Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File:                     2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier:          KoYs35dESTVMdcVZVZEx7gcBn3X9cuc51pHGKM/i9Ms=
Subject key identifier:   F5:B8:B6:7E:6C:B4:A6:4F:B2:E7:94:09:71:C9:CD:8F:46:EB:1B:59
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer:       /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial:       1E1267B13A2D0F5A61BACC7DB5B4F68D190993B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number:          98
Signing time:             Tue 12 May 2026 18:45:41 +0000
Manifest this update:     Tue 12 May 2026 18:40:41 +0000
Manifest next update:     Wed 13 May 2026 19:06:41 +0000
Files and hashes:         1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: LsvxIjnKgxJ/57BCL5WDRM5I3IT7hVDXMs+dgfpZEOs=)
                          2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:67:b1:3a:2d:0f:5a:61:ba:cc:7d:b5:b4:f6:8d:19:09:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
        Validity
            Not Before: May 12 18:40:41 2026 GMT
            Not After : May 13 19:06:41 2026 GMT
        Subject: CN=F5B8B67E6CB4A64FB2E7940971C9CD8F46EB1B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:17:43:b3:07:0d:0c:d9:81:82:c3:12:5f:
                    0d:5d:a7:15:38:c2:1c:39:54:05:00:e1:7b:e9:65:
                    c7:2c:e2:9a:62:08:37:fa:f3:19:58:98:9f:ab:06:
                    1d:0e:26:a8:05:cf:e9:bc:14:36:23:71:d8:9b:6e:
                    f3:70:c4:50:a6:fc:30:5e:6f:9e:c2:19:7e:c0:89:
                    c2:48:02:69:e9:40:79:db:16:e4:df:06:65:84:df:
                    09:87:92:c3:96:e4:8e:d6:20:1c:4f:2b:02:cb:8b:
                    fb:42:ca:f6:cc:08:72:47:ab:57:6c:ec:9a:4c:b9:
                    a3:22:cf:60:b0:ce:78:ff:b9:d3:64:c1:f0:3d:59:
                    bf:a3:d9:54:50:ad:54:20:3f:38:34:cc:d5:ce:31:
                    23:53:fb:8f:73:26:54:52:58:71:5f:98:87:d8:54:
                    dc:b9:38:17:d9:c5:f2:ca:1c:bf:4e:47:4a:68:50:
                    e3:6d:6d:87:7c:48:3e:77:92:d0:a7:cb:3d:62:bf:
                    9f:95:6e:63:c6:33:46:9c:e8:ac:8c:c6:05:2c:b5:
                    58:fd:b1:da:08:b6:d7:f3:56:06:ec:fb:06:31:6d:
                    fc:43:d3:30:5a:ec:af:a0:95:1c:bf:b2:f9:26:19:
                    a6:c1:38:5e:cd:3c:52:9a:d6:28:00:bb:08:7f:3a:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B8:B6:7E:6C:B4:A6:4F:B2:E7:94:09:71:C9:CD:8F:46:EB:1B:59
            X509v3 Authority Key Identifier:
                keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:80:e2:38:a6:c6:5f:7e:36:02:57:ce:d0:cd:27:b7:83:b0:
         75:94:3a:8a:96:a5:03:85:51:78:fb:bc:92:68:4c:3a:a5:fe:
         d2:47:5c:d9:e8:5c:cc:79:f0:51:9c:72:e4:bc:11:e8:aa:45:
         0a:75:11:7a:7b:10:bf:a5:7e:4f:ce:dc:b9:42:b4:68:6a:44:
         57:df:f3:e9:96:76:54:e2:c2:2b:60:37:ff:46:63:0b:94:d7:
         06:26:ad:87:be:4c:de:93:8f:4f:92:a9:da:92:3d:1f:cc:9e:
         f4:c9:88:0f:b4:07:1a:c0:bd:42:b3:09:28:44:4f:dd:e1:6f:
         2f:21:ec:f5:99:88:33:ed:e3:fe:05:fa:d2:f0:d1:01:05:8f:
         86:f3:ec:b3:07:db:ce:f7:94:d4:9e:4c:e6:9c:b9:33:61:a8:
         4d:f6:9c:47:a9:b4:90:2e:f8:91:d0:b9:3b:d7:73:6f:6b:2a:
         9c:dd:78:93:c7:d1:5e:a5:d8:d9:1e:84:c1:f4:6a:c0:81:09:
         03:58:6b:d5:fe:99:c5:78:51:4d:0a:8b:a3:07:b9:14:84:3d:
         55:fa:14:3c:29:44:3a:79:d3:8d:27:4e:7b:ff:8b:8f:6b:b1:
         b1:89:ce:59:9d:64:07:0b:dd:85:49:e5:ef:6f:e1:c4:54:bd:
         62:1b:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:36 2026 by rpki-client