Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File:                     5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier:          8iiLUrd26s0CTzatTMSuL4AV4D2hWOAXbYwljIX2hjk=
Subject key identifier:   1D:C0:41:47:7E:0A:48:11:DC:18:8C:1F:5D:D9:70:06:78:A0:89:E7
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       5D7DF458C5A11884126B2C21F6EBC7DB904D5343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number:          67
Signing time:             Wed 29 Jul 2026 06:31:29 +0000
Manifest this update:     Wed 29 Jul 2026 06:26:29 +0000
Manifest next update:     Thu 30 Jul 2026 09:36:29 +0000
Files and hashes:         1: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
                          2: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
                          3: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: PLXVVCF60rzvUOYbShOU+fa/Of1djKpV/IWe97Zu9hI=)
                          4: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
                          5: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
                          6: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
                          7: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
                          8: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
                          9: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
                          10: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
                          11: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
                          12: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
                          13: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
                          14: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
                          15: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
                          16: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
                          17: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
                          18: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
                          19: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
                          20: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
                          21: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
                          22: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
                          23: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
                          24: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
                          25: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
                          26: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
                          27: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
                          28: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
                          29: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
                          30: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
                          31: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
                          32: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
                          33: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
                          34: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7d:f4:58:c5:a1:18:84:12:6b:2c:21:f6:eb:c7:db:90:4d:53:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: Jul 29 06:26:29 2026 GMT
            Not After : Jul 30 09:36:29 2026 GMT
        Subject: CN=1DC041477E0A4811DC188C1F5DD9700678A089E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:b7:7f:ab:87:58:3e:d7:54:24:31:48:3f:
                    75:42:de:ee:fe:df:81:30:7c:b0:98:f9:4c:65:0f:
                    af:ba:73:95:cc:b5:f1:17:37:a8:63:7d:5f:30:a4:
                    2e:6f:33:7e:bf:7d:d9:08:ff:c7:a6:ce:ba:8c:ea:
                    54:c6:49:a1:9c:0d:47:8b:68:ec:f1:95:1f:c1:b0:
                    30:eb:6f:95:32:a7:c9:b8:da:75:c3:0c:70:10:cf:
                    a3:2e:6a:33:b5:48:ab:7b:9b:a5:ce:27:36:8c:b6:
                    ed:e2:37:48:5d:bf:ad:9b:3d:dd:b7:bf:d5:8d:06:
                    50:d8:78:af:f5:6f:a7:79:e2:b8:98:bc:f5:53:1e:
                    51:2e:22:33:91:12:bc:ec:92:69:a9:69:eb:3e:21:
                    39:04:37:63:da:9b:ff:8b:d4:36:f6:3a:b7:0c:ed:
                    13:51:f0:a1:f6:65:87:51:c6:a3:9e:60:ce:4a:bf:
                    ad:d3:31:3f:45:84:1c:f5:94:d4:83:de:bd:5c:7f:
                    28:55:22:4a:81:22:fe:92:76:f2:3a:0e:ac:01:25:
                    6c:3e:6b:40:d3:c3:12:47:61:60:f6:05:da:79:e1:
                    7a:b3:50:d2:cf:f1:be:46:eb:3f:63:70:39:d4:04:
                    42:cf:75:7e:f9:11:2a:33:74:c4:de:84:5f:96:9d:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:41:47:7E:0A:48:11:DC:18:8C:1F:5D:D9:70:06:78:A0:89:E7
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:5c:6e:ca:fc:1b:d5:39:89:46:77:2c:83:8d:3c:9f:a1:
         f5:93:8d:f3:17:fe:cb:23:5a:ed:ae:4b:a1:18:a7:70:3b:e3:
         12:41:3b:9a:0e:24:01:2d:46:24:f8:6f:86:77:e6:7c:db:be:
         ef:d0:9d:9a:5d:aa:ce:3e:20:80:70:9d:6b:c6:e4:51:b7:74:
         4f:7e:e3:aa:61:9b:8e:60:05:b5:a4:01:4d:f9:1e:6a:82:04:
         ee:3c:37:92:37:b6:02:91:68:e2:bb:f4:86:70:d6:45:18:b5:
         48:eb:6e:a2:56:72:c7:86:2b:26:eb:30:f3:b3:2d:cc:fe:ed:
         11:da:16:be:b7:28:76:24:58:0d:a0:b9:8c:20:3b:79:42:e8:
         cf:64:17:c5:72:a5:42:bc:fe:87:61:34:54:52:f1:bf:79:45:
         05:9e:5d:f4:eb:2c:ba:9f:3d:84:60:87:d4:54:76:e0:b0:1f:
         ae:d2:5f:75:ef:d9:28:ba:ab:0d:9c:91:11:99:55:2f:ad:a8:
         cb:4a:bb:f9:2b:44:f0:0d:11:00:6d:65:7d:f5:6e:b4:4d:14:
         45:7a:72:6a:e5:5a:7e:95:0b:42:61:6a:97:cf:43:90:b8:a7:
         b5:d4:8a:42:23:93:ad:7f:0a:20:06:84:2b:db:c9:ed:f5:4f:
         06:a5:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:54 2026 by rpki-client