Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File:                     6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier:          dSz6j6lhXNohHGHQLZ/DZMzjoyQrZqIu9JHf5xSiFq0=
Subject key identifier:   D8:A3:9C:FE:42:B3:75:D2:BF:DA:4A:75:29:C0:60:A8:67:88:97:46
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer:       /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial:       164D9C8A0BAD94497321600F2F223674D5CC026B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 03:05:54 +0000
Manifest this update:     Wed 13 May 2026 03:00:54 +0000
Manifest next update:     Thu 14 May 2026 06:01:54 +0000
Files and hashes:         1: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
                          2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
                          3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
                          4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: 4WSnjzVB9SkkytTYYphvAkirZyaKXlvMnhxR00Rn1Kw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4d:9c:8a:0b:ad:94:49:73:21:60:0f:2f:22:36:74:d5:cc:02:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
        Validity
            Not Before: May 13 03:00:54 2026 GMT
            Not After : May 14 06:01:54 2026 GMT
        Subject: CN=D8A39CFE42B375D2BFDA4A7529C060A867889746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:82:0c:48:20:18:14:df:bc:10:9b:df:4b:
                    6f:e9:b5:79:21:00:58:58:b3:c2:48:46:2e:40:2d:
                    e3:b3:e2:bc:67:dc:c6:0f:85:79:42:52:c6:ac:8d:
                    a8:33:78:25:1a:a7:9f:1c:ae:b8:ac:85:c8:eb:f8:
                    f8:f3:f6:98:4c:c4:d0:00:fb:ca:3d:f8:8a:da:bb:
                    4c:5e:79:5c:99:e1:eb:09:a9:d1:c5:f5:b0:68:92:
                    83:38:30:ec:1a:1e:2a:94:e5:61:f4:d5:81:26:40:
                    83:fb:ce:16:be:90:b8:1a:c6:7a:26:ba:83:ca:95:
                    39:c5:63:7c:b0:85:43:89:0f:0f:80:fd:be:6a:51:
                    37:de:12:82:df:e0:59:5c:6d:51:3c:fd:a7:1f:84:
                    67:68:38:87:20:65:f9:c4:58:4b:e3:49:ab:0c:b4:
                    f8:f5:08:3d:cc:5d:ef:c2:9e:ab:80:32:78:45:b0:
                    b0:3d:90:61:3b:dc:e9:89:83:21:9d:c1:de:db:09:
                    71:66:9f:7a:c6:f9:c4:51:75:58:8e:5e:0d:bb:92:
                    e5:7b:ca:43:21:8f:36:ac:1e:61:ab:30:4c:50:ba:
                    50:c8:70:30:f6:26:db:ff:a1:14:8f:82:bd:53:ee:
                    ea:41:c4:3d:67:44:6c:3f:0d:e8:f5:05:01:49:a9:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A3:9C:FE:42:B3:75:D2:BF:DA:4A:75:29:C0:60:A8:67:88:97:46
            X509v3 Authority Key Identifier:
                keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:b7:60:1e:99:40:49:a8:87:43:29:29:4c:e8:b0:55:11:
         5a:bc:dd:a8:90:e5:d7:33:5d:7b:d3:5f:cd:08:95:ed:34:d7:
         81:b1:f9:64:06:bd:7a:88:c5:ce:34:de:4b:5b:fb:30:e5:7e:
         53:50:a6:7d:ac:db:a4:f0:2c:f2:69:81:5b:bf:a2:70:5f:49:
         1d:5f:04:f2:55:67:38:8d:7a:06:62:dd:1a:05:7a:e6:2f:ae:
         ed:52:2b:60:33:e3:e8:fd:0f:92:6c:b8:c9:90:65:46:5a:b6:
         92:bd:5c:0f:af:03:35:e1:13:b5:90:5b:30:de:6e:05:f4:f1:
         ca:5a:c1:d3:13:cc:a9:88:c0:3a:e3:38:90:0c:42:64:45:b2:
         18:d8:25:22:3e:78:5c:ec:04:4d:45:b4:2a:b3:77:93:1c:65:
         f7:c3:2a:6b:1c:1e:c7:bc:62:cc:1f:a4:4a:19:f9:bf:1a:e6:
         dc:05:d2:59:89:10:ad:c4:db:5d:66:72:31:4c:cd:f3:40:d3:
         39:ee:7c:d6:66:51:89:0d:c8:6f:6e:01:70:2d:bc:45:a5:61:
         f5:2a:c8:ad:ca:91:04:a7:52:39:25:7d:19:7d:84:91:09:39:
         cf:25:46:db:fd:1d:02:7d:f4:72:67:de:9f:64:65:80:90:ca:
         10:c4:08:b2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFk2cigutlElzIWAPLyI2dNXMAmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjA1MTMwMzAwNTRaFw0yNjA1MTQwNjAxNTRaMDMxMTAvBgNV
BAMTKEQ4QTM5Q0ZFNDJCMzc1RDJCRkRBNEE3NTI5QzA2MEE4Njc4ODk3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQoIMSCAYFN+8EJvfS2/ptXkh
AFhYs8JIRi5ALeOz4rxn3MYPhXlCUsasjagzeCUap58crrishcjr+Pjz9phMxNAA
+8o9+Irau0xeeVyZ4esJqdHF9bBokoM4MOwaHiqU5WH01YEmQIP7zha+kLgaxnom
uoPKlTnFY3ywhUOJDw+A/b5qUTfeEoLf4FlcbVE8/acfhGdoOIcgZfnEWEvjSasM
tPj1CD3MXe/CnquAMnhFsLA9kGE73OmJgyGdwd7bCXFmn3rG+cRRdViOXg27kuV7
ykMhjzasHmGrMExQulDIcDD2Jtv/oRSPgr1T7upBxD1nRGw/Dej1BQFJqZJDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2KOc/kKzddK/2kp1KcBgqGeIl0YwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6K3YB6ZQEmo
h0MpKUzosFURWrzdqJDl1zNde9NfzQiV7TTXgbH5ZAa9eojFzjTeS1v7MOV+U1Cm
fazbpPAs8mmBW7+icF9JHV8E8lVnOI16BmLdGgV65i+u7VIrYDPj6P0Pkmy4yZBl
Rlq2kr1cD68DNeETtZBbMN5uBfTxylrB0xPMqYjAOuM4kAxCZEWyGNglIj54XOwE
TUW0KrN3kxxl98Mqaxwex7xizB+kShn5vxrm3AXSWYkQrcTbXWZyMUzN80DTOe58
1mZRiQ3Ib24BcC28RaVh9SrIrcqRBKdSOSV9GX2EkQk5zyVG2/0dAn30cmfen2Rl
gJDKEMQIsg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:16:38 2026 by rpki-client