Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
File:                     6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft (raw, json)
Hash identifier:          WtC+ZGGDjBcCSIF+zuLIjw2v5gpwlBFglzHbvGbShXc=
Subject key identifier:   46:20:91:AC:85:02:63:5A:E2:9D:B1:52:FC:A2:4A:87:1E:65:B4:43
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       605C571C410BE1291D8CF6C04E9DFB7FC2322A12
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
Manifest number:          59
Signing time:             Thu 26 Mar 2026 09:18:28 +0000
Manifest this update:     Thu 26 Mar 2026 09:13:28 +0000
Manifest next update:     Fri 27 Mar 2026 09:32:28 +0000
Files and hashes:         1: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl (hash: +hrYeigH2wSKujod1Bfdv6cfpIL0Ds/kTWnUjcl3JY0=)
                          2: 3130312e35322e35322e302f32342d3234203d3e203435303739.roa (hash: WeT/+VI4DJbVK3NQkPYzHL8X47fHP0WfM+8Qgv7h4ls=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5c:57:1c:41:0b:e1:29:1d:8c:f6:c0:4e:9d:fb:7f:c2:32:2a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: Mar 26 09:13:28 2026 GMT
            Not After : Mar 27 09:32:28 2026 GMT
        Subject: CN=462091AC8502635AE29DB152FCA24A871E65B443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:de:d7:60:5a:20:ed:2a:ef:3c:87:8c:53:
                    69:6f:b3:93:f1:2f:5c:01:d0:ec:c0:eb:4c:b7:1c:
                    07:3d:8e:3a:81:ae:75:72:98:e9:ff:91:3f:8c:dc:
                    d3:e3:c4:ec:12:08:c4:24:29:0f:8b:e0:88:e2:33:
                    6b:60:b7:7a:f8:51:90:0d:61:fd:21:47:25:98:e9:
                    a9:2b:23:c2:83:d6:64:8f:18:ee:3c:9f:c1:07:9f:
                    08:3b:18:a1:61:0f:a4:69:43:f8:b2:6d:d1:a9:30:
                    40:43:5a:2c:35:5c:74:0c:59:4c:46:ff:5d:67:fc:
                    f9:db:b5:81:ba:7a:36:35:5d:33:9b:e1:2a:19:66:
                    b6:8b:20:19:ec:89:4a:d5:c3:70:a5:17:23:c7:6e:
                    2e:7a:a7:94:6d:95:9a:2b:2f:e2:82:f2:cf:cb:01:
                    96:b2:08:be:b1:27:83:d0:6e:38:74:b8:1d:8b:21:
                    3c:6c:82:be:74:ba:65:eb:c7:ab:cf:0d:bf:29:d8:
                    8a:09:36:ad:97:3b:15:e5:3f:c7:e6:4b:3d:12:fd:
                    4c:96:ba:69:84:a7:d6:5f:c6:74:78:fc:e2:bf:c2:
                    f1:3e:58:cd:1e:4e:7b:79:64:25:57:22:ee:5b:a8:
                    b5:de:e6:01:51:93:45:53:5e:56:e5:2a:28:a0:ef:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:91:AC:85:02:63:5A:E2:9D:B1:52:FC:A2:4A:87:1E:65:B4:43
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:38:64:9a:b0:46:9f:e7:6d:ce:f3:3b:74:2d:c1:c6:89:
