Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
File:                     1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json)
Hash identifier:          07NZYP/hqiivrYBjIOg6vLfWs3LmzJkAfG5wv2uS0+w=
Subject key identifier:   19:B1:D6:55:51:48:54:EA:E9:5E:5C:05:3C:7D:68:7A:8D:81:44:4E
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       25638BB468EB42402D5812D4D53DB3ADCD2D6E42
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
Manifest number:          01A1
Signing time:             Sat 06 Jun 2026 03:41:49 +0000
Manifest this update:     Sat 06 Jun 2026 03:36:49 +0000
Manifest next update:     Sun 07 Jun 2026 04:11:49 +0000
Files and hashes:         1: AS24373.roa (hash: lHZo1qqYvvZtMBDB0UDEySpVRejGte3tz9NgBR7e3to=)
                          2: AS4812.roa (hash: uR8+jvbPWxX/gya7yb2Z9YMAFb2ToXh5oJ8ZtPWHAUc=)
                          3: AS59083.roa (hash: Z100p9HOjk+mF7crq0CZJnUV/XfjIQj7eGvkpYgi6Kk=)
                          4: AS59803.roa (hash: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=)
                          5: AS138527.roa (hash: ONSMAuOvbH7RfIxQwPsXri8s6XRjzCo6/RpUxAMRBBM=)
                          6: AS17621.roa (hash: zRljjb52XHiNdSxfLLqrAwWf7soP3ZXOA6q8cDNDNRw=)
                          7: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=)
                          8: AS0.roa (hash: MGE1I5nLgi2EXKW8NuMkkJLFt6UGuB4YuKT8zQml0/c=)
                          9: AS13444.roa (hash: +X0olCc0xu0SyWwtuBjNMSx1pfUPwP7AiRpJF4RbydU=)
                          10: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=)
                          11: AS394881.roa (hash: uNlkd6JnCXliDu3t+qzOd5BwmcVsibO2dilTIlXUcXQ=)
                          12: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=)
                          13: AS139259.roa (hash: xYaDcFVM2Y/8RZa9QIohRwpFU7DW5BfYeUk92/go1D4=)
                          14: AS25743.roa (hash: 62wm3hjrKSTAMQ4s0HfcJZmR7Dw8rHd9Oq7Gl2Vg8Dw=)
                          15: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: 6+w4/4kNDCstKYCi15H9NQOz4qaUaRg3jA5PbASLCNo=)
                          16: AS4515.roa (hash: OTIETi3MG/xKB3HyilCE0M6KVDY7+mj0yGCzFMfXUnY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:63:8b:b4:68:eb:42:40:2d:58:12:d4:d5:3d:b3:ad:cd:2d:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Jun  6 03:36:49 2026 GMT
            Not After : Jun  7 04:11:49 2026 GMT
        Subject: CN=19B1D655514854EAE95E5C053C7D687A8D81444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:04:93:54:9d:20:3b:47:e9:71:b2:b2:cf:
                    68:81:c2:62:61:66:ae:c1:e1:e0:77:11:90:56:16:
                    aa:51:f0:4c:a1:90:e0:27:86:0a:48:94:f1:06:02:
                    4a:7e:56:c4:c1:99:13:64:ed:b4:65:10:3c:5e:6f:
                    7c:53:33:66:1e:5c:1a:1d:47:0c:a9:ef:94:ef:8b:
                    cc:c1:9a:25:be:58:ad:5d:62:51:c3:7e:53:5a:2a:
                    2e:68:16:75:b4:34:3e:fa:97:9a:f1:3c:ef:3c:ae:
                    db:60:4c:70:0d:7a:62:8e:11:86:75:d6:d2:89:a6:
                    35:94:48:4f:ac:97:20:b4:52:bb:6d:13:ad:04:5d:
                    f2:2a:47:ef:9f:35:c4:ce:66:c6:91:0f:50:05:18:
                    d5:85:9f:35:b0:04:d0:b0:62:c3:79:c5:d6:e7:6a:
                    55:02:b3:34:e4:6e:0e:4b:a8:d2:c7:46:a5:c0:cb:
                    47:09:fa:fa:f4:2c:3d:4c:88:09:29:1e:6c:17:0b:
                    fd:ad:a9:6b:1c:9e:6b:aa:10:be:3a:09:76:40:6e:
                    07:b3:3f:2c:2f:31:ac:3b:91:bf:ce:0c:ed:b2:96:
                    94:c3:43:c4:29:aa:8f:9c:16:ef:df:79:d4:dd:84:
                    01:ad:00:ee:0b:71:8a:56:28:c6:c0:d7:05:a1:77:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:D6:55:51:48:54:EA:E9:5E:5C:05:3C:7D:68:7A:8D:81:44:4E
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:17:4a:14:5c:50:55:93:b8:03:d4:14:27:31:19:61:8c:
         ac:29:e5:9c:98:57:0c:86:28:a8:2d:a3:88:26:bd:7f:90:a3:
         86:7d:24:14:47:fc:86:b8:12:78:c5:d4:d0:f0:76:a7:3a:bb:
         d8:00:00:4d:5e:99:67:a4:51:3e:e4:86:29:d5:67:1e:98:3e:
         0c:f9:0e:e3:5a:6f:00:57:e7:40:d5:1f:cc:f3:1c:1c:95:b4:
         81:1d:b7:b3:f9:34:70:62:4d:77:4b:68:a6:18:d0:f1:ef:40:
         c7:d9:95:07:c4:61:5e:72:d2:5f:1d:d1:ca:64:3a:67:b1:52:
         50:ee:be:5b:23:51:98:6c:4e:2c:5c:5b:98:a4:bf:3b:95:8c:
         ef:6a:68:80:d3:eb:3a:6d:f5:74:51:c9:90:b8:f1:de:37:58:
         73:f5:2b:9d:a0:2f:8b:69:7c:38:72:4c:19:25:25:04:6b:d0:
         b3:9a:3c:7d:b5:30:35:71:4b:06:85:47:e1:56:6f:50:54:81:
         cb:e0:a1:15:fb:69:8e:9b:fc:90:7f:48:6e:a2:91:ba:18:59:
         bc:5e:cf:aa:1e:72:2e:70:2f:ea:be:7c:cd:18:07:25:2a:fc:
         74:24:c0:2f:97:b8:47:7b:06:ed:3a:70:40:e5:83:67:c6:43:
         42:4f:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:02:00 2026 by rpki-client