Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
File:                     6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json)
Hash identifier:          JHJGz9oqVHmaOcOpMK6N7HBqcA87D8G8dVajVHytNPY=
Subject key identifier:   68:29:DF:24:F3:84:24:75:87:36:84:93:7E:46:83:22:88:8F:AB:A4
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       5D29246FDA4166166449119ECB29792234B1D1B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
Manifest number:          29
Signing time:             Wed 13 May 2026 08:01:02 +0000
Manifest this update:     Wed 13 May 2026 07:56:02 +0000
Manifest next update:     Thu 14 May 2026 08:02:02 +0000
Files and hashes:         1: 3132312e34362e3235312e302f32342d3234203d3e2034383131.roa (hash: wRj2VcGqF83HOgkXpso91G8BmGLTATNaFM8r75p6m9c=)
                          2: 3132312e34362e3234392e302f32342d3234203d3e2034383131.roa (hash: cmvIW4sXtGEpVBV8idr95fS3oeQBOCkjgxn412lwIng=)
                          3: 3132312e34362e3233352e302f32342d3234203d3e2034383131.roa (hash: mJAl+LwwvXOwdBQoGHrfrqfj6m3rDD+aqn7fMRg2QmI=)
                          4: 3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (hash: TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=)
                          5: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=)
                          6: 34352e3132342e3132342e302f32322d3232203d3e2034383132.roa (hash: CXEpAmsvqUr2yoEBoF7EcLtMxD3Q11yE8kM6MZ+Yois=)
                          7: 3132312e34362e3232342e302f32322d3232203d3e2034383132.roa (hash: yKAHVIn3NJVUHJeWRyBNQvW/+Ho4lCgMnLH+ppAs5Js=)
                          8: 32372e3130392e3132342e302f32322d3232203d3e2034383131.roa (hash: rYu/eBQM4h8/XihKL8IwRwGboqy1k9QH6j6PxhBjm+I=)
                          9: 3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (hash: EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=)
                          10: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: KYBSPpAAuXoUvPvJELW+0pLTuAqrMzyI9sA5sPHKSdo=)
                          11: 3132312e34362e3235342e302f32342d3234203d3e2034383131.roa (hash: 3pXA4qKU3vp45gTirzMkKrU8Zk4wL0OLas0e2KqoDHA=)
                          12: 3132312e34362e3233372e302f32342d3234203d3e2034383131.roa (hash: 5Ea7CEt1wZxAZnI6KN8ov4WmZLGvDEjxqq46jr+KFXY=)
                          13: 3132312e34362e3234342e302f32342d3234203d3e2034383131.roa (hash: WKUTb3+nU8Q8MVc6zgKN74/b/hNERmvdsnThxBvo2+0=)
                          14: 3132312e34362e3234352e302f32342d3234203d3e2034383131.roa (hash: K2+E96TOB123eDmds7ch4nsFIxsPGZkKGQ6NOjteGKo=)
                          15: 3132312e34362e3233322e302f32332d3233203d3e2034383131.roa (hash: ya78O7sAuJyhGsU6/IknufRy2nAzwBu9UN31pB+KKU4=)
                          16: 3132312e34362e3233392e302f32342d3234203d3e2034383131.roa (hash: caHxbqdTaK/FENayyJGGA0UrdY4LzN4IKHKwr6s7HqI=)
                          17: 3132312e34362e3233382e302f32342d3234203d3e2034383131.roa (hash: lreg6XU0+Tzz4w970jTicRygNZq0vFs5IE++gRHl1AU=)
                          18: 3132312e34362e3233362e302f32342d3234203d3e2034383131.roa (hash: aOL2twD5oXm+ZXFKGnkUGShNfSgPt+QKt3iWK0pV7Ro=)
                          19: 3132312e34362e3235302e302f32342d3234203d3e2034383131.roa (hash: 3NXFOW+JxLSqSLZN+FPKsUDOS5JMhZ+sra5cXJvMIzU=)
                          20: 3132312e34362e3235332e302f32342d3234203d3e2034383131.roa (hash: h5S/8OMiNh1ekmL5NK6fWlNsK0E9t/53SO5cpRd3yug=)
