Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          gL99uTOOJhInRqylZEXrEDjGZaR0qttcOU34osdn4V0=
Subject key identifier:   1C:38:8B:2F:98:D6:0D:E3:C7:D4:6C:60:28:9F:96:13:29:51:57:33
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       6A5E6FF91F7FAEED626F33E42D5B0BDEC7D9711D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          BE
Signing time:             Wed 13 May 2026 02:05:52 +0000
Manifest this update:     Wed 13 May 2026 02:00:52 +0000
Manifest next update:     Thu 14 May 2026 03:14:52 +0000
Files and hashes:         1: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          2: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          3: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          4: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          5: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          6: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          7: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          8: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          9: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          10: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: 8m7VkiueCtHaPQ4dRi7TSkA5b28GWaiodsQxrw9Wzss=)
                          11: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          12: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          13: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5e:6f:f9:1f:7f:ae:ed:62:6f:33:e4:2d:5b:0b:de:c7:d9:71:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: May 13 02:00:52 2026 GMT
            Not After : May 14 03:14:52 2026 GMT
        Subject: CN=1C388B2F98D60DE3C7D46C60289F961329515733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:4b:61:97:e3:bf:55:2b:ef:2e:ab:5f:02:
                    ce:e4:7a:b4:2a:41:91:eb:c0:88:f0:34:7c:e4:1e:
                    35:b2:7b:16:da:ad:8e:09:11:6c:17:41:67:04:56:
                    d6:a1:24:0f:06:7c:a9:e7:02:fa:c7:94:88:4c:23:
                    79:6b:fe:ff:73:3a:99:73:fe:32:e9:aa:ea:f2:08:
                    90:6d:5a:f5:4d:85:e2:2a:1a:ca:3f:c2:3c:a8:b2:
                    d7:cc:b6:9a:b4:0f:15:7c:27:db:7e:8c:12:9a:c4:
                    c4:1f:da:1f:3a:c2:aa:e0:ce:15:60:56:75:5b:e3:
                    29:3a:17:ae:92:35:88:cf:76:ab:da:c9:5e:e8:bf:
                    3e:c0:74:46:e6:30:b2:e1:61:3a:a3:1c:86:8b:8d:
                    e8:97:00:cc:0e:63:18:86:ed:bb:66:3e:d0:f7:c5:
                    74:81:fb:74:b6:1a:c4:57:b2:90:49:a9:bf:c5:3d:
                    56:7f:58:23:8b:08:9a:a7:28:36:5d:99:e3:a1:14:
                    4c:04:fa:6a:91:51:ad:f6:6a:01:cb:8b:1a:b1:de:
                    7e:6b:68:7c:90:d4:df:d3:fd:29:81:e2:1f:17:08:
                    bc:d5:18:e2:3e:95:83:80:1f:6f:3e:ef:30:58:65:
                    d6:6f:10:ad:75:14:9c:72:12:e8:59:ec:09:fe:ec:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:8B:2F:98:D6:0D:E3:C7:D4:6C:60:28:9F:96:13:29:51:57:33
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:10:21:52:df:96:ab:ed:cb:e7:b3:d4:eb:fd:2c:ad:40:
         a0:61:4b:b2:59:d9:50:09:ad:33:a2:89:49:ef:33:cd:f8:3e:
         44:f0:d1:b5:69:59:b3:b7:40:47:5a:4a:4a:14:2b:bc:fd:ed:
         67:79:20:14:2f:f5:05:98:13:1b:4a:9f:c1:ab:d0:67:86:48:
         ad:ea:07:37:13:fa:0d:78:1b:01:bc:c4:d2:66:51:4d:3e:ce:
         a5:00:40:b2:38:43:4c:bf:d2:33:31:d2:1e:47:ab:00:b6:69:
         b4:f7:6a:a1:63:73:d5:50:14:25:29:bb:27:14:31:9f:07:3c:
         77:e8:79:dd:9d:fa:a0:81:30:04:bc:71:53:db:d1:44:4b:c1:
         52:21:32:81:42:7b:48:0b:7a:53:05:97:e6:1a:f6:60:27:18:
         48:d9:0c:92:16:9e:99:0b:bb:9b:a9:b5:f2:a5:96:72:22:6b:
         8c:92:7b:86:5e:a0:28:dd:81:f2:98:ce:32:d7:a3:a4:92:99:
         cf:db:6f:60:0d:1f:d5:2f:72:8f:9c:19:d0:c5:a4:c1:9d:41:
         de:7f:d0:3b:d7:ad:3f:26:9f:1f:7a:e1:27:be:38:e7:5f:83:
         3a:8c:d8:0d:c7:86:57:98:68:74:de:6d:36:ab:fe:23:06:e3:
         e8:4d:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:50 2026 by rpki-client