Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
File:                     C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft (raw, json)
Hash identifier:          KjIC/zdwOOdDw+xAlEbr+eTFBf9+uOK9XQpDV4+v+Ew=
Subject key identifier:   FC:BC:C5:B5:33:B2:27:C3:88:74:53:79:4C:96:70:6E:C7:BE:AC:5A
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       58DCA452159CC816EC4A9714E9AB1232304DB83D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
Manifest number:          35
Signing time:             Sat 13 Jun 2026 11:51:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:46:46 +0000
Manifest next update:     Sun 14 Jun 2026 14:23:46 +0000
Files and hashes:         1: 3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa (hash: qkpXuB3ObAmsS0MDXmhY8WRgGSD85ciV076Rhsykp/k=)
                          2: C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl (hash: 2DKhZe0riT+3DbEpLwFahYAdsW94It2R7+VZHVhFNeQ=)
                          3: 3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa (hash: 16MiGpCSDIiz9xXR/I2Dvtn/+/EmEZ2e8EJ+7bOhnqU=)
                          4: 3130312e3139382e302e302f32342d3234203d3e203233373234.roa (hash: hp6B12FfJ2NWJSRywUfmksUaSjZWVViWC2lR+GLaE7A=)
                          5: 3130312e3139382e322e302f32342d3234203d3e203233373234.roa (hash: Pk8krIj6tg+H1cUl2ctnFVKWyuWX7SqJvGIYIyd6SM8=)
                          6: 3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa (hash: 3jZZIGgHNNPdExy6+4ba6lwGGqONFoWQ+/8Ou/P8x7Q=)
                          7: 3130312e3139382e342e302f32342d3234203d3e203233373234.roa (hash: WtDzrZTUEaioRGgvkaDsoPuVJtNVqzMMl88vv34rJMQ=)
                          8: 3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa (hash: 5Kb1min/2rIHSsm+B1D1d89sBXIwJ4FnSzTWz8KufBE=)
                          9: 3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa (hash: mggjl9jx41i7oUGab9P2gxy4nza4AgEYuhpfR2Sg9c0=)
                          10: 3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa (hash: Uvod8dBdbsXZksgUTaLPKnNSQB2Vac2SLIXlL+Cd+qc=)
                          11: 3130312e3139382e312e302f32342d3234203d3e203233373234.roa (hash: p7G0oVepOshAGFAxB7LrNRLHf5pTYmCVPk6M7gRAuiE=)
                          12: 3130312e3139382e3137302e302f32332d3233203d3e203535393932.roa (hash: fmXSeYFH7IWYbDtIisi+JYVD1ikJPF7fXdnqpi8Ww2U=)
                          13: 3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa (hash: fCjsOZtnw4nGDn9abm6owAHPuFVqkWmA5M7Dcbm5+hM=)
                          14: 3130312e3139392e3235342e302f32342d3234203d3e2034383038.roa (hash: mJ7hRTS650eIqZID/4qnr7OwBacjGfmr0AYmVZZJaRY=)
                          15: 3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa (hash: l9Ayt/9LinBk1RfLtF8snEGtJINvlnYMbJhgRRsrHS0=)
                          16: 3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa (hash: rkrYae0XoBZeFBWjHIkdRXy907nfouGrDmL2Z7ZxpOc=)
                          17: 3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (hash: scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=)
                          18: 3130312e3139382e3138392e302f32342d3234203d3e203535393932.roa (hash: WkSTH3diUKPM7YeEWlFR4Botaw/ZnICgxutTYj7QYMo=)
                          19: 3130312e3139382e332e302f32342d3234203d3e203233373234.roa (hash: ZpWUyrhrm00WMdHwUYMCArdQHBDWw8grrK9mX3s+XA8=)