                          21: 3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (hash: rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=)
                          22: 3130332e32382e3231322e302f32322d3232203d3e2034383131.roa (hash: qc620Oxlzt7dIVpTjlxhUtMjAuP4sggvYYhOIp/BQvg=)
                          23: 3132312e34362e3234362e302f32342d3234203d3e2034383131.roa (hash: UdhPDpYX1v0Mwbch7R6+oi4dEsD74pACn2DpgqSxhjs=)
                          24: 3132312e34362e3235322e302f32342d3234203d3e2034383131.roa (hash: cxwtN8rgMwMkJebqJNIyJvCO710JkpyekZUx7VMA6FU=)
                          25: 3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (hash: BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=)
                          26: 3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (hash: /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:29:24:6f:da:41:66:16:64:49:11:9e:cb:29:79:22:34:b1:d1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: May 13 07:56:02 2026 GMT
            Not After : May 14 08:02:02 2026 GMT
        Subject: CN=6829DF24F3842475873684937E468322888FABA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:67:75:6e:77:70:ac:54:89:e8:91:3f:0c:
                    d9:b8:ae:a3:5e:f6:da:53:89:29:95:58:55:ba:3f:
                    90:8b:70:83:a9:86:1e:da:8b:54:60:c7:6b:c9:57:
                    8f:c7:95:f8:13:44:ba:dc:88:6d:8d:e0:59:2e:6a:
                    9e:e1:6b:86:4b:fe:18:d8:91:a3:52:ec:9d:89:05:
                    f1:9b:be:76:1d:f4:e1:52:43:57:fd:e9:0d:b1:1a:
                    33:ae:e1:21:a2:30:45:00:32:90:2c:09:62:ba:f6:
                    dd:91:a0:85:c2:66:03:51:cf:53:fa:2f:62:ab:1a:
                    e7:61:e2:bb:9d:7a:7a:60:c3:7d:a3:ae:df:1d:ba:
                    23:34:e4:df:82:16:31:c9:1a:d9:93:4a:43:33:e0:
                    85:f7:8e:f7:27:fb:82:55:bf:e2:f2:47:b6:b6:4f:
                    f3:1a:fd:88:52:32:fd:80:26:57:35:7f:4b:fb:f4:
                    e7:04:75:20:3f:4a:7d:81:d5:50:20:ba:d2:ec:07:
                    33:3e:8c:83:7a:76:e1:44:41:d7:cf:cf:4f:4f:2f:
                    87:6f:13:a8:1c:09:7c:f1:5c:2f:9d:7b:73:29:bf:
                    6c:04:b2:35:92:4c:81:43:99:c6:34:ac:2f:96:b7:
                    7d:57:4d:fe:1f:8d:47:ff:45:91:d2:a4:ff:db:65:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:29:DF:24:F3:84:24:75:87:36:84:93:7E:46:83:22:88:8F:AB:A4
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:39:b6:e8:5f:c9:fe:f6:71:a5:ec:cb:91:f8:e2:34:d9:15:
         12:88:2a:23:42:a2:c3:24:4c:1f:ec:a7:08:e9:49:95:67:f4:
         45:dc:41:3f:d4:21:59:2b:07:5e:c5:e7:00:a8:db:3b:d7:4c:
         34:51:7f:d1:c7:4c:bc:4f:04:c7:81:75:e0:5c:c0:c5:31:cf:
         f7:b9:99:06:ca:23:59:91:89:e2:e4:f3:24:4b:5d:07:18:b5:
         e9:88:36:5d:92:fe:ca:62:33:61:e4:a5:46:68:2a:83:c3:69:
         25:bc:09:61:76:00:5f:34:f8:35:d8:a4:2b:7d:b8:70:c7:8b:
         7d:58:c1:94:e5:fb:d8:80:ea:a8:b7:e5:1a:ad:00:85:71:fc:
         15:62:a1:7e:0f:e5:75:08:d5:60:c8:36:d5:72:eb:8a:55:94:
         05:bf:d8:2d:8a:1b:ec:8f:b3:a9:31:e3:77:59:6c:90:66:06:
         64:91:9f:a8:47:96:77:12:89:b6:dc:59:22:ca:61:a4:4d:30:
         83:ed:06:89:e4:48:72:96:4d:5b:ef:8d:fa:18:57:62:7c:f9:
         73:59:07:7f:11:a6:aa:a4:15:f0:06:a6:34:0e:f6:f8:85:00:
         a8:74:15:85:ca:93:a5:be:2d:7a:e0:86:dd:2d:61:dc:22:60:
         c4:0f:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:47 2026 by rpki-client