Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          HxCUjVkONJBWy86XSJD+fN1B4oxeRdjIealIRmMxlg8=
Subject key identifier:   FD:84:34:3C:58:B4:9E:17:F8:5A:D9:8D:C6:E1:BF:E4:22:68:8B:DB
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       1DCB293B39F0888EEF32D8AB0379F58F335B923D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          86
Signing time:             Mon 27 Apr 2026 16:43:49 +0000
Manifest this update:     Mon 27 Apr 2026 16:38:49 +0000
Manifest next update:     Tue 28 Apr 2026 16:50:49 +0000
Files and hashes:         1: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          2: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          3: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          4: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          5: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          6: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          7: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          8: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          9: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          10: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          11: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          12: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
                          13: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          14: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
                          15: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          16: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          17: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          18: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          19: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          20: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
                          21: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: flxc11Mv4uRY8niLkCOSl4zrZSfMtSUOh87IGKhcgLE=)
                          22: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          23: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          24: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          25: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          26: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cb:29:3b:39:f0:88:8e:ef:32:d8:ab:03:79:f5:8f:33:5b:92:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 27 16:38:49 2026 GMT
            Not After : Apr 28 16:50:49 2026 GMT
        Subject: CN=FD84343C58B49E17F85AD98DC6E1BFE422688BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:fe:06:93:5f:be:4b:65:09:dd:dc:99:6f:
                    bf:d6:9e:90:72:4c:87:07:f8:de:20:ab:16:92:49:
                    0e:cf:2c:7e:0b:a4:0d:4b:9f:c7:00:c1:37:d0:61:
                    48:06:e8:7a:7e:f1:dd:b1:c7:36:45:a0:de:4a:88:
                    dd:0e:bf:d3:74:63:02:18:59:7f:6b:ec:24:b9:25:
                    c0:0b:73:3c:d2:1c:cc:c7:5c:47:13:c9:73:c6:2d:
                    ad:9f:d7:a4:e9:45:f4:cc:b1:ab:5d:41:cd:9a:c0:
                    3e:05:86:e4:4f:0a:52:31:bd:ed:77:c9:99:39:7e:
                    c8:86:70:8f:89:a6:bf:65:6a:91:38:fe:8d:f8:b2:
                    5a:44:84:ec:4e:b8:25:5d:6f:18:83:a9:38:0c:ed:
                    b1:fe:b0:03:41:c8:67:84:b0:32:69:2c:0e:5f:6b:
                    a0:5c:c0:5e:bd:2c:b1:1d:9b:c2:2c:cd:af:d4:dc:
                    cb:f4:a2:dd:ac:04:0e:c5:46:20:a0:0d:69:47:4f:
                    f4:32:48:18:c7:d4:15:fc:53:93:da:75:c7:62:9a:
                    81:2c:fc:b4:cc:0d:7c:3a:e8:25:76:2a:18:9f:6f:
                    ed:f8:a6:5f:6e:e2:d5:9a:85:00:11:42:88:41:be:
                    db:86:48:f5:55:65:43:3f:19:63:2e:d9:22:96:84:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:84:34:3C:58:B4:9E:17:F8:5A:D9:8D:C6:E1:BF:E4:22:68:8B:DB
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:ba:82:70:ff:d0:44:94:09:61:09:ac:54:12:3e:e8:d3:
         31:c4:4c:a3:56:94:03:c8:07:76:56:d4:80:e0:c0:3c:8c:d7:
         50:bf:c3:75:17:1e:b2:33:ec:ad:d3:28:47:ff:0e:2f:89:4d:
         18:aa:32:e5:3f:4a:ff:74:dc:07:a0:76:b0:95:6d:f3:8f:19:
         71:e3:ad:c2:85:f0:42:9a:bb:12:47:3e:e0:9c:84:89:6a:04:
         4e:83:78:fa:de:0f:ee:7c:db:b0:83:89:dd:53:0c:19:2d:29:
         9f:07:9c:e4:79:6b:35:b4:94:c1:0c:85:a8:7c:14:ec:a5:f0:
         a4:d6:d0:8c:d6:ca:59:fc:70:7b:4e:4f:a0:ba:55:5c:74:23:
         6a:71:de:18:9c:2c:50:70:ba:d8:d7:b5:e2:76:ae:41:dc:1f:
         52:95:1f:39:3a:5c:5a:b9:bc:95:61:91:a8:54:c9:9d:3e:8f:
         bb:89:63:a7:80:16:04:a7:c2:a6:96:3f:b5:5f:2d:f1:ce:49:
         23:d4:e9:00:8a:ab:4c:9e:f6:35:4f:60:50:aa:97:20:96:85:
         92:0d:0b:2c:02:88:c9:4f:59:6b:c0:e9:41:b6:65:2f:47:35:
         85:0a:81:d0:2c:61:65:01:7b:d4:cc:55:fc:0f:d0:82:cf:79:
         e7:79:59:9d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHcspOznwiI7vMtirA3n1jzNbkj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjA0MjcxNjM4NDlaFw0yNjA0MjgxNjUwNDlaMDMxMTAvBgNV
BAMTKEZEODQzNDNDNThCNDlFMTdGODVBRDk4REM2RTFCRkU0MjI2ODhCREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKf4Gk1++S2UJ3dyZb7/WnpBy
TIcH+N4gqxaSSQ7PLH4LpA1Ln8cAwTfQYUgG6Hp+8d2xxzZFoN5KiN0Ov9N0YwIY
WX9r7CS5JcALczzSHMzHXEcTyXPGLa2f16TpRfTMsatdQc2awD4FhuRPClIxve13
yZk5fsiGcI+Jpr9lapE4/o34slpEhOxOuCVdbxiDqTgM7bH+sANByGeEsDJpLA5f
a6BcwF69LLEdm8Isza/U3Mv0ot2sBA7FRiCgDWlHT/QySBjH1BX8U5PadcdimoEs
/LTMDXw66CV2Khifb+34pl9u4tWahQARQohBvtuGSPVVZUM/GWMu2SKWhNWTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/YQ0PFi0nhf4WtmNxuG/5CJoi9swHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC82QTQ1RDgzMjJDMzY0
OEY5MUUyMTI0NzJGNjA0Q0FGREJBNzAxOUJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7e6gnD/0ESU
CWEJrFQSPujTMcRMo1aUA8gHdlbUgODAPIzXUL/DdRcesjPsrdMoR/8OL4lNGKoy
5T9K/3TcB6B2sJVt848ZceOtwoXwQpq7Ekc+4JyEiWoEToN4+t4P7nzbsIOJ3VMM
GS0pnwec5HlrNbSUwQyFqHwU7KXwpNbQjNbKWfxwe05PoLpVXHQjanHeGJwsUHC6
2Ne14nauQdwfUpUfOTpcWrm8lWGRqFTJnT6Pu4ljp4AWBKfCppY/tV8t8c5JI9Tp
AIqrTJ72NU9gUKqXIJaFkg0LLAKIyU9Za8DpQbZlL0c1hQqB0CxhZQF71MxV/A/Q
gs9553lZnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:54:39 2026 by rpki-client