Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File:                     5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier:          Wi2o5MqBcIzHc9W836IMirQwlJe420UIL40drDwduTM=
Subject key identifier:   48:CE:29:65:6C:CF:49:29:BB:80:4A:04:1B:BD:D4:EF:3C:03:1E:F3
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       573944F076E1B6145EB450E242CE058FF3D2C760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number:          2A
Signing time:             Sat 13 Jun 2026 10:44:34 +0000
Manifest this update:     Sat 13 Jun 2026 10:39:34 +0000
Manifest next update:     Sun 14 Jun 2026 14:12:34 +0000
Files and hashes:         1: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
                          2: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
                          3: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
                          4: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
                          5: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
                          6: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
                          7: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
                          8: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
                          9: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
                          10: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
                          11: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
                          12: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
                          13: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: UC9SpXy97xYDeANfe26R7ZBKEai8Tc0Ky793/C01m1Q=)
                          14: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
                          15: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
                          16: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
                          17: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
                          18: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
                          19: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
                          20: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
                          21: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
                          22: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
                          23: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
                          24: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
                          25: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
                          26: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
                          27: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
                          28: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
                          29: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
                          30: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
                          31: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
                          32: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
                          33: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
                          34: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:44:f0:76:e1:b6:14:5e:b4:50:e2:42:ce:05:8f:f3:d2:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: Jun 13 10:39:34 2026 GMT
            Not After : Jun 14 14:12:34 2026 GMT
        Subject: CN=48CE29656CCF4929BB804A041BBDD4EF3C031EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:3f:43:ef:07:23:1d:78:46:92:4c:e6:78:
                    f5:a6:7d:02:a4:93:ef:6c:ce:5b:a5:9b:12:25:30:
                    57:34:c3:06:ac:20:e2:c3:22:ff:2e:99:b8:b1:ee:
                    1f:7c:96:21:c8:4e:f4:f0:dd:5b:f4:0d:50:81:2f:
                    e3:0e:ac:06:40:34:1e:2e:fa:a9:a3:37:cc:27:55:
                    78:e4:b8:3f:57:e2:a5:b1:7a:28:7e:93:ac:f5:8b:
                    e1:5d:8e:9e:d8:ac:c9:94:b3:c8:76:8a:f0:08:b9:
                    ef:79:e1:3d:e7:42:9a:52:fc:82:57:04:43:82:39:
                    0b:0c:cc:3e:69:55:77:1b:fd:fe:cb:fb:d1:a8:88:
                    bb:7c:f9:43:08:8d:9b:0c:39:5c:9f:ea:3f:46:e1:
                    a5:37:bb:3c:87:8d:09:a2:32:02:6a:d0:30:af:2c:
                    49:d3:d7:78:42:9c:c2:b2:04:14:48:e9:e7:e0:64:
                    27:e9:3f:f7:a9:9e:bf:63:71:a6:fa:1d:1c:2e:8e:
                    cf:01:5b:64:05:cc:fa:95:c0:d8:c9:a2:a8:25:c0:
                    97:db:e2:9a:2e:35:a3:4f:d1:9e:37:e0:66:fb:1f:
                    89:5a:97:60:d5:57:df:06:85:33:32:a6:1e:9a:99:
                    cd:05:12:18:b8:5b:0c:8b:61:8e:20:96:e2:a3:9e:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:29:65:6C:CF:49:29:BB:80:4A:04:1B:BD:D4:EF:3C:03:1E:F3
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:b8:88:9a:69:84:24:cc:da:80:b1:4e:74:cc:13:1e:0d:
         2c:5e:11:26:11:25:86:ab:4c:aa:2f:b9:31:9d:f6:b7:31:7c:
         54:3c:64:94:c9:1b:00:a6:f2:fa:d2:5a:63:18:b0:3a:08:01:
         5a:e5:d1:ec:67:e3:f2:6e:04:ee:8e:ba:20:27:0b:9a:6e:de:
         55:d5:f2:e2:c0:a3:9c:42:9c:ec:7d:42:b0:fe:61:27:8d:6d:
         72:4a:a8:c1:24:9a:ac:2a:c9:dd:69:f7:10:98:b9:a9:41:ca:
         1c:a7:3e:c0:93:44:17:68:c2:65:31:0d:62:19:7a:e5:8f:92:
         89:86:6c:67:ae:b8:d1:ed:5f:27:ba:d5:bb:9e:72:98:d3:24:
         ae:61:dd:b3:b9:c6:b3:04:52:2f:00:a8:8c:ac:66:90:53:35:
         6c:ab:79:cb:20:47:27:be:ba:5c:75:1f:0c:22:cd:82:4a:80:
         6a:84:e5:8b:2f:c8:9a:44:36:17:6a:62:9a:cc:f2:ee:c6:54:
         e1:ad:75:71:c6:76:b8:57:1a:de:0b:69:38:5f:22:a8:94:53:
         cd:2b:0e:ef:28:0a:5c:04:47:58:c5:82:42:af:c6:7f:07:22:
         78:d9:03:0e:75:1b:b5:02:4d:1e:7a:e3:e0:26:29:bf:be:a6:
         8b:79:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:31:05 2026 by rpki-client