Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
File:                     A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json)
Hash identifier:          bWTgAgBYM+aag/Q7uEzNjPloxixISXk5/hHBM7yFAK0=
Subject key identifier:   6D:E8:A9:E5:D4:4A:E8:E2:3F:D7:F2:26:3E:52:6C:79:20:44:00:7F
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       7AFB70F07AF50B71F130EDEE383CDE9185251A88
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
Manifest number:          E1
Signing time:             Fri 29 May 2026 14:17:55 +0000
Manifest this update:     Fri 29 May 2026 14:12:55 +0000
Manifest next update:     Sat 30 May 2026 15:10:55 +0000
Files and hashes:         1: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=)
                          2: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=)
                          3: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=)
                          4: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=)
                          5: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=)
                          6: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=)
                          7: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=)
                          8: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=)
                          9: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=)
                          10: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: jCGVMR6Q4M0kir9EEdQ3Ncbc/sT4W3izcJmFwFO99SY=)
                          11: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=)
                          12: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=)
                          13: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=)
                          14: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:70:f0:7a:f5:0b:71:f1:30:ed:ee:38:3c:de:91:85:25:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: May 29 14:12:55 2026 GMT
            Not After : May 30 15:10:55 2026 GMT
        Subject: CN=6DE8A9E5D44AE8E23FD7F2263E526C792044007F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:9f:6f:b9:93:24:4a:ba:a9:29:be:73:8e:
                    cd:c1:06:32:3a:45:c8:3b:eb:23:88:7f:e7:16:f2:
                    3f:c1:71:f3:0e:5f:06:bf:84:a4:6f:41:db:a4:72:
                    1d:b8:ff:f3:26:46:df:0e:f5:d7:7f:39:77:8f:ed:
                    16:d1:f3:a4:78:69:b7:9b:83:66:e6:e4:64:c8:9a:
                    6a:97:f2:57:3c:0c:69:35:08:21:b9:07:ff:7f:41:
                    28:06:15:d3:a7:5e:84:c6:d7:9a:b8:af:93:02:a5:
                    9a:03:11:e7:ca:61:23:86:a2:5a:f0:83:25:8a:a7:
                    64:ae:3c:7c:1e:06:c4:ec:e0:d9:ee:1d:20:6d:27:
                    b3:97:01:c7:00:54:d3:2f:12:9f:93:54:e9:21:bd:
                    ac:4b:b1:e9:b4:52:c0:35:60:bf:a7:16:1a:a9:9f:
                    4c:60:55:c0:6a:01:1a:e2:ab:90:fd:20:ff:46:39:
                    e0:a0:11:33:fb:32:67:ba:97:5c:6a:08:3b:20:ae:
                    00:7a:c6:e4:98:cf:fa:b0:3e:50:10:1a:88:50:e0:
                    75:fd:dc:f0:6b:fa:0a:4e:0a:ff:9c:73:45:19:36:
                    e0:81:67:8e:09:c1:8e:4a:e4:37:c6:2f:d1:68:1d:
                    80:45:16:17:6a:df:75:7c:e7:35:d3:15:47:ce:01:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E8:A9:E5:D4:4A:E8:E2:3F:D7:F2:26:3E:52:6C:79:20:44:00:7F
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:cf:b7:a8:89:9d:5d:83:8f:f5:b8:2d:10:8a:2f:a4:70:
         28:02:d8:ef:26:bb:b7:fb:47:24:b8:56:9f:6f:c2:7e:93:eb:
         d6:32:28:56:01:a2:86:28:07:b4:27:88:38:ad:5e:08:65:a0:
         31:e0:29:1b:64:3b:61:92:7a:9e:95:89:8b:b1:84:a5:7c:ef:
         91:00:ed:bb:a7:e7:c1:cf:16:b7:2b:21:2e:0e:bf:01:1f:1d:
         19:4a:56:26:9b:93:fc:3f:0a:78:d7:51:80:0c:d0:20:c6:98:
         3d:fd:ec:79:5b:1c:49:c0:34:5c:22:53:ab:3d:5b:c5:67:a0:
         1f:d6:26:b2:e0:89:5b:29:59:e3:63:30:fe:b0:2d:93:c3:6c:
         73:bd:6e:fb:2a:ae:c8:fe:74:f5:37:8d:a7:75:05:fd:47:ba:
         98:2f:a9:1a:bd:49:a4:6b:49:26:36:d5:cb:a8:2a:41:85:01:
         fb:fe:b8:eb:dd:91:68:10:60:65:28:1a:36:bf:3e:f1:0d:75:
         e2:4f:0d:cb:c8:0e:6b:d5:8a:c3:15:84:14:32:97:18:c2:80:
         a3:50:c0:a0:84:32:27:14:87:f9:63:d2:74:ad:9d:88:45:3e:
         6e:e0:b9:dc:9e:b3:3c:bf:f0:20:7a:b5:76:aa:4b:72:2a:44:
         6f:6a:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:50 2026 by rpki-client