3230203d3e2030.roa (hash: 3WH8vjroGAXVdp67gRfFvlvjY+hfEu0tNIyL0YTTqZY=)
                          4: 3231312e3135352e3233382e302f32332d3233203d3e2030.roa (hash: eLkwRpmTQ5phlkLILCwKyS1r8DYPePQxhxRfIWk9W68=)
                          5: 3230322e37352e3230382e302f32322d3232203d3e2034383337.roa (hash: 5SbTQ7N2K2ugCxDvUZndo/X8nBSovYBq782ujruWMtI=)
                          6: 3230322e37352e3230382e302f32312d3231203d3e2034383337.roa (hash: fVtoi9N8EkzxSN8PyalA7AX/4ARK7wWPJvCj6KyoyjU=)
                          7: 3230322e39312e3234302e302f32312d3231203d3e2034313334.roa (hash: CWEsWS7kVZnOx4xmuuzCp2O7YiyRi0F8CeFze20KTfc=)
                          8: 3131392e33372e3230302e302f32312d3231203d3e2030.roa (hash: zdBC+EHpW4XQvPuhARTt0tW6lKLHfCnmfuZt8cM9pMY=)
                          9: 3131392e33382e33322e302f31392d3139203d3e2030.roa (hash: pll4icFO4h01ZMkqbPFVtyMz7qEmYEJXCQzrFMaJrDc=)
                          10: 3230322e39312e3235312e302f32342d3234203d3e203538343631.roa (hash: OUFddwv/4qfbON2T0W/62QzD3hTAfqsiHysLN9usO/Y=)
                          11: 3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa (hash: L5ghtiuZZHocfAsh6/BljEIarx+57jviXMV8Dwamu28=)
                          12: 3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa (hash: qbIlGZuLW4EfB4pWvgRtnCiCxbiOFoJlF2Xs1LMwnwA=)
                          13: 3230322e39312e3232342e302f32312d3231203d3e2034383337.roa (hash: N2b5cUhww8rOn3wOwOuZHsJB9P53zX7cQfx7Y1gfs3I=)
                          14: 3131392e33382e302e302f32312d3231203d3e2034383337.roa (hash: pA2/RGRRpBfwcFBcWiRU0WJWtKVONwrnIQLFDf59omk=)
                          15: 3231312e3135352e3232372e302f32342d3234203d3e203538343631.roa (hash: 4K1OPvFpU+HrVehb8ctO5wRAhutS8zJ+/2BHd0aa/wY=)
                          16: 3131392e33372e3139322e302f32312d3231203d3e2034313334.roa (hash: gBxlUjgY/51Y/F/tZl5uKKjyZi8xCCeFB073k6/hjoo=)
                          17: 3131392e33382e36342e302f31382d3138203d3e2030.roa (hash: uz2FQNnsIWHuEwBoUJV4yxycmEcUkz6eCVglpWRUo2k=)
                          18: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl (hash: OIIRT/nZ8efXkBUy7mToDI5YpMe1SMs/hWTbL/9PeKQ=)
                          19: 3230322e37352e3231322e302f32322d3232203d3e2034383337.roa (hash: Zr+kvL8bc+D1IaoykZ6zx12qtblZNjfd5Wctf7SrgAY=)
                          20: 3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa (hash: cYxkEhvTjTBflxplIZ++9fBOpk0/LaPF0Nyaq6qy26E=)
                          21: 3131392e33372e3232342e302f31392d3139203d3e2030.roa (hash: 9YlS0caQ64evF/SqDrfWNuAlfr7HMIYGm6heJ8QB4LE=)
                          22: 3230322e37352e3231362e302f32322d3232203d3e2034313334.roa (hash: zHhMiD48K6uJfrzAak9pIOBtn/nJ4uu96wZ1uk2WLXA=)
                          23: 3131392e33382e382e302f32312d3231203d3e2030.roa (hash: TSfANWG1UodRq6WAepOAW+1UUDbGV5JDrXlpD0fMcuY=)
                          24: 3230322e39312e3233322e302f32312d3231203d3e2034383337.roa (hash: JnpaOA7xi+2AAdljJgxT5MIjkAw9H+FTZnv0biVZNyc=)
                          25: 3230322e39312e3235322e302f32322d3232203d3e2030.roa (hash: 6uUlNdPQp+J76BtKkcmZSkcVGqbjn0KGhdyN+vTY/gw=)
                          26: 3230322e39312e3234382e302f32322d3232203d3e2034313334.roa (hash: acecX4+DX3uhPhsPJCGqi9GLyz23PjxFgOQWsBgruG4=)
                          27: 3131392e33382e31362e302f32302d3230203d3e2030.roa (hash: w81RRX4LIyDkc88O+qWY5anF3EghwxjfNcXNulV4zjQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:6a:9f:4a:bb:db:32:dc:0b:65:73:80:ee:6d:d4:1e:87:ee:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: Jul 28 13:56:55 2026 GMT
            Not After : Jul 29 17:28:55 2026 GMT
