Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
File:                     6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json)
Hash identifier:          A6g16Pg3WGsMQ0/2k0iRHNZ8KSMLnequbk8BYObrRsM=
Subject key identifier:   AA:06:F1:FE:35:4D:2E:2A:4C:5D:EF:C9:C0:20:16:C1:D0:A4:08:A1
Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04
Certificate issuer:       /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04
Certificate serial:       1F338D3064C992A2FD209606DD3DC4F9B2BA0583
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
Manifest number:          013C
Signing time:             Mon 12 Oct 2026 14:22:02 +0000
Manifest this update:     Mon 12 Oct 2026 14:17:02 +0000
Manifest next update:     Thu 15 Oct 2026 14:52:02 +0000
Files and hashes:         1: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: k7fmez5p5R50xpeMeqQFESEui/HpAFHApvvJBlb6p10=)
                          2: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 10:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:8d:30:64:c9:92:a2:fd:20:96:06:dd:3d:c4:f9:b2:ba:05:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04
        Validity
            Not Before: Oct 12 14:17:02 2026 GMT
            Not After : Oct 15 14:52:02 2026 GMT
        Subject: CN=AA06F1FE354D2E2A4C5DEFC9C02016C1D0A408A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:81:6a:3c:bc:11:05:5a:76:91:8b:18:36:
                    c2:c9:75:a7:ef:96:7c:d8:6b:7d:25:70:ab:fb:aa:
                    91:5c:89:3e:f9:03:29:23:ff:3a:54:7d:92:82:e9:
                    3b:7e:7d:0b:5b:1f:df:59:d0:47:b2:30:bc:4f:0c:
                    74:92:6b:26:a6:ef:60:98:a3:53:22:69:db:8a:4f:
                    6c:f7:b9:1f:db:c8:94:a1:c6:90:b3:e0:ca:44:15:
                    1e:54:14:48:43:b8:9c:65:26:03:2a:90:e1:59:98:
                    67:9d:78:cb:e1:12:e8:05:9a:ec:85:a4:85:23:1c:
                    fe:77:8a:0e:52:6d:33:ad:a6:1f:21:be:85:34:cc:
                    e5:3d:8e:8b:f4:8e:62:47:70:4e:35:2d:04:05:9c:
                    84:43:27:b4:f4:f3:fd:3f:d3:ce:8e:3c:c1:fc:42:
                    d7:88:aa:19:69:b0:0f:be:e0:ab:ef:11:8f:cb:63:
                    bb:8a:a8:59:47:32:14:ad:12:53:af:35:81:80:6e:
                    9e:96:5e:16:0d:d9:4c:4d:5e:59:e1:2c:bf:27:13:
                    bb:a2:f5:9d:91:23:e1:a0:cd:c8:f2:4a:78:17:29:
                    1a:02:d8:a8:45:1c:ae:f7:63:78:f2:f8:6d:3f:44:
                    0c:fe:46:33:ee:1b:fd:ef:b4:f9:9a:40:ac:d9:c2:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:06:F1:FE:35:4D:2E:2A:4C:5D:EF:C9:C0:20:16:C1:D0:A4:08:A1
            X509v3 Authority Key Identifier:
                keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:34:ca:44:7c:06:c0:0b:c7:28:7d:8b:9d:76:e2:9f:c3:aa:
         d0:f7:b8:f1:7f:4b:17:72:b5:19:a0:56:47:a7:33:bd:44:49:
         38:17:1b:9e:09:cf:6e:bc:d6:f0:ac:62:c3:8a:fb:28:b4:b4:
         db:b0:af:1a:fa:9c:06:de:4b:e4:45:74:b0:21:51:17:e3:33:
         12:51:45:ab:92:6d:20:f0:5d:4e:0e:03:c5:64:3b:a1:cf:1a:
         44:46:44:95:a3:7b:b2:af:fc:75:30:0f:19:93:90:a4:30:87:
         79:0c:fb:d1:73:4d:c3:85:01:22:70:ac:e8:18:ac:57:c1:79:
         14:ea:41:c6:15:34:28:40:48:5b:10:fd:09:07:43:6b:a9:44:
         63:93:9f:a7:94:d1:2c:05:61:73:da:20:dd:5f:e3:02:02:0a:
         92:5b:03:31:a8:05:b9:d9:f3:ca:12:af:21:fa:f2:f9:30:89:
         cf:ca:52:a0:3b:8b:e5:66:4a:72:e5:27:88:3c:a8:30:e2:f6:
         00:d8:be:82:ec:ba:04:29:c7:41:11:23:9f:2b:7c:29:55:d6:
         d2:b1:a9:dc:64:8b:0a:64:33:f4:c1:5a:b2:aa:c0:8f:45:f3:
         8f:1c:67:e1:bf:23:6f:02:9d:83:7c:fc:7b:cc:c6:bc:82:a2:
         1d:2b:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:49:01 2026 by rpki-client