Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File:                     6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier:          w+j8f6XA1JS71LQ2aNUuWnkSecIwpIacqKk/eDKm9rM=
Subject key identifier:   32:AD:7B:F0:31:CC:22:6D:B2:0C:08:39:79:92:D0:A9:4E:E2:15:39
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer:       /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial:       5AA3986EC757D3DE3A7AF15945CE823EE851FFAC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number:          F9
Signing time:             Thu 23 Jul 2026 22:44:45 +0000
Manifest this update:     Thu 23 Jul 2026 22:39:45 +0000
Manifest next update:     Sat 25 Jul 2026 01:03:45 +0000
Files and hashes:         1: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
                          2: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: pWQ5ybHbLQJxwUpjm1aqVRsFL80FFu2Zz/LbSWcO8OU=)
                          3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
                          4: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:98:6e:c7:57:d3:de:3a:7a:f1:59:45:ce:82:3e:e8:51:ff:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
        Validity
            Not Before: Jul 23 22:39:45 2026 GMT
            Not After : Jul 25 01:03:45 2026 GMT
        Subject: CN=32AD7BF031CC226DB20C08397992D0A94EE21539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:87:a6:68:7c:53:93:64:d0:f9:19:a5:77:
                    c4:66:22:0d:a3:34:c7:d1:72:f2:fe:29:41:7f:be:
                    90:f6:6e:21:3b:ee:ed:8f:43:aa:1f:1f:a9:68:56:
                    a7:f7:80:d0:22:77:32:41:2d:0d:52:c0:dd:7d:83:
                    15:67:da:1d:60:cf:c8:6d:db:6f:f0:ae:e1:18:dd:
                    94:01:27:31:16:73:4d:44:0e:84:9a:d3:8b:fc:21:
                    61:bf:fc:2d:95:e6:a2:fc:59:76:e9:9d:cc:7d:89:
                    9a:45:85:f9:ff:99:89:5b:5b:d2:23:65:a3:f1:0c:
                    62:9b:9b:f4:34:02:a6:24:2f:8d:65:19:2e:9c:63:
                    59:d0:7f:19:8f:5f:42:e0:aa:24:41:e7:5c:31:ea:
                    47:40:7c:b9:ee:2f:93:08:7b:5d:e7:1d:ad:ac:22:
                    e7:e4:90:23:c7:4c:a7:75:c4:4f:c5:bc:e7:a2:7c:
                    b7:ea:8a:2b:c0:d0:1a:b7:a9:68:ae:52:dd:88:90:
                    a0:ac:36:c3:18:86:54:35:5d:5f:58:bf:52:7b:c9:
                    fe:c8:c2:3d:61:f6:26:b6:c6:1d:4b:57:4d:1c:31:
                    30:67:72:59:20:34:8d:a8:5c:db:09:8e:50:9c:c1:
                    99:e1:9b:8c:44:69:28:83:fc:f6:84:6c:1e:67:19:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:7B:F0:31:CC:22:6D:B2:0C:08:39:79:92:D0:A9:4E:E2:15:39
            X509v3 Authority Key Identifier:
                keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:c7:fd:88:2d:99:4d:aa:f8:9a:db:ee:99:ed:ac:cc:29:
         28:6d:7b:33:97:75:df:2f:8e:01:4d:05:17:b9:31:01:04:e6:
         d4:be:17:e4:28:0b:0f:87:4f:7c:88:a8:41:b3:cd:7a:f9:39:
         2b:d2:35:65:f9:57:0b:8d:14:57:9c:7a:3a:22:29:f8:bf:f9:
         26:d1:fc:f8:26:9d:f6:42:82:e0:9e:12:7c:82:16:5e:0e:ca:
         06:14:5c:35:df:e6:b8:e7:10:a2:78:89:e9:ac:3b:b3:9c:9e:
         ed:05:78:a2:df:fe:be:55:27:3a:5a:22:87:72:69:33:0b:bb:
         20:8d:62:ab:87:07:98:82:35:b8:46:09:b7:64:d7:dd:6a:7c:
         ca:f5:57:fe:d9:84:ea:27:cb:c8:5b:6c:e4:d9:e2:52:52:09:
         97:1c:ef:65:25:84:7b:db:34:9c:3b:c8:13:97:a7:03:d4:20:
         d6:05:72:1e:65:bc:b0:79:60:19:8c:6f:5d:c3:c0:48:06:b0:
         11:08:4e:ce:68:76:e5:4b:c2:85:35:8a:07:f3:af:76:3e:71:
         89:05:59:d3:66:13:35:b7:4b:9b:ca:ba:30:e4:ee:12:95:db:
         c7:0c:8b:ec:4b:a8:ce:58:e8:82:d2:90:7d:98:60:65:95:c6:
         63:e9:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:48 2026 by rpki-client