Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
File:                     6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json)
Hash identifier:          P4w1dsbrTf48idUcUAYU3HPy03qO7WlQFV8JUtfaWqI=
Subject key identifier:   D8:0D:DF:C7:8C:B1:B9:CB:21:4C:77:1B:86:93:14:57:D3:36:C3:14
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       0BCA642A4C852F1DF0CD3A956A003DF1010D792C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
Manifest number:          82
Signing time:             Mon 27 Apr 2026 06:23:41 +0000
Manifest this update:     Mon 27 Apr 2026 06:18:41 +0000
Manifest next update:     Tue 28 Apr 2026 10:19:41 +0000
Files and hashes:         1: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=)
                          2: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=)
                          3: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=)
                          4: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=)
                          5: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: r0oUPf2LXL1mwp4iE2wWtAMk8VSd/skmATMZ/HojIpc=)
                          6: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=)
                          7: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=)
                          8: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=)
                          9: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ca:64:2a:4c:85:2f:1d:f0:cd:3a:95:6a:00:3d:f1:01:0d:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Apr 27 06:18:41 2026 GMT
            Not After : Apr 28 10:19:41 2026 GMT
        Subject: CN=D80DDFC78CB1B9CB214C771B86931457D336C314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:71:6a:4f:ba:65:54:50:90:ba:97:2c:e8:
                    2c:5a:44:53:b9:11:70:63:73:81:86:e9:42:47:cc:
                    36:c2:71:04:c6:48:0c:b2:e5:28:4c:ec:16:24:2b:
                    8f:35:5f:8e:b1:29:cd:8b:8c:93:35:61:1a:53:a5:
                    ce:31:c4:45:d0:c6:f0:a8:6e:02:37:1c:d1:d3:6b:
                    59:71:91:d8:a7:56:d7:54:3b:60:f7:62:d5:3e:ed:
                    96:fc:8f:84:68:06:ab:f3:ae:ec:9e:fb:6f:8f:2d:
                    00:60:b7:1c:b8:9d:be:24:e9:90:5d:d7:85:10:de:
                    07:1b:8c:0f:f7:25:b3:75:af:a6:2b:62:12:00:76:
                    aa:0f:7e:4a:ed:c9:3b:2a:23:0e:9b:35:6a:60:45:
                    57:44:f2:a6:57:82:53:92:88:ac:91:84:23:e2:b8:
                    7c:4c:c3:ae:ac:a1:d9:87:43:eb:7c:fe:09:cd:a5:
                    16:ab:e5:e4:8d:cc:34:80:80:b7:5f:0e:40:c3:61:
                    ad:5b:87:d9:34:b1:c2:f4:c1:c1:08:b3:6f:a3:a5:
                    6b:19:56:ae:78:8b:5b:d2:23:fb:d1:2c:af:88:a7:
                    9f:af:43:d0:d6:70:dd:0a:3b:c1:41:f8:6b:69:21:
                    89:f2:de:ed:4d:b7:5e:5b:07:dd:ea:f9:fa:0b:dd:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0D:DF:C7:8C:B1:B9:CB:21:4C:77:1B:86:93:14:57:D3:36:C3:14
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:c5:69:8e:f7:8b:99:e4:b9:3d:39:5a:08:46:3e:0f:88:
         97:a4:b4:0f:92:2c:af:52:02:a9:ac:8e:0c:4b:dc:58:0d:b7:
         5a:3f:24:67:95:d7:0b:2c:26:a5:6d:fc:d9:81:36:a5:74:18:
         4a:38:df:b7:45:db:77:33:4e:86:69:f5:c4:f4:eb:d1:02:ee:
         5e:df:02:6a:df:26:d2:eb:e0:b6:4c:b8:3b:a4:b6:40:3d:d8:
         a3:68:39:a6:8f:32:c7:e2:2e:ba:06:63:bf:9b:72:9c:7c:c0:
         13:2b:b7:e3:f5:6e:ab:76:79:b3:1e:4e:de:02:b0:83:8c:3b:
         03:4d:16:cf:54:f3:50:7e:53:9b:b0:72:11:f4:18:6a:cc:77:
         80:3c:68:cf:87:6b:68:70:43:98:8e:04:e7:69:bd:47:24:93:
         0a:16:db:e5:6c:e8:46:99:5c:9a:88:62:c7:79:b2:f0:e6:20:
         e1:68:ce:eb:79:8e:79:1c:89:d9:e9:48:de:87:07:fb:82:44:
         f7:dc:54:1d:57:eb:43:90:0b:a8:83:52:38:17:1f:88:62:ae:
         e5:f2:95:db:eb:ec:7e:cd:0f:9b:ea:aa:ef:14:63:3a:be:76:
         01:29:17:69:20:da:9f:30:3b:36:15:83:61:b4:21:ab:c2:20:
         95:7a:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:48 2026 by rpki-client