Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          iw+fbG+2lxGz7cirKgwtzMreEbHJ3ie68deF6BIabJs=
Subject key identifier:   DF:28:BF:BA:2C:15:22:71:61:56:2A:37:AA:96:86:14:A2:1D:16:DD
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       195781B802CD12BB7A33BF52C968DFC8D246962E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 10:21:03 +0000
Manifest this update:     Wed 13 May 2026 10:16:03 +0000
Manifest next update:     Thu 14 May 2026 13:22:03 +0000
Files and hashes:         1: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          2: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          3: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          4: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          5: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: ZRbV10HtnGNqmojyEXsR429y9ufeIql5ZLjJBGboWxs=)
                          6: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          7: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          8: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          9: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          10: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          11: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:57:81:b8:02:cd:12:bb:7a:33:bf:52:c9:68:df:c8:d2:46:96:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: May 13 10:16:03 2026 GMT
            Not After : May 14 13:22:03 2026 GMT
        Subject: CN=DF28BFBA2C15227161562A37AA968614A21D16DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:dc:99:1f:77:fb:bd:ce:d5:5b:41:2c:92:
                    0b:88:ed:da:95:e9:86:4f:c8:a6:0e:8a:ac:cd:ed:
                    09:97:16:a7:dd:63:1a:ae:49:50:44:64:6c:23:7f:
                    b7:17:c3:e4:71:32:3e:9e:6c:95:0c:a5:d7:70:2d:
                    11:a1:d6:93:d2:5b:aa:37:4b:f2:a6:c5:68:97:d1:
                    5f:a1:28:60:80:23:74:88:91:69:6f:f0:c4:52:f5:
                    37:c4:31:7b:db:39:ca:60:11:f0:22:40:74:19:86:
                    26:05:53:58:2e:c8:90:b6:94:c6:65:6c:23:91:47:
                    62:59:7b:68:1c:43:5b:be:9a:ce:67:c8:45:b1:ce:
                    62:dd:a1:85:b8:79:9c:9f:1e:85:bf:b7:92:9a:2b:
                    96:c1:b7:76:9a:9f:68:c5:3f:54:7f:19:5d:a5:4c:
                    b9:2e:c1:29:14:86:3d:52:07:3c:65:95:91:5b:56:
                    ef:25:49:38:4a:12:16:3a:e7:9c:0d:6c:d5:e6:c9:
                    07:1f:47:63:07:3f:42:26:86:4c:56:72:96:6b:09:
                    68:09:e9:68:0a:4e:93:c4:d4:90:18:3a:5e:e1:cb:
                    6d:47:c1:ed:c8:b4:48:a0:05:9c:46:79:bf:79:55:
                    03:9c:30:63:aa:01:e5:35:67:7d:4f:bd:21:fe:2b:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:28:BF:BA:2C:15:22:71:61:56:2A:37:AA:96:86:14:A2:1D:16:DD
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:21:6a:91:4f:a3:ca:4c:62:7b:3c:0c:e0:ca:c1:65:53:
         15:43:a9:71:8c:fa:0d:44:20:1c:8c:21:8c:7b:1b:34:0b:be:
         ea:d9:4a:c0:4a:3e:19:5a:0b:18:c6:8b:cd:35:75:2a:05:5a:
         16:0f:55:a9:04:50:47:29:20:cc:94:c8:41:9a:6f:1e:5b:38:
         86:08:41:d2:35:cd:37:34:94:b3:ab:82:75:fd:8f:7b:d9:24:
         56:92:c9:81:10:9d:e3:3a:35:de:e4:5d:30:89:67:de:0c:31:
         b8:10:62:42:8e:80:74:35:43:21:b8:2f:f5:b5:82:66:19:bc:
         f1:36:1e:78:b7:f5:bc:40:dc:15:28:93:75:95:7a:31:37:62:
         65:27:ab:1a:04:dc:d9:81:d9:22:12:16:85:77:43:7d:2e:b4:
         1a:b2:ea:cb:9f:cf:d1:21:94:8a:ab:aa:cc:1b:0f:92:65:9f:
         c9:30:f3:2d:30:fe:ee:3a:d0:6a:21:97:61:4c:cd:22:79:8c:
         4f:d8:35:5d:fc:98:92:86:50:f6:4c:50:bc:ba:97:ae:f0:01:
         65:5c:91:cf:61:1f:e4:3f:be:02:91:17:c8:b9:e4:47:97:77:
         ef:2f:5f:56:5f:4f:90:50:c7:26:d7:a1:90:59:f5:48:47:4c:
         ca:e4:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:30 2026 by rpki-client