Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
File:                     AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft (raw, json)
Hash identifier:          Vq9coHNj7UEiCqM0Wj4wVz925G9q7fJ82/YlzIdO33o=
Subject key identifier:   85:C8:43:02:D3:FA:76:96:D0:28:7A:5E:BF:86:3F:89:48:57:35:BC
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       62F25950DB8DC400ABC808AFB39307E2637D0E2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
Manifest number:          1D
Signing time:             Tue 12 May 2026 05:10:24 +0000
Manifest this update:     Tue 12 May 2026 05:05:24 +0000
Manifest next update:     Wed 13 May 2026 08:18:24 +0000
Files and hashes:         1: 3232312e3133332e3234352e302f32342d3234203d3e2034383132.roa (hash: E8J6ehCAVQBTTL4nluJ8TryKPdaQtCV6x7AzifZmEoU=)
                          2: 3131362e36362e302e302f31392d3139203d3e2030.roa (hash: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=)
                          3: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (hash: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY=)
                          4: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (hash: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=)
                          5: 3131362e36362e36342e302f31392d3139203d3e2030.roa (hash: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=)
                          6: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (hash: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=)
                          7: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (hash: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=)
                          8: 3131362e36362e39362e302f32302d3230203d3e2030.roa (hash: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=)
                          9: 3232312e3133332e3232382e302f32332d3233203d3e2034383132.roa (hash: Y1HiM+KumJNDeDYPLakmSQoLeW7lH5fsmPDT4ZzwnTw=)
                          10: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (hash: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=)
                          11: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (hash: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4=)
                          12: 3232312e3133332e3232342e302f32302d3230203d3e2030.roa (hash: nHvu/7uCsbClyS8g05j2ZhgLdmx83hkxQxwIo964IPY=)
                          13: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (hash: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=)
                          14: 3131362e36362e33322e302f32302d3230203d3e2030.roa (hash: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=)
                          15: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl (hash: dlZOHqI3vOeBXbti3MLt7cpn7LsRzh7r/TjhK4YGw9o=)
                          16: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (hash: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI=)
                          17: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (hash: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f2:59:50:db:8d:c4:00:ab:c8:08:af:b3:93:07:e2:63:7d:0e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: May 12 05:05:24 2026 GMT
            Not After : May 13 08:18:24 2026 GMT
        Subject: CN=85C84302D3FA7696D0287A5EBF863F89485735BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:25:24:b8:18:99:25:eb:de:64:40:49:f5:
                    1d:31:3f:88:0b:52:07:ab:1e:19:82:4f:c8:69:76:
                    0e:f9:7d:81:c7:da:b8:69:ca:6d:4d:f9:52:1b:10:
                    6a:8e:70:85:0a:d5:a0:81:c3:d7:2b:4d:04:58:e0:
                    43:71:c6:aa:7f:7b:f0:01:65:e9:ab:c8:ad:45:dd:
                    e0:5d:8f:13:81:f4:43:7c:b0:2f:f7:91:6c:9f:0b:
                    83:78:2f:54:ad:91:73:23:e5:00:42:9e:8e:d1:69:
                    ee:f6:d4:3f:50:76:2a:44:cc:4e:58:65:d6:25:89:
                    55:bf:fc:db:79:a9:1b:81:34:ac:0c:27:88:93:14:
                    f6:7f:44:a2:09:ce:f7:94:4c:fc:08:ff:c4:98:c4:
                    f3:51:cc:03:fd:7e:54:c9:a5:39:e7:d1:76:29:4f:
                    b3:ba:72:e4:4c:c2:4d:b4:0c:d4:08:4f:af:6f:8a:
                    7e:aa:88:6b:16:e6:ad:eb:44:c5:b5:31:61:bb:23:
                    23:2b:ec:f4:62:f0:18:a4:fc:c6:a6:94:2d:da:ae:
                    08:d1:53:6b:47:83:31:4e:c6:d9:9f:a1:5a:4f:04:
                    69:f8:4e:d5:1b:8d:99:19:ea:ba:9f:bc:37:f5:12:
                    65:b4:36:db:69:95:89:27:f8:46:51:1d:0f:1e:f6:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:43:02:D3:FA:76:96:D0:28:7A:5E:BF:86:3F:89:48:57:35:BC
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:27:dc:ba:8d:3e:77:fd:26:26:3a:3f:12:c4:fa:76:1a:82:
         53:80:67:a0:72:7d:ea:00:2e:c8:33:79:0b:f0:49:45:fb:3c:
         5b:7c:19:8b:64:ff:ce:f7:e5:9e:6c:0e:06:72:69:45:32:5c:
         4f:e3:39:24:78:4b:4b:81:10:b7:d5:3d:ff:5c:a0:a8:54:ee:
         f7:14:9d:63:8e:85:64:ca:28:cb:d4:18:f6:38:69:fb:36:6f:
         c2:d4:27:fd:c2:04:33:27:79:f4:ba:df:13:a0:63:94:12:4f:
         8a:d2:38:36:4a:fb:09:44:9c:c5:95:2d:45:70:b2:f6:ae:b7:
         60:80:d6:4e:88:a3:70:2d:b1:4c:cd:67:25:7c:b1:bf:cf:f7:
         90:59:c0:76:ab:d5:11:8f:7b:20:72:73:ac:e3:4b:73:2c:72:
         75:3d:11:ab:01:08:50:7a:4a:d0:7d:c1:99:cf:75:e8:57:d4:
         cb:83:a1:9c:8c:73:a9:9c:e4:2b:1a:0d:01:61:cf:f0:54:f9:
         41:ac:5d:7f:e7:9e:3e:2d:8e:76:b7:b3:ec:98:b9:a1:f2:bc:
         5b:c9:0d:a4:1d:4a:1a:1f:1c:79:59:c1:2a:1f:9c:47:4a:4f:
         77:ae:ff:33:0b:aa:4a:4b:bd:af:01:17:66:f6:cd:52:dd:b8:
         fb:d6:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:45 2026 by rpki-client