Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          CGYrkAlDjBi4NNgu3bgiIB+LKqMR1lAmsxRlQxCTa8Q=
Subject key identifier:   5F:E4:8A:AE:6E:AB:E2:29:36:1B:60:2B:CA:EB:E7:C1:20:FF:C2:11
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       0166407F6C6C8679E0D6C321D33472700B9391AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          9B
Signing time:             Wed 13 May 2026 01:10:50 +0000
Manifest this update:     Wed 13 May 2026 01:05:50 +0000
Manifest next update:     Thu 14 May 2026 04:59:50 +0000
Files and hashes:         1: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          2: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          3: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          4: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
                          5: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
                          6: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          7: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          8: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          9: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          10: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          11: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          12: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          13: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          14: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: rplT7IEVMhStLbNVLCOfNeeyv9k/N4YHdK7hpJgi46Y=)
                          15: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
                          16: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          17: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          18: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          19: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          20: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
                          21: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          22: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          23: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          24: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          25: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          26: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:66:40:7f:6c:6c:86:79:e0:d6:c3:21:d3:34:72:70:0b:93:91:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: May 13 01:05:50 2026 GMT
            Not After : May 14 04:59:50 2026 GMT
        Subject: CN=5FE48AAE6EABE229361B602BCAEBE7C120FFC211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:64:4a:d8:85:e4:97:86:61:da:db:1a:10:
                    22:60:e7:54:82:73:2c:c8:31:d3:bc:28:71:1a:59:
                    e8:75:b9:88:0f:0d:29:b8:fa:5b:24:36:c2:43:65:
                    d1:33:fc:13:46:d7:39:1f:87:e8:57:48:fc:9d:5b:
                    0a:0f:53:d5:36:c9:23:dd:db:4a:76:1a:62:a0:02:
                    74:4e:10:5c:4f:d8:a9:c8:43:cf:d6:76:34:16:b2:
                    e3:b0:61:5e:da:3d:5c:6b:53:ab:d7:6c:8d:7d:08:
                    8f:44:e5:18:61:62:3f:8b:e4:1d:66:69:aa:af:49:
                    99:51:f4:ae:06:ed:df:57:db:3e:38:e2:ee:71:fd:
                    5c:b1:89:b6:ee:85:a3:76:30:d5:01:05:b7:94:d1:
                    85:c8:26:f9:98:93:45:81:88:6e:6b:82:06:4f:1d:
                    d6:64:3c:e1:4b:02:01:f5:55:f1:44:f7:db:ad:c8:
                    92:14:7f:42:9a:94:66:6f:92:24:87:23:42:44:8e:
                    06:f2:d0:0c:f8:83:82:3c:df:48:c9:42:2e:bf:5b:
                    e7:a7:cc:71:c2:87:b4:85:8b:25:b1:ed:c6:ad:0a:
                    35:78:81:90:f8:57:b3:0d:db:d7:46:cd:6e:51:51:
                    4e:9a:eb:dd:0b:50:30:80:39:ff:2c:c1:07:ea:07:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E4:8A:AE:6E:AB:E2:29:36:1B:60:2B:CA:EB:E7:C1:20:FF:C2:11
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:a3:47:08:45:ed:f8:b9:ad:0a:c6:3e:3e:3f:6a:8a:81:
         b6:86:5e:f2:3e:3d:bb:d6:c2:e6:de:ab:08:f1:59:80:7c:1e:
         40:ba:d9:26:70:d9:0f:35:24:2c:d7:ab:e0:f2:dd:79:f2:f3:
         46:e2:2c:c0:7a:7c:7c:dd:7c:c0:9c:0b:48:38:0c:a9:44:9e:
         be:4e:4c:72:5a:df:a1:de:fe:1c:a1:ce:7b:dc:39:b6:4e:e7:
         da:93:d7:38:ef:8a:9b:a5:8f:e3:50:ce:ab:e1:56:f0:89:f7:
         b7:e4:cd:a4:db:da:e7:dc:e1:b3:59:8e:c6:2d:18:30:65:5b:
         1a:1a:f1:ae:a9:30:a3:be:00:03:09:88:77:4b:f9:b4:72:23:
         2a:73:ae:90:ca:65:00:8d:8d:28:51:a2:65:1b:6c:38:5f:0d:
         0d:51:cb:19:79:80:08:39:f8:e1:00:0f:54:a7:70:96:c9:f1:
         4b:98:64:a6:b5:ec:76:b7:4d:90:0b:a8:9d:93:b0:36:61:cf:
         9d:76:0d:4d:a4:4b:1f:2c:83:ea:1f:bb:d2:b5:92:1a:e3:8c:
         e4:33:dd:99:aa:f8:41:a1:cd:2c:6f:4c:26:bb:70:5d:2f:ec:
         45:3a:39:3c:f9:65:c6:7c:27:fa:61:08:1a:74:42:9f:78:46:
         b2:fa:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:31 2026 by rpki-client