Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          XGPujRidMLyoDC4sp15uElRKtSsBFNkDDjmAKNSRHtQ=
Subject key identifier:   FD:DA:E3:06:C8:6E:DE:25:87:02:CB:BB:0E:4E:8D:CE:E7:B7:CC:C3
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       4D2CFAF5120D8BA5B7CBD4D534E779467D074B3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          BF
Signing time:             Thu 11 Jun 2026 10:33:40 +0000
Manifest this update:     Thu 11 Jun 2026 10:28:40 +0000
Manifest next update:     Fri 12 Jun 2026 11:42:40 +0000
Files and hashes:         1: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          2: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          3: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          4: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          5: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          6: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          7: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          8: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          9: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: eHkUHDg9V+7lZeZa4EbfwX0owHIgTaaWV25wVbppX1Y=)
                          10: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          11: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2c:fa:f5:12:0d:8b:a5:b7:cb:d4:d5:34:e7:79:46:7d:07:4b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jun 11 10:28:40 2026 GMT
            Not After : Jun 12 11:42:40 2026 GMT
        Subject: CN=FDDAE306C86EDE258702CBBB0E4E8DCEE7B7CCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:c8:59:63:15:72:3e:a6:e1:bb:1e:56:c9:
                    46:dc:e7:2b:fb:a4:df:0e:81:b5:81:d4:66:91:a1:
                    71:70:2e:dd:74:c0:68:fe:30:3f:de:3f:60:22:03:
                    4b:8b:7a:ba:49:23:fd:1c:57:84:d0:7b:6d:8d:97:
                    df:6c:74:5d:4d:32:3e:89:6c:95:97:48:a7:0b:f2:
                    25:c6:7b:e8:00:df:37:b2:46:f0:7a:e8:22:6d:c9:
                    7b:b1:b1:b3:29:4e:1f:9d:11:c9:b3:20:c7:fb:1b:
                    36:8b:8d:ba:77:b5:da:69:40:23:d6:84:34:ff:df:
                    a9:a0:ba:cc:2e:7d:27:4d:18:ec:89:67:5a:78:c7:
                    e8:59:4b:8b:c8:81:58:85:66:9b:e6:1a:cc:46:1a:
                    3a:6c:42:13:22:59:71:43:84:16:c8:9b:4b:24:57:
                    ab:a2:43:f1:e0:a5:58:3e:e1:b9:65:4e:bc:97:67:
                    3b:40:01:03:4d:22:20:5a:6a:3d:8b:cb:06:28:6c:
                    2c:26:76:7b:f9:ad:f1:39:64:67:b2:43:8c:68:c4:
                    83:8a:1d:2a:e5:a5:fe:73:1f:cb:b1:76:fb:0d:4f:
                    e2:40:47:08:b0:66:aa:81:d6:45:40:4e:02:51:cf:
                    38:bd:ed:e0:f2:03:9c:40:8e:ad:32:2a:73:cb:a0:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:E3:06:C8:6E:DE:25:87:02:CB:BB:0E:4E:8D:CE:E7:B7:CC:C3
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6e:71:8e:c6:76:54:e4:b2:91:c9:04:df:bb:4d:55:ed:a1:
         5c:aa:86:f0:9f:63:f1:f4:40:00:ac:8d:1a:67:ca:fc:aa:a0:
         6d:6b:e6:05:5f:72:7d:6f:f2:b4:72:fe:84:56:97:84:f9:61:
         dd:01:9e:79:c2:ce:7a:fb:3f:e8:cf:3d:13:92:d2:b0:d6:c0:
         40:33:ca:0e:69:d2:00:8d:60:72:63:54:d0:15:cf:c2:30:26:
         f8:6b:60:35:2a:7e:11:1d:94:4f:c3:d6:cf:1f:d7:6b:fb:be:
         aa:86:ed:8f:c3:29:9d:7e:c9:ef:a4:91:ae:41:46:06:99:fb:
         87:06:3e:bc:68:e5:1a:38:21:ea:44:86:90:be:40:86:d3:05:
         48:da:88:43:b4:2f:47:92:92:03:fb:97:eb:a0:58:f7:1b:67:
         86:df:12:80:7f:4c:e4:a1:30:3f:53:ae:6e:07:86:ee:7a:12:
         7d:a9:cf:21:5f:8c:f5:14:ad:50:91:73:d0:ae:f0:f2:88:28:
         c6:51:d5:ec:0b:c4:02:51:57:4e:0c:2d:b6:63:93:cb:37:59:
         22:55:41:b9:5e:ee:ca:1e:11:12:cc:b6:d4:a2:1c:2c:dc:56:
         78:4b:01:d3:33:e6:fc:b8:0b:44:fc:ed:7e:0e:89:18:71:e4:
         07:80:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:59 2026 by rpki-client