                          20: 3130312e3139382e3138372e302f32342d3234203d3e203535393932.roa (hash: gwZSyam7qczfq7xPisJsM8i1pn3x4wAGWjUkQMmUPfk=)
                          21: 3130332e32382e382e302f32342d3234203d3e203233373234.roa (hash: mAm7NlIEyqQIiOWEw4GBFiFLOoeiXHDGMzMY6xSaGQw=)
                          22: 3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa (hash: vu1iNt+ZbIE8Ax1RaAhzHIosPltzEJR3LX+/VO1Jfpc=)
                          23: 3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa (hash: xkLXXhh6dA+NUe5FBoeFBFT0Qfe21ZfH2kricSUswOM=)
                          24: 3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa (hash: 8EhkML7yzSAo4Otqe1dSqfh96e+xLJk4ybJKhG0AZmw=)
                          25: 3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa (hash: oy20RE6AX00LsUCI48Ffykt12MYk6Glg4X8rSKWnH6k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dc:a4:52:15:9c:c8:16:ec:4a:97:14:e9:ab:12:32:30:4d:b8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: Jun 13 11:46:46 2026 GMT
            Not After : Jun 14 14:23:46 2026 GMT
        Subject: CN=FCBCC5B533B227C3887453794C96706EC7BEAC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:dd:d5:63:37:b8:2e:1a:5e:c2:f2:22:b2:
                    d4:fe:38:a7:45:7d:99:64:4d:60:dd:34:7f:c3:eb:
                    75:30:ea:62:3c:91:45:a3:72:f1:2a:4a:40:a2:87:
                    dc:31:3a:57:f3:14:c3:08:f6:64:e3:c2:9a:de:4a:
                    41:cd:ac:69:1c:83:e6:22:a8:00:f4:b0:dd:01:29:
                    6f:d7:1f:39:3f:b4:ff:be:ea:6c:a4:7a:6c:37:36:
                    d7:f1:cf:30:96:69:cc:8b:5c:d3:79:29:00:e5:c4:
                    9f:a4:70:c4:5f:01:57:5e:a0:54:01:03:c9:53:dd:
                    a6:c4:3c:cd:d9:5a:49:37:84:9f:87:bf:e8:64:ec:
                    70:7d:54:e7:17:54:c0:3c:85:dc:5e:dd:df:f5:a0:
                    46:a8:31:f3:73:b7:8c:f7:d4:9c:c8:02:12:e8:6f:
                    bc:1c:52:b0:8a:41:b2:c0:99:1e:c7:19:cd:f6:5f:
                    94:bf:5a:c0:fa:85:89:dd:23:fa:95:29:32:b5:ef:
                    99:87:a5:ac:6d:3b:06:3b:e8:f1:58:a1:87:cc:b4:
                    00:59:da:5d:f8:63:f7:4f:2f:34:90:b3:45:ce:8e:
                    36:2b:80:b6:f0:c1:c8:71:35:3b:50:44:c1:d1:37:
                    5d:61:bf:1d:dd:ca:d3:0b:1e:1b:fd:a9:e3:1f:61:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:C5:B5:33:B2:27:C3:88:74:53:79:4C:96:70:6E:C7:BE:AC:5A
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:d7:03:76:bb:11:74:32:ed:08:06:de:96:69:57:c8:6c:
         44:23:f0:97:bb:aa:c7:6f:cb:3d:80:8d:d0:f8:c7:29:d5:92:
         6b:9f:7a:40:40:93:9f:2b:e3:72:2c:d2:7e:ea:2e:3b:4b:dc:
         93:aa:83:a4:a1:15:e2:a0:29:eb:af:ae:6c:38:d5:b9:70:1c:
         3b:15:3e:c7:a1:36:49:7f:3f:19:1d:9c:f1:1e:45:dd:3d:89:
         15:ab:fd:ab:e3:01:9b:0c:dc:bb:2b:13:31:1f:40:76:12:5c:
         bc:68:ec:e8:8c:39:6e:db:9b:e1:0c:fc:17:ae:43:27:81:f2:
         5b:95:18:87:1b:3b:09:1f:1d:5c:78:8e:33:cd:cf:bc:d6:9e:
         9b:f5:2e:fa:79:fc:4b:3f:33:24:25:9b:2a:6b:b6:df:93:58:
         05:ce:15:db:1a:6f:57:57:09:13:07:7c:86:5b:27:54:4d:0d:
         60:dc:1d:3c:f0:b0:4c:49:19:b6:23:cd:94:df:38:1e:b9:17:
         a9:75:2b:c2:9f:7c:5c:ac:88:1e:23:6b:e6:a3:85:9e:4f:ba:
         73:bf:ac:89:c4:00:c0:26:3b:7a:0d:38:ea:db:8b:06:76:0a:
         70:b5:e4:f3:42:75:fc:35:dc:ac:e9:ad:d5:4a:a6:7d:73:41:
         fc:25:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:56 2026 by rpki-client