Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          LxlL3bs98hgn6yLlARvNCdJyjW7P83EhSkOZ7UINP6I=
Subject key identifier:   2E:2B:39:45:A6:68:F2:19:22:C0:33:AA:5F:79:83:20:EB:1F:61:F3
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       1A3D6B380125F2F9DD0EAD11B3CFA62C6A462233
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          E5
Signing time:             Wed 13 May 2026 03:45:55 +0000
Manifest this update:     Wed 13 May 2026 03:40:55 +0000
Manifest next update:     Thu 14 May 2026 06:52:55 +0000
Files and hashes:         1: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: 4Y0Bn1GHCP+WlYVJWD4D/z011DStgXVvMRvvqymm82g=)
                          2: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          3: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          4: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          5: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          6: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          7: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          8: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          9: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          10: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          11: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          12: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          13: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          14: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          15: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          16: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:6b:38:01:25:f2:f9:dd:0e:ad:11:b3:cf:a6:2c:6a:46:22:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: May 13 03:40:55 2026 GMT
            Not After : May 14 06:52:55 2026 GMT
        Subject: CN=2E2B3945A668F21922C033AA5F798320EB1F61F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:a9:b0:14:6e:4a:12:b7:f6:61:60:21:a3:
                    fa:e6:6f:4c:ea:4c:9d:66:c9:d7:75:be:75:2f:dd:
                    83:e9:34:75:84:da:91:89:3c:26:d4:b6:53:36:3f:
                    46:27:e2:0e:76:fb:b9:79:72:39:18:5d:29:ff:05:
                    83:62:9f:27:7b:7b:a5:02:b9:6e:aa:9e:51:87:44:
                    d1:93:7a:70:7d:71:c1:6d:04:02:2e:9a:03:32:91:
                    40:ea:fd:59:05:61:16:5a:e9:22:c1:50:d4:3b:df:
                    65:a1:24:53:d1:d1:4c:2d:ed:3b:25:88:1c:66:c8:
                    1d:3d:f3:9a:55:cf:eb:43:9a:c5:21:cf:44:8f:7b:
                    8f:0d:99:ff:ac:0a:77:1a:d2:13:b7:a5:56:aa:14:
                    8d:5d:c4:45:e2:51:43:9d:8b:0d:ac:5b:3f:13:80:
                    a3:29:88:3e:d9:d1:ff:f7:8c:5a:79:30:8f:35:81:
                    4d:77:1d:7c:79:57:d3:58:f0:77:3f:a2:6f:4e:43:
                    85:0d:df:61:a0:f2:ea:af:0b:52:0b:26:da:cf:ed:
                    ef:e0:f6:dd:6a:c6:f2:4f:14:73:e2:4b:80:cb:60:
                    ce:c2:3d:52:82:40:5a:06:8f:1f:95:37:b7:27:4a:
                    16:4e:ee:5e:6c:9c:55:3f:94:c9:b5:a4:dd:0a:c8:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2B:39:45:A6:68:F2:19:22:C0:33:AA:5F:79:83:20:EB:1F:61:F3
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:09:11:77:8d:13:3c:aa:dc:55:e8:c0:35:f4:70:2f:2a:f7:
         25:73:bb:ea:3f:8f:0b:19:74:11:07:a3:59:78:01:49:d6:2b:
         37:cc:2f:38:1a:6f:6f:60:08:96:50:cc:8b:7c:20:49:91:8e:
         e7:52:07:8b:8e:c6:86:1d:7f:9c:49:87:3f:e1:aa:1f:45:2b:
         f0:64:b4:35:bd:8f:b8:3d:7f:86:7b:ec:7c:ff:55:42:67:2c:
         99:77:b9:49:27:5f:f0:4a:13:57:be:e7:70:0f:ba:db:dc:47:
         ff:ab:4a:3d:e0:ba:15:c6:ff:ba:22:6c:ea:da:ae:77:5c:96:
         89:1c:28:b3:c2:94:8e:02:13:9f:61:d8:f1:84:da:6b:54:0c:
         8c:76:b3:fb:3a:81:1d:65:62:33:08:d6:be:43:11:52:65:18:
         22:49:0a:45:e0:8c:6f:90:a4:a8:94:8a:15:8a:79:dd:e2:57:
         89:7c:01:75:14:1d:bc:7d:f8:a3:84:91:86:1e:91:f7:f1:bd:
         10:89:7e:8c:6b:81:c3:dd:f6:b1:ef:f8:dd:a1:2e:a1:15:9b:
         d6:f2:4b:2d:45:ce:81:01:ec:92:f5:b5:c7:b0:a0:5b:ab:8d:
         cd:aa:d4:0f:1d:4a:3b:e8:ea:b9:51:f6:36:60:e1:ae:f1:b6:
         4e:8a:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:10:31 2026 by rpki-client