Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
File:                     4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json)
Hash identifier:          rg/X/D4bipy7IIuLALVQEinuQ8SGjqzmNUPDuaDONI4=
Subject key identifier:   6B:6D:E0:99:33:58:2F:27:DD:0B:E5:B6:D7:24:55:72:78:81:25:DA
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       4C707FE77B9E5081DAE8B7684E994EC9E0A30B28
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
Manifest number:          B0
Signing time:             Fri 29 May 2026 17:28:03 +0000
Manifest this update:     Fri 29 May 2026 17:23:03 +0000
Manifest next update:     Sat 30 May 2026 19:48:03 +0000
Files and hashes:         1: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=)
                          2: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=)
                          3: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=)
                          4: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=)
                          5: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=)
                          6: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=)
                          7: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=)
                          8: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=)
                          9: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: F33QP+9sni5dY3gt9Z+ddveN5btaoQlQ6SB0L88H5Bc=)
                          10: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=)
                          11: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=)
                          12: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:70:7f:e7:7b:9e:50:81:da:e8:b7:68:4e:99:4e:c9:e0:a3:0b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: May 29 17:23:03 2026 GMT
            Not After : May 30 19:48:03 2026 GMT
        Subject: CN=6B6DE09933582F27DD0BE5B6D7245572788125DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:f8:0c:9a:58:cf:87:b8:61:8c:e5:8a:3f:
                    5e:ce:e1:8c:aa:24:90:41:46:b4:f5:ed:05:ec:50:
                    7d:d4:63:3a:d2:cc:09:94:a0:82:89:e5:4c:44:7a:
                    9d:d4:3b:ab:00:32:19:b9:9e:10:f1:1a:c2:4b:b4:
                    fe:a2:91:79:58:4b:7f:f9:7a:63:c5:d3:3b:e7:82:
                    e0:dd:43:01:d5:cf:cf:a2:4e:ca:81:bf:b0:1d:63:
                    a8:71:f5:4d:64:7a:a6:7b:49:64:69:16:d1:88:8a:
                    96:02:2b:77:bd:c4:8b:e5:3d:88:57:2e:fe:10:09:
                    30:44:2b:63:3e:ca:f4:73:46:30:ed:d5:62:3d:53:
                    e5:65:08:70:36:27:0c:ca:91:c8:0a:1f:6d:75:3c:
                    2c:84:88:c0:60:94:ca:89:f9:7c:33:7a:e8:fe:d7:
                    f4:20:cd:9f:68:e8:16:3e:79:f0:6a:93:a7:ad:d6:
                    90:e2:02:17:c2:98:22:f5:97:15:c7:23:d5:1f:1b:
                    9a:7b:1f:0f:4b:0d:6e:88:1e:d8:b0:34:66:4b:73:
                    70:e0:96:0d:e6:74:55:8e:50:0c:9b:40:ed:c9:20:
                    b2:44:cc:ce:7f:56:62:c3:c5:ed:02:47:1f:30:6a:
                    d9:ab:e1:8e:5e:0d:f1:aa:c2:18:6d:db:16:34:e9:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:E0:99:33:58:2F:27:DD:0B:E5:B6:D7:24:55:72:78:81:25:DA
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:76:d0:31:25:f3:4c:18:31:e5:e7:19:b6:5b:98:10:cc:39:
         00:d1:19:a0:ac:c2:40:19:39:21:ae:32:84:96:50:54:fc:de:
         80:a4:96:35:ba:b6:78:12:88:46:48:8a:05:70:18:52:f1:fc:
         b1:4c:fd:5e:41:6c:7a:aa:54:55:4b:3d:fc:ba:63:ad:fe:c2:
         5f:00:fe:31:ba:63:30:fb:21:89:5d:24:fe:21:00:a3:78:70:
         44:d4:ba:f0:c9:36:29:22:0f:2a:91:87:75:f0:6b:1f:a6:08:
         16:67:e3:c9:66:13:e7:79:e8:34:84:5f:c6:62:4f:e8:89:f3:
         b9:03:6d:ae:66:ae:e8:85:e9:bf:79:bf:e9:fa:ec:95:d2:3a:
         4e:23:fb:1f:44:22:f1:39:c1:28:aa:bd:b1:58:75:7c:5e:5e:
         78:44:88:a5:38:c1:f9:23:3c:35:48:7f:1a:17:f7:3f:78:85:
         4a:40:ad:22:e5:eb:36:5d:88:5a:35:c5:e7:14:e0:c4:da:b9:
         47:ce:fa:6c:53:fa:6e:f8:77:87:93:b0:aa:f9:d1:10:e1:e9:
         4d:98:66:38:2d:c7:35:2f:26:52:64:56:56:fa:6f:a3:ad:8c:
         29:7f:39:17:43:29:df:10:3a:7a:c3:35:29:01:50:7e:18:40:
         e1:2d:08:36
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTHB/53ueUIHa6LdoTplOyeCjCygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVG
MTk1MDA4MDAeFw0yNjA1MjkxNzIzMDNaFw0yNjA1MzAxOTQ4MDNaMDMxMTAvBgNV
BAMTKDZCNkRFMDk5MzM1ODJGMjdERDBCRTVCNkQ3MjQ1NTcyNzg4MTI1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IPgMmljPh7hhjOWKP17O4Yyq
JJBBRrT17QXsUH3UYzrSzAmUoIKJ5UxEep3UO6sAMhm5nhDxGsJLtP6ikXlYS3/5
emPF0zvnguDdQwHVz8+iTsqBv7AdY6hx9U1keqZ7SWRpFtGIipYCK3e9xIvlPYhX
Lv4QCTBEK2M+yvRzRjDt1WI9U+VlCHA2JwzKkcgKH211PCyEiMBglMqJ+Xwzeuj+
1/QgzZ9o6BY+efBqk6et1pDiAhfCmCL1lxXHI9UfG5p7Hw9LDW6IHtiwNGZLc3Dg
lg3mdFWOUAybQO3JILJEzM5/VmLDxe0CRx8watmr4Y5eDfGqwhht2xY06dblAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUa23gmTNYLyfdC+W21yRVcniBJdowHwYDVR0j
BBgwFoAUS5ZjyY+yZ+52fYk1RUbPtfGVAIAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTg4NzIzNC8wLzRCOTY2M0M5OEZCMjY3RUU3NjdEODkzNTQ1NDZD
RkI1RjE5NTAwODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEI5NjYzQzk4RkIyNjdFRTc2N0Q4OTM1NDU0NkNGQjVGMTk1MDA4MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE4ODcyMzQvMC80Qjk2NjNDOThGQjI2
N0VFNzY3RDg5MzU0NTQ2Q0ZCNUYxOTUwMDgwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnbQMSXzTBgx
5ecZtluYEMw5ANEZoKzCQBk5Ia4yhJZQVPzegKSWNbq2eBKIRkiKBXAYUvH8sUz9
XkFseqpUVUs9/Lpjrf7CXwD+MbpjMPshiV0k/iEAo3hwRNS68Mk2KSIPKpGHdfBr
H6YIFmfjyWYT53noNIRfxmJP6InzuQNtrmau6IXpv3m/6frsldI6TiP7H0Qi8TnB
KKq9sVh1fF5eeESIpTjB+SM8NUh/Ghf3P3iFSkCtIuXrNl2IWjXF5xTgxNq5R876
bFP6bvh3h5OwqvnREOHpTZhmOC3HNS8mUmRWVvpvo62MKX85F0Mp3xA6esM1KQFQ
fhhA4S0INg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:05:20 2026 by rpki-client