Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
File:                     6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft (raw, json)
Hash identifier:          rfkN9kjU/RRKiM8qPeOkYPHA6eVguuzea267hJb2R2s=
Subject key identifier:   F2:E8:B6:DE:E6:CF:22:BE:C9:13:4F:06:6C:B1:17:28:47:D9:AF:C3
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       24F30301408411922BB2C33E2D51BA87E834E162
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
Manifest number:          2A
Signing time:             Wed 13 May 2026 01:53:28 +0000
Manifest this update:     Wed 13 May 2026 01:48:28 +0000
Manifest next update:     Thu 14 May 2026 04:01:28 +0000
Files and hashes:         1: 34322e36322e38352e302f32342d3234203d3e2034383038.roa (hash: d6s6STG5xAhM+Q03cuASnNG/lEicPG7doEKUy6uuw0A=)
                          2: 34322e36322e302e302f32312d3231203d3e203233373234.roa (hash: lBGsBAewsxptaODp2y7ZM47gOj5BjTjZx+tz5uMV0yY=)
                          3: 6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl (hash: YTf5P9RGwLjS0wJeWKWur4QV29o+8Hs9SBgUEaL9Fro=)
                          4: 3132352e3235342e3136382e302f32312d3231203d3e2039383038.roa (hash: jIBaOQf/G7rNS/DVWjE6H4dhEL1mXI4wvD13/gtpmAU=)
                          5: 34322e36322e332e302f32342d3234203d3e2034383038.roa (hash: jEyZcujH1QL1hLT4TmAdROjtQhT4W+m9Sxd5UgGb68s=)
                          6: 34322e36322e34382e302f32302d3230203d3e2039383038.roa (hash: 6QDbx2KjRpz8KPX6rRbAHTFqhAQbtXxyfAjUQWLilWE=)
                          7: 34322e36322e33322e302f32312d3231203d3e2039383038.roa (hash: yQx/mYuVkSoCaiWuA20eaqop82i+JViDE/hLHSp2Frk=)
                          8: 3132352e3235342e3137362e302f32312d3231203d3e203233373234.roa (hash: ZSgRpA/5spQ7+nn24xwWT1dkpORgmEl9Tobd39U1oL4=)
                          9: 34322e36322e39332e302f32342d3234203d3e2034383038.roa (hash: uxBI9K/066b15ycUoFdjxRmXfDk6KJQDbm8b5kUa/e0=)
                          10: 3132352e3235342e3136382e302f32312d3231203d3e203233373234.roa (hash: gj+UmcoP7t9OxmOHfB+/nZrnXWANKJKXP2VI5gBrjmM=)
                          11: 34322e36322e302e302f32312d3231203d3e2039383038.roa (hash: EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=)
                          12: 34322e36322e34382e302f32302d3230203d3e203233373234.roa (hash: T5P+TWlJuodb3Cv9T3YIhLPy23PjFvvDhtdwPZHDWrw=)
                          13: 3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa (hash: FFsVQX7YMz+Uh7zFfyThQ8wwzvkbi+7ZqBOYGNl3RHc=)
                          14: 34322e36322e33322e302f32312d3231203d3e203233373234.roa (hash: 5fV6EvkK9HY5cJ6QMdi44kgDLBAOMwIObTFqRz2Ou6U=)
                          15: 3132352e3235342e3137362e302f32312d3231203d3e2039383038.roa (hash: lUeK8xpVipC5mFV8styuczLSL00UPEUPbJqAx4qGge8=)
                          16: 34322e36322e38322e302f32342d3234203d3e2034383038.roa (hash: yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f3:03:01:40:84:11:92:2b:b2:c3:3e:2d:51:ba:87:e8:34:e1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: May 13 01:48:28 2026 GMT
            Not After : May 14 04:01:28 2026 GMT
        Subject: CN=F2E8B6DEE6CF22BEC9134F066CB1172847D9AFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:4e:7e:43:b1:15:8a:3d:50:b2:50:c8:76:
                    e1:03:1b:a0:bf:e8:f1:44:21:c6:28:fb:66:e2:d1:
                    76:0a:5c:0f:e6:7a:3b:05:5e:66:d0:86:ad:7f:d1:
                    7a:c1:12:da:91:b4:ac:e4:56:c5:8a:82:f7:d3:9b:
                    ec:01:62:28:9b:82:52:5e:1d:70:d1:eb:84:3a:c5:
                    80:4f:d5:70:84:5c:4a:b4:71:0a:76:a7:35:68:d3:
                    81:58:f1:10:45:f1:5d:58:dd:66:5d:b1:70:30:39:
                    0d:d4:ec:14:45:4b:1e:03:f9:2d:45:9d:38:9b:78:
                    17:7b:ad:a9:6a:13:7b:a3:c4:39:2d:d2:8a:47:07:
                    9e:de:93:cd:db:0c:5d:cb:d8:cb:e0:fe:be:2c:c6:
                    1b:c9:7a:05:4b:20:88:e3:ca:af:b8:d9:8b:a7:f7:
                    c7:f8:de:91:bd:ac:ce:c3:23:29:a7:61:05:5a:62:
                    2d:1f:08:99:5e:9c:11:fd:7e:52:54:c8:4a:26:a8:
                    f0:d3:51:6f:6b:c8:18:df:af:04:6d:8b:fa:72:66:
                    50:f3:2a:4f:4c:cd:4a:db:e3:1a:f3:04:7d:b9:34:
                    ef:ae:ed:d9:b4:e7:07:99:34:86:91:9e:f5:52:3a:
                    6f:a9:02:f4:75:b8:97:b1:df:1f:a5:cc:f3:9c:36:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E8:B6:DE:E6:CF:22:BE:C9:13:4F:06:6C:B1:17:28:47:D9:AF:C3
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:4b:16:1e:3f:fa:52:f5:43:24:39:1a:89:3d:f9:79:01:
         78:36:5c:27:cb:dd:22:18:7c:99:86:53:f4:b2:89:b5:80:9a:
         76:ad:f4:da:31:da:15:69:d5:0c:a6:2b:c5:1f:17:fa:d2:63:
         47:06:6e:66:05:51:ad:4b:b4:fd:af:3b:77:a8:72:d4:f1:e7:
         3b:4d:82:e0:a2:99:cd:5a:08:e0:ee:b8:7f:4b:d4:53:87:ec:
         be:3c:7d:36:90:24:39:44:08:95:9f:e4:c0:3f:74:ed:93:f2:
         37:2c:1e:b1:41:1c:5c:47:e8:a5:0c:37:cb:eb:08:0f:b8:be:
         2a:0a:58:5f:b3:1a:39:98:24:8d:21:f0:99:d1:74:b8:9c:db:
         67:a6:57:5d:25:a9:74:27:f5:15:65:f7:da:b6:f5:1f:68:d7:
         1e:f2:46:33:74:97:52:c1:7d:87:f5:c6:9f:28:ed:96:d5:c5:
         aa:8b:9e:e1:b0:c6:8e:d7:24:47:79:08:bc:92:7e:c7:44:48:
         4f:a2:1c:3d:11:92:33:b0:5f:81:5e:59:27:dc:32:d3:ec:f5:
         46:75:3a:9c:a4:62:d7:63:7d:ef:f4:f7:14:df:76:69:ae:92:
         b8:f7:06:dc:fb:a6:9e:86:ac:fd:39:75:a5:27:fb:8c:bc:2b:
         ac:3c:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:05 2026 by rpki-client