Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File:                     320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier:          0iQwbOCTU3J4wrTSg/paeZ9Lx5HkUF8z3hPfBOgpevk=
Subject key identifier:   DE:5F:A9:B8:77:E4:49:05:9C:1F:13:3E:83:9D:5C:32:74:12:18:33
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       4FE1DD5DD7DE545D222AB59A2DBD1AB6657D47C3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number:          54
Signing time:             Tue 28 Jul 2026 23:57:56 +0000
Manifest this update:     Tue 28 Jul 2026 23:52:56 +0000
Manifest next update:     Thu 30 Jul 2026 02:45:56 +0000
Files and hashes:         1: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
                          2: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
                          3: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
                          4: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
                          5: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
                          6: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
                          7: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
                          8: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
                          9: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
                          10: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: ch0DAO/7blqFyB6pO28LTN9V9s5ER+hNrX770BpaGGI=)
                          11: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
                          12: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e1:dd:5d:d7:de:54:5d:22:2a:b5:9a:2d:bd:1a:b6:65:7d:47:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: Jul 28 23:52:56 2026 GMT
            Not After : Jul 30 02:45:56 2026 GMT
        Subject: CN=DE5FA9B877E449059C1F133E839D5C3274121833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:ef:89:c9:88:26:35:87:7a:5e:49:60:18:
                    f2:96:58:a3:b7:7b:66:3b:6d:dd:f0:31:c6:ae:f6:
                    2f:88:63:32:60:cd:58:e5:a3:e8:d5:f7:88:4a:02:
                    8c:73:c1:e1:47:72:2d:46:47:f7:3d:70:ee:54:f6:
                    ce:3a:e7:fd:40:57:77:d2:36:de:ed:3a:bc:c4:96:
                    6a:e5:6e:78:ce:14:e3:d4:d0:a3:95:70:1a:31:84:
                    12:c3:0c:cd:ff:cc:0a:cf:02:23:88:73:a8:c2:f9:
                    43:c7:19:8a:7f:47:bb:dc:52:93:81:79:d1:63:ce:
                    5c:ba:cb:3a:c6:36:4b:fa:9d:67:17:05:d1:df:af:
                    00:31:0d:09:4d:54:c2:d4:b4:f7:2e:2c:a9:e2:37:
                    b9:4a:b1:1d:49:5b:82:b3:e7:a2:58:71:db:5c:d0:
                    0d:dd:55:bb:a0:66:5b:a9:25:c6:5f:01:cf:66:24:
                    a3:d1:d6:0a:6a:88:cf:33:76:ed:c7:43:90:2a:ae:
                    74:18:d4:d5:cd:21:39:e2:2e:aa:4a:62:76:77:2c:
                    d4:d6:0b:b9:4b:d3:2f:41:2a:13:2b:aa:44:49:e2:
                    e6:dc:e6:99:7f:4d:e4:6e:4a:61:2b:3e:e9:08:2f:
                    96:01:69:56:23:69:57:ba:3c:c3:d5:39:83:d7:de:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5F:A9:B8:77:E4:49:05:9C:1F:13:3E:83:9D:5C:32:74:12:18:33
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:35:10:b3:dc:2f:1a:7b:08:24:6b:a8:22:74:18:0a:77:
         d8:4b:72:60:f6:e2:67:27:c0:1d:1d:98:be:a2:a4:cd:3b:c2:
         61:2a:42:7e:56:a7:c1:cd:c1:46:bd:b3:fb:40:42:6c:28:1b:
         ca:53:f4:a1:33:98:04:e4:b0:e6:ce:ef:5e:8a:6f:33:1d:e1:
         c0:e7:60:80:b6:6b:31:b1:8e:a7:09:7b:76:37:f0:02:dc:9c:
         06:d5:4a:4e:bd:57:ad:b7:99:55:48:93:37:b2:e9:80:86:88:
         b8:d0:7a:37:db:68:80:79:7b:9d:07:de:80:53:17:06:60:53:
         60:c6:b4:25:a8:f3:8c:5a:a5:1d:8a:33:6f:06:fa:51:fd:73:
         24:af:96:c2:96:77:44:d7:5e:c8:22:cf:fa:2e:36:cb:1a:56:
         51:ad:bc:c6:67:5a:6a:8c:ee:6f:57:6a:0c:a2:01:8f:37:e6:
         38:ad:d1:58:74:eb:5b:c8:3b:91:23:25:e2:8a:6c:37:52:c1:
         b1:06:d6:4b:ea:66:58:c8:86:51:32:6a:5f:c8:0a:0c:a4:58:
         ed:ac:94:8c:69:1e:2c:fb:4d:de:53:1d:ab:8e:f6:38:79:81:
         d2:c9:5f:7d:65:ec:38:93:7d:f9:f1:45:46:e6:5c:1e:c3:17:
         e0:ad:01:99
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUT+HdXdfeVF0iKrWaLb0atmV9R8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2
NTZCRjVDMDAeFw0yNjA3MjgyMzUyNTZaFw0yNjA3MzAwMjQ1NTZaMDMxMTAvBgNV
BAMTKERFNUZBOUI4NzdFNDQ5MDU5QzFGMTMzRTgzOUQ1QzMyNzQxMjE4MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ1O+JyYgmNYd6XklgGPKWWKO3
e2Y7bd3wMcau9i+IYzJgzVjlo+jV94hKAoxzweFHci1GR/c9cO5U9s465/1AV3fS
Nt7tOrzElmrlbnjOFOPU0KOVcBoxhBLDDM3/zArPAiOIc6jC+UPHGYp/R7vcUpOB
edFjzly6yzrGNkv6nWcXBdHfrwAxDQlNVMLUtPcuLKniN7lKsR1JW4Kz56JYcdtc
0A3dVbugZlupJcZfAc9mJKPR1gpqiM8zdu3HQ5AqrnQY1NXNITniLqpKYnZ3LNTW
C7lL0y9BKhMrqkRJ4ubc5pl/TeRuSmErPukIL5YBaVYjaVe6PMPVOYPX3nKfAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3l+puHfkSQWcHxM+g51cMnQSGDMwHwYDVR0j
BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE
Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI2ODAwMjM4OTE5MDI0ODEvMC8zMjAxODhCM0ZBMzhE
QTBGNDE5MkY3MjAxQUQ3RDM3NzY1NkJGNUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMw1ELPcLxp7
CCRrqCJ0GAp32EtyYPbiZyfAHR2YvqKkzTvCYSpCflanwc3BRr2z+0BCbCgbylP0
oTOYBOSw5s7vXopvMx3hwOdggLZrMbGOpwl7djfwAtycBtVKTr1XrbeZVUiTN7Lp
gIaIuNB6N9togHl7nQfegFMXBmBTYMa0JajzjFqlHYozbwb6Uf1zJK+WwpZ3RNde
yCLP+i42yxpWUa28xmdaaozub1dqDKIBjzfmOK3RWHTrW8g7kSMl4opsN1LBsQbW
S+pmWMiGUTJqX8gKDKRY7ayUjGkeLPtN3lMdq472OHmB0slffWXsOJN9+fFFRuZc
HsMX4K0BmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:29 2026 by rpki-client