Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          OeXpYrWvvGxVGd2uhCCe/E6TXGeJgDrSXzVFOP7qpfM=
Subject key identifier:   AD:0F:0C:76:C5:55:41:37:AC:1B:F6:86:1A:AA:8D:65:B7:71:5E:35
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       52EE6BAE6AAC7ADA2976F6A258E24A55BDE6CE12
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 02:30:09 +0000
Manifest this update:     Fri 24 Jul 2026 02:25:09 +0000
Manifest next update:     Sat 25 Jul 2026 03:43:09 +0000
Files and hashes:         1: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          2: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          3: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          4: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          5: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          6: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
                          7: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          8: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          9: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          10: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
                          11: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          12: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          13: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          14: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          15: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          16: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          17: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          18: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          19: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          20: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          21: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          22: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
                          23: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: CtA287l4fWECE5wJatz33zFv8Wxt98XYbA6x2pe/htg=)
                          24: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          25: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          26: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ee:6b:ae:6a:ac:7a:da:29:76:f6:a2:58:e2:4a:55:bd:e6:ce:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jul 24 02:25:09 2026 GMT
            Not After : Jul 25 03:43:09 2026 GMT
        Subject: CN=AD0F0C76C5554137AC1BF6861AAA8D65B7715E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:fb:7d:04:cc:a8:97:76:44:59:2a:4c:59:
                    ce:19:8d:58:45:b1:c0:b2:a3:6f:d7:34:f5:be:fd:
                    fe:a9:62:4c:6a:d5:68:9c:06:c9:af:8f:7c:f9:94:
                    ae:9b:2e:2b:9f:64:81:61:19:32:23:2d:a6:ef:0c:
                    c5:8f:97:38:50:d9:a4:9e:f9:23:4f:4b:aa:68:cc:
                    41:c0:1a:69:7a:49:99:09:f0:70:0b:ce:43:98:5d:
                    33:b4:fe:df:2f:76:36:35:70:3f:20:57:88:48:34:
                    e5:65:bf:54:fc:f5:bd:74:ef:c8:72:4f:db:32:c7:
                    ff:f1:cc:7c:27:8d:c5:c3:5a:22:0c:8b:20:de:94:
                    20:1b:cf:67:3c:52:9a:1c:d3:8a:e1:32:d3:cc:76:
                    13:c4:40:0d:07:39:83:95:af:aa:ce:45:17:2e:15:
                    8c:2b:72:ec:72:73:ac:2c:60:2d:0a:d9:6e:68:3b:
                    0b:3d:07:71:dd:1f:b5:16:53:af:bd:a3:38:56:3f:
                    63:4a:fb:71:86:fa:43:e6:10:df:48:66:1e:31:d5:
                    a4:a0:9e:5e:ae:02:6e:57:e7:18:18:0f:41:be:b4:
                    3c:24:f3:5f:04:41:c4:45:7a:be:50:9a:3c:4f:c5:
                    c5:b2:59:e8:b1:a9:9e:16:82:d1:e0:d5:9e:8b:4b:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:0C:76:C5:55:41:37:AC:1B:F6:86:1A:AA:8D:65:B7:71:5E:35
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:d8:cd:49:9d:2d:f4:a8:48:30:d7:a5:18:fb:a2:5d:bf:
         e6:88:65:a9:29:12:a0:56:29:ce:38:bd:76:b8:58:43:76:87:
         1b:eb:72:6d:eb:31:45:3f:5f:39:ed:96:9b:92:8e:26:c9:1a:
         3b:ff:0d:e7:39:f2:72:ff:7e:9f:23:3c:84:e7:e9:8a:04:f4:
         c6:38:7d:06:f8:fb:f7:d2:35:4d:bf:5b:41:30:eb:5d:96:b9:
         55:62:cb:26:b4:89:48:66:95:41:01:2d:d3:1f:36:94:13:e6:
         1f:9a:1c:c4:8d:9b:5e:2e:d2:d9:74:a2:de:d9:b9:4b:24:17:
         90:6b:50:c3:21:fe:83:4b:42:43:01:ac:32:79:08:67:e9:62:
         99:3b:a5:c6:9f:42:ae:c1:11:6b:7a:4d:93:92:c0:bc:b8:22:
         89:85:c0:a2:7b:2e:c1:d1:b7:c7:3f:75:ff:ac:8b:12:db:a8:
         fb:88:60:26:4c:b1:4e:a5:81:ef:67:7a:80:18:96:46:8b:70:
         d7:6e:b1:63:c4:3c:7e:34:4d:02:c9:13:05:c8:e5:1c:51:0b:
         a4:9d:02:0e:a4:0e:e7:ed:21:07:fa:f0:b0:6d:93:a8:ef:c4:
         dd:15:79:b0:f5:1c:1d:14:ef:40:79:d5:2d:7d:04:98:95:b7:
         f1:b7:54:7c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUUu5rrmqsetopdvaiWOJKVb3mzhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjA3MjQwMjI1MDlaFw0yNjA3MjUwMzQzMDlaMDMxMTAvBgNV
BAMTKEFEMEYwQzc2QzU1NTQxMzdBQzFCRjY4NjFBQUE4RDY1Qjc3MTVFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/Pt9BMyol3ZEWSpMWc4ZjVhF
scCyo2/XNPW+/f6pYkxq1WicBsmvj3z5lK6bLiufZIFhGTIjLabvDMWPlzhQ2aSe
+SNPS6pozEHAGml6SZkJ8HALzkOYXTO0/t8vdjY1cD8gV4hINOVlv1T89b1078hy
T9syx//xzHwnjcXDWiIMiyDelCAbz2c8Upoc04rhMtPMdhPEQA0HOYOVr6rORRcu
FYwrcuxyc6wsYC0K2W5oOws9B3HdH7UWU6+9ozhWP2NK+3GG+kPmEN9IZh4x1aSg
nl6uAm5X5xgYD0G+tDwk818EQcRFer5QmjxPxcWyWeixqZ4WgtHg1Z6LS+vvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrQ8MdsVVQTesG/aGGqqNZbdxXjUwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC82QTQ1RDgzMjJDMzY0
OEY5MUUyMTI0NzJGNjA0Q0FGREJBNzAxOUJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGXYzUmdLfSo
SDDXpRj7ol2/5ohlqSkSoFYpzji9drhYQ3aHG+tybesxRT9fOe2Wm5KOJskaO/8N
5znycv9+nyM8hOfpigT0xjh9Bvj799I1Tb9bQTDrXZa5VWLLJrSJSGaVQQEt0x82
lBPmH5ocxI2bXi7S2XSi3tm5SyQXkGtQwyH+g0tCQwGsMnkIZ+limTulxp9CrsER
a3pNk5LAvLgiiYXAonsuwdG3xz91/6yLEtuo+4hgJkyxTqWB72d6gBiWRotw126x
Y8Q8fjRNAskTBcjlHFELpJ0CDqQO5+0hB/rwsG2TqO/E3RV5sPUcHRTvQHnVLX0E
mJW38bdUfA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:20 2026 by rpki-client