         a7:d4:c4:2f:4d:de:e6:f8:61:43:f3:a5:94:11:15:7d:d3:b5:
         6e:74:80:57:dd:26:2d:78:0e:b4:e7:aa:9b:84:10:27:aa:9a:
         2c:82:2b:2e:82:3f:47:6f:16:e2:94:50:ea:63:7e:5d:ce:8e:
         d8:02:ef:b3:63:4f:82:ea:0b:08:6c:c7:7e:ee:85:64:a4:0b:
         03:7a:1d:aa:5e:db:37:46:33:8f:80:fe:d0:31:2b:68:fb:ab:
         04:ec:ad:da:fe:9a:fe:27:e2:46:4e:ab:7f:88:f2:87:af:dc:
         e2:22:01:de:09:88:d1:49:4e:06:64:b3:93:40:ec:55:75:53:
         73:12:14:e3:48:15:e3:95:29:e0:7e:72:f6:81:5b:e0:04:ce:
         d7:87:71:41:d0:05:08:d4:24:71:38:58:98:13:4f:62:21:ea:
         01:54:79:36:34:4d:94:fa:a0:d7:b0:23:73:47:56:08:c6:51:
         6b:ff:8e:17:0e:aa:65:6a:5a:7c:75:77:42:cb:c3:37:33:94:
         4a:ea:c1:bb:8b:6a:e0:c4:fb:88:88:2d:8e:58:1d:6a:28:d9:
         5e:50:89:6c:61:34:b0:fc:4f:25:ea:54:65:fc:df:99:60:80:
         aa:e3:3d:3c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYFxXHEEL4SkdjPbATp37f8IyKhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyNkZENEE5MjdBMTBBNDU4QkJGQTdDNkI5RUU0NjdF
RTE1Qjk3QjAeFw0yNjAzMjYwOTEzMjhaFw0yNjAzMjcwOTMyMjhaMDMxMTAvBgNV
BAMTKDQ2MjA5MUFDODUwMjYzNUFFMjlEQjE1MkZDQTI0QTg3MUU2NUI0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8t7XYFog7SrvPIeMU2lvs5Px
L1wB0OzA60y3HAc9jjqBrnVymOn/kT+M3NPjxOwSCMQkKQ+L4IjiM2tgt3r4UZAN
Yf0hRyWY6akrI8KD1mSPGO48n8EHnwg7GKFhD6RpQ/iybdGpMEBDWiw1XHQMWUxG
/11n/PnbtYG6ejY1XTOb4SoZZraLIBnsiUrVw3ClFyPHbi56p5RtlZorL+KC8s/L
AZayCL6xJ4PQbjh0uB2LITxsgr50umXrx6vPDb8p2IoJNq2XOxXlP8fmSz0S/UyW
ummEp9ZfxnR4/OK/wvE+WM0eTnt5ZCVXIu5bqLXe5gFRk0VTXlblKiig7+DLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQURiCRrIUCY1rinbFS/KJKhx5ltEMwHwYDVR0j
BBgwFoAUaCb9SpJ6EKRYu/p8a57kZ+4VuXswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTQyODQ4Mi8wLzY4MjZGRDRBOTI3QTEwQTQ1OEJCRkE3QzZCOUVF
NDY3RUUxNUI5N0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjgyNkZENEE5MjdBMTBBNDU4QkJGQTdDNkI5RUU0NjdFRTE1Qjk3Qi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE0Mjg0ODIvMC82ODI2RkQ0QTkyN0Ex
MEE0NThCQkZBN0M2QjlFRTQ2N0VFMTVCOTdCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2Q4ZJqwRp/n
bc7zO3QtwcaJp9TEL03e5vhhQ/OllBEVfdO1bnSAV90mLXgOtOeqm4QQJ6qaLIIr
LoI/R28W4pRQ6mN+Xc6O2ALvs2NPguoLCGzHfu6FZKQLA3odql7bN0Yzj4D+0DEr
aPurBOyt2v6a/ifiRk6rf4jyh6/c4iIB3gmI0UlOBmSzk0DsVXVTcxIU40gV45Up
4H5y9oFb4ATO14dxQdAFCNQkcThYmBNPYiHqAVR5NjRNlPqg17Ajc0dWCMZRa/+O
Fw6qZWpafHV3QsvDNzOUSurBu4tq4MT7iIgtjlgdaijZXlCJbGE0sPxPJepUZfzf
mWCAquM9PA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:59:14 2026 by rpki-client