        Subject: CN=333CBDCB85CEBAF82B621990D07FAB6245235534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:cc:ee:35:cf:0a:eb:1a:c4:05:df:74:e5:
                    80:f5:e9:6a:65:9e:1c:14:c9:7b:d7:3b:f8:e3:1e:
                    36:0d:c2:4c:45:e5:46:bc:db:29:44:f4:1c:dd:e2:
                    85:8e:df:78:1b:f1:69:7c:23:8e:5c:12:b8:64:22:
                    95:81:eb:c8:db:d3:fe:7f:f6:25:45:01:5b:ee:3f:
                    b8:24:72:a5:cb:86:04:48:d8:b3:10:6a:df:2a:98:
                    e8:be:06:a5:10:76:29:25:52:c7:fc:c6:00:62:15:
                    a8:13:5b:c4:d7:8f:29:9e:12:b0:49:b3:5b:dc:ae:
                    89:d6:52:c8:51:db:8a:5d:b0:0d:52:e8:14:8b:57:
                    6a:11:ca:62:c0:83:f7:f4:21:0b:37:0e:25:3e:d6:
                    f4:70:b5:f9:cd:6e:36:ff:06:55:14:c3:d9:ba:bc:
                    3e:14:28:bc:8d:dc:84:1a:22:04:36:06:b0:3f:a3:
                    92:98:59:b9:36:69:65:92:40:8f:5f:dd:75:05:6f:
                    64:80:c1:a8:ad:9d:6e:71:8b:e1:3f:1e:5d:18:5e:
                    40:f9:35:4d:b5:ab:f7:05:20:e4:02:3a:5c:5b:8b:
                    2e:0d:8d:56:ee:21:02:1c:11:f2:10:4d:1a:65:9d:
                    c1:79:83:15:42:c9:09:0f:96:b7:22:98:fc:19:32:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:BD:CB:85:CE:BA:F8:2B:62:19:90:D0:7F:AB:62:45:23:55:34
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:95:a9:05:73:b9:1e:ce:c7:a1:c2:5b:d1:e5:b8:f7:eb:
         21:15:a4:60:fa:6e:f1:c9:9a:03:cb:7b:1e:7e:d1:89:c8:67:
         54:a8:6f:e7:8e:5c:a2:af:17:26:ec:75:77:cf:d2:76:12:a2:
         0c:df:4a:be:aa:ac:36:ec:23:f4:7c:4b:2d:a8:a3:67:72:14:
         a4:a3:3d:8f:cb:69:7a:74:c0:2e:8d:55:35:76:47:c9:fa:bf:
         7b:ef:98:f2:52:2d:18:25:02:9c:7b:f7:ae:dd:73:0c:fb:ee:
         a7:85:0a:63:68:99:82:4b:8a:14:cf:3f:1e:0e:56:16:d3:cf:
         b2:b6:81:89:a8:2f:b1:ee:61:9c:12:c2:d4:7e:2c:bb:7c:bf:
         59:a6:74:a5:59:86:6d:53:7b:c6:4e:f2:1b:af:15:76:63:a3:
         22:bd:79:85:ae:d5:8a:67:3e:7f:d2:c0:f0:54:f3:d2:f1:46:
         f4:08:ad:63:fd:57:d4:1c:7b:a7:7e:d9:c6:8d:59:44:20:de:
         cd:49:23:f8:7b:8d:6c:c8:d7:e4:86:3b:d3:b1:b4:75:5e:c0:
         6b:fe:76:15:2c:95:ed:ec:a1:a8:56:f9:3e:92:01:d3:75:5a:
         7b:3d:35:bb:51:f7:97:f5:19:b2:d5:28:af:77:f7:c0:77:d8:
         a4:98:9d:c0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUd2Fqn0q72zLcC2VzgO5t1B6H7okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF
RTU4QkJEMzAeFw0yNjA3MjgxMzU2NTVaFw0yNjA3MjkxNzI4NTVaMDMxMTAvBgNV
BAMTKDMzM0NCRENCODVDRUJBRjgyQjYyMTk5MEQwN0ZBQjYyNDUyMzU1MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmszuNc8K6xrEBd905YD16Wpl
nhwUyXvXO/jjHjYNwkxF5Ua82ylE9Bzd4oWO33gb8Wl8I45cErhkIpWB68jb0/5/
9iVFAVvuP7gkcqXLhgRI2LMQat8qmOi+BqUQdiklUsf8xgBiFagTW8TXjymeErBJ
s1vcronWUshR24pdsA1S6BSLV2oRymLAg/f0IQs3DiU+1vRwtfnNbjb/BlUUw9m6
vD4UKLyN3IQaIgQ2BrA/o5KYWbk2aWWSQI9f3XUFb2SAwaitnW5xi+E/Hl0YXkD5
NU21q/cFIOQCOlxbiy4NjVbuIQIcEfIQTRplncF5gxVCyQkPlrcimPwZMtP/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUMzy9y4XOuvgrYhmQ0H+rYkUjVTQwHwYDVR0j
BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC
QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2MjY5MzQ3MjY1MjQ5MzAvMC9FQzZGQjE0MjVCMkVD
RDg5NkE4MUQ3QTRFMUNBQkJEOEVFNThCQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMKVqQVzuR7O
x6HCW9HluPfrIRWkYPpu8cmaA8t7Hn7RichnVKhv545coq8XJux1d8/SdhKiDN9K
vqqsNuwj9HxLLaijZ3IUpKM9j8tpenTALo1VNXZHyfq/e++Y8lItGCUCnHv3rt1z
DPvup4UKY2iZgkuKFM8/Hg5WFtPPsraBiagvse5hnBLC1H4su3y/WaZ0pVmGbVN7
xk7yG68VdmOjIr15ha7Vimc+f9LA8FTz0vFG9AitY/1X1Bx7p37Zxo1ZRCDezUkj
+HuNbMjX5IY707G0dV7Aa/52FSyV7eyhqFb5PpIB03Vaez01u1H3l/UZstUor3f3
wHfYpJidwA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:06 2026 by rpki-client