Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          097k6nM50pePRbkXDVISruEkaUEBCW5fVkdHINmzKZs=
Subject key identifier:   F5:F1:02:02:B4:2D:47:32:78:6D:60:00:C0:47:4C:BC:00:91:A8:95
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       77916F3B717B8D4FAF71CA24C8F06E57F2FF9C81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          45
Signing time:             Thu 12 Mar 2026 02:28:39 +0000
Manifest this update:     Thu 12 Mar 2026 02:23:39 +0000
Manifest next update:     Fri 13 Mar 2026 05:27:39 +0000
Files and hashes:         1: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          2: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          3: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          4: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          5: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          6: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          7: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          8: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          9: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: lPeuvTY0x6e88BfKzSWpZiy3ra+TS+VxsB+9AnYUTAc=)
                          10: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          11: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 05:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:6f:3b:71:7b:8d:4f:af:71:ca:24:c8:f0:6e:57:f2:ff:9c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Mar 12 02:23:39 2026 GMT
            Not After : Mar 13 05:27:39 2026 GMT
        Subject: CN=F5F10202B42D4732786D6000C0474CBC0091A895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:9c:ec:6b:47:78:8a:82:b0:e7:6f:53:d4:
                    28:41:d9:cb:c9:33:f0:b8:c7:4c:0c:37:72:7d:70:
                    14:eb:0f:ee:9e:e9:5c:ad:20:2e:17:43:57:22:50:
                    eb:2f:1e:2a:0d:13:a1:57:50:27:3e:f7:0e:67:76:
                    3d:72:25:bb:5e:79:54:2a:97:ce:20:72:aa:29:7d:
                    a2:87:c1:da:5d:d1:bc:b5:d4:e1:ae:54:08:15:5a:
                    8a:64:fa:1c:82:df:27:ee:97:36:ce:51:da:2c:e5:
                    e2:93:55:f6:f4:95:5f:b3:a6:68:3a:b6:96:e8:6b:
                    75:4a:e8:ca:94:fd:3b:9b:48:9f:69:0a:dd:ab:35:
                    10:9a:85:be:57:c0:dc:59:d9:4b:1a:9b:7c:92:d6:
                    88:ed:7a:5b:4a:00:a0:f6:d5:58:84:63:fa:ca:06:
                    f9:92:30:ac:3a:6d:9c:4f:1a:8b:1e:42:1e:5e:ed:
                    7b:c1:43:24:a4:c3:66:c1:19:f6:7c:49:4d:af:0f:
                    1d:d9:16:a8:64:b2:e8:9e:9c:ce:3b:d6:e8:88:ed:
                    84:90:2a:5b:bc:65:69:9a:1a:a4:75:5a:45:19:bf:
                    c3:d8:3c:95:79:bc:2f:55:f8:b0:5e:68:43:e4:4f:
                    c7:43:c6:6b:d6:20:d6:1c:65:2a:1a:0a:ba:63:c1:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F1:02:02:B4:2D:47:32:78:6D:60:00:C0:47:4C:BC:00:91:A8:95
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:b5:55:2b:02:13:15:f1:b0:e3:18:c2:ba:f0:f8:43:88:
         81:10:3e:a8:48:cd:35:d9:d7:5d:31:2e:6b:86:4e:c2:ad:97:
         35:5c:20:6a:02:fc:b8:b1:59:21:08:32:82:0d:d2:92:65:ca:
         97:f6:fd:07:26:80:d2:55:80:0d:2d:11:2f:ae:2c:64:e3:c4:
         d7:3e:8d:d2:71:19:7b:08:b8:7e:29:a9:67:2f:0d:c9:81:3a:
         48:69:12:21:85:34:d3:59:f3:19:11:56:bd:a9:9b:eb:a1:69:
         d5:57:93:b2:3c:cb:d1:37:9a:15:0a:c1:43:a8:65:50:4f:b6:
         d5:40:c9:86:0f:3f:ef:20:9e:9b:e0:92:e2:cd:ec:be:60:85:
         46:dd:10:2a:25:cc:29:42:a4:a6:2c:81:95:d0:0c:49:a8:8c:
         b3:bd:44:c5:8a:ef:03:86:07:b9:25:3e:64:8f:09:0c:d8:f7:
         4f:d4:68:d6:72:53:c4:9f:a6:0b:6b:b5:06:ed:fb:85:dd:ae:
         7a:70:10:ee:a9:58:98:2f:d4:45:40:83:11:f5:44:dc:74:ea:
         32:22:f4:b9:02:be:61:fb:1d:ed:b5:8b:af:86:97:2d:75:3f:
         9e:ac:ab:ee:a8:6b:cd:3a:22:e7:ed:c2:09:ad:32:5e:2e:42:
         4f:21:25:96
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUd5FvO3F7jU+vccokyPBuV/L/nIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjAzMTIwMjIzMzlaFw0yNjAzMTMwNTI3MzlaMDMxMTAvBgNV
BAMTKEY1RjEwMjAyQjQyRDQ3MzI3ODZENjAwMEMwNDc0Q0JDMDA5MUE4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQpzsa0d4ioKw529T1ChB2cvJ
M/C4x0wMN3J9cBTrD+6e6VytIC4XQ1ciUOsvHioNE6FXUCc+9w5ndj1yJbteeVQq
l84gcqopfaKHwdpd0by11OGuVAgVWopk+hyC3yfulzbOUdos5eKTVfb0lV+zpmg6
tpboa3VK6MqU/TubSJ9pCt2rNRCahb5XwNxZ2Usam3yS1ojteltKAKD21ViEY/rK
BvmSMKw6bZxPGoseQh5e7XvBQySkw2bBGfZ8SU2vDx3ZFqhksuienM471uiI7YSQ
Klu8ZWmaGqR1WkUZv8PYPJV5vC9V+LBeaEPkT8dDxmvWINYcZSoaCrpjwRPpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU9fECArQtRzJ4bWAAwEdMvACRqJUwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC82QTQ1RDgzMjJDMzY0
OEY5MUUyMTI0NzJGNjA0Q0FGREJBNzAxOUJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKa1VSsCExXx
sOMYwrrw+EOIgRA+qEjNNdnXXTEua4ZOwq2XNVwgagL8uLFZIQgygg3SkmXKl/b9
ByaA0lWADS0RL64sZOPE1z6N0nEZewi4fimpZy8NyYE6SGkSIYU001nzGRFWvamb
66Fp1VeTsjzL0TeaFQrBQ6hlUE+21UDJhg8/7yCem+CS4s3svmCFRt0QKiXMKUKk
piyBldAMSaiMs71ExYrvA4YHuSU+ZI8JDNj3T9Ro1nJTxJ+mC2u1Bu37hd2uenAQ
7qlYmC/URUCDEfVE3HTqMiL0uQK+Yfsd7bWLr4aXLXU/nqyr7qhrzToi5+3CCa0y
Xi5CTyEllg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:19:27 2026 by rpki-client