Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          UDE6ggTQ8Dz4S5dD9kcVq0DHjkMyb9Y31FKHe8XTUQY=
Subject key identifier:   13:FE:07:D9:7C:9E:D3:EC:D4:C1:23:ED:17:30:8F:E5:FA:AC:5E:8A
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       23D1523BF8D93CA1EC6E9AC23B5A16E35BDC156C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          C2
Signing time:             Thu 11 Jun 2026 22:44:31 +0000
Manifest this update:     Thu 11 Jun 2026 22:39:31 +0000
Manifest next update:     Fri 12 Jun 2026 23:11:31 +0000
Files and hashes:         1: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          2: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
                          3: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          4: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          5: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          6: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          7: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          8: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          9: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          10: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          11: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          12: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: KLVZK/dUK/6pjRywH7FVE/qA62+yQlwDU6dfU3UHt/Y=)
                          13: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          14: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          15: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          16: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          17: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
                          18: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
                          19: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          20: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          21: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          22: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          23: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          24: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          25: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          26: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d1:52:3b:f8:d9:3c:a1:ec:6e:9a:c2:3b:5a:16:e3:5b:dc:15:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jun 11 22:39:31 2026 GMT
            Not After : Jun 12 23:11:31 2026 GMT
        Subject: CN=13FE07D97C9ED3ECD4C123ED17308FE5FAAC5E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:7a:0d:55:43:ed:5d:6b:90:af:d4:a7:f6:
                    0b:10:6b:a0:3d:ba:f7:58:f6:17:88:c5:25:e6:95:
                    af:b2:49:c1:e2:2c:5e:32:00:e7:1f:75:8a:06:cb:
                    8f:b0:95:79:9f:18:b9:21:91:80:f8:7e:82:17:52:
                    ed:af:c8:5a:db:0e:3d:92:5c:b0:23:1c:41:53:8f:
                    5b:ec:df:c3:fa:5d:56:46:1e:1d:6b:3f:c6:b9:5a:
                    dc:d3:c0:0b:ab:97:7f:81:43:d9:9b:7e:78:5f:31:
                    4a:db:f1:2a:65:c9:56:1a:0f:af:e5:81:54:0c:6d:
                    c6:01:64:78:2c:99:ab:6b:8c:28:0f:a1:fe:35:23:
                    10:85:62:03:08:14:17:c0:9e:bc:b1:eb:e8:3f:2e:
                    a1:db:12:76:e0:c1:14:21:80:de:33:b1:be:bc:61:
                    91:b5:4e:25:d5:5a:88:20:47:06:bf:ec:76:54:03:
                    6d:d4:33:64:9b:b2:09:53:67:cc:3f:03:8f:9b:d7:
                    8d:a7:99:b9:f0:a6:08:79:19:97:10:8a:cc:33:1b:
                    d1:13:77:7b:d7:b2:6f:63:59:23:63:90:42:22:22:
                    5e:8c:46:56:f3:0f:d7:b7:95:32:2c:96:e5:b8:23:
                    b5:c9:a3:d2:7e:50:e9:d6:a8:3c:25:97:2f:42:1f:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:07:D9:7C:9E:D3:EC:D4:C1:23:ED:17:30:8F:E5:FA:AC:5E:8A
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:e6:57:5c:6c:ab:d4:e0:4d:6f:4e:60:6f:49:83:49:be:
         b7:2f:c2:77:10:19:eb:10:2e:c8:d7:6a:72:da:e7:e5:d6:65:
         42:b6:97:8f:d5:8f:c9:a7:96:ed:25:f9:64:8c:b6:3f:66:c5:
         33:79:57:42:c1:3b:b2:2f:00:89:20:80:aa:18:1e:b2:81:ce:
         f0:2e:b2:a5:93:66:09:76:2b:8c:d8:c1:0f:82:f1:c0:15:1b:
         30:ad:22:6f:13:01:90:a7:03:51:e0:49:78:86:14:ac:62:5c:
         07:cd:c3:66:0d:fe:5e:90:8d:81:71:dd:4f:5d:79:84:39:18:
         87:f2:5d:c6:b3:b3:69:b1:a4:17:08:2f:dc:62:1f:17:29:5a:
         6a:94:cd:5f:7c:3c:ed:15:53:d9:cc:b9:0f:51:41:3b:49:42:
         9e:bd:1e:5d:28:40:bf:13:99:51:15:23:88:23:78:ef:bb:8e:
         34:af:18:17:e7:f9:b2:9c:f4:3d:b4:f1:3c:a1:50:11:7b:d5:
         07:f9:f5:c7:85:28:d6:a3:b7:d8:fb:44:57:89:af:bb:2a:2d:
         9e:0e:94:fe:fe:4a:50:b6:f7:51:3e:94:ca:8c:c5:06:c5:da:
         11:42:d6:d7:0d:f1:7b:28:47:af:b8:28:d5:0d:ae:d3:35:6f:
         3c:8d:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:00 2026 by rpki-client