Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          8VRbjtkIJ+rsoCSrSGbWjamz9PhlcFiP9T8+jBBHiBg=
Subject key identifier:   57:F3:51:98:FC:11:3D:6C:CD:5E:34:38:8D:A4:67:6F:9C:D7:B1:4C
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       62ECF230B4918A29FC14DDB86DBE1AA0CB95E748
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          46
Signing time:             Thu 12 Mar 2026 00:08:39 +0000
Manifest this update:     Thu 12 Mar 2026 00:03:39 +0000
Manifest next update:     Fri 13 Mar 2026 02:51:39 +0000
Files and hashes:         1: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: ov7Oxz0Y0OscLEpUyk6RxrPm6B2Ty+akJy2bgkVpdkk=)
                          2: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          3: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          4: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          5: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          6: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          7: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          8: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          9: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          10: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 02:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:f2:30:b4:91:8a:29:fc:14:dd:b8:6d:be:1a:a0:cb:95:e7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Mar 12 00:03:39 2026 GMT
            Not After : Mar 13 02:51:39 2026 GMT
        Subject: CN=57F35198FC113D6CCD5E34388DA4676F9CD7B14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:03:ac:9e:42:be:c0:6f:5b:83:f6:19:4a:
                    7d:0c:fa:56:d5:62:77:4b:09:8d:a1:7c:fe:4b:e8:
                    fb:f3:01:2e:92:c5:5f:71:ed:d6:8c:ae:f5:48:6d:
                    2d:9c:56:87:45:5a:d4:3b:b5:d2:b9:9c:35:dd:5b:
                    9d:cd:6b:51:48:bf:d7:48:a5:8c:66:a0:e9:fa:83:
                    9b:fd:3e:76:fb:07:44:bc:6a:0d:b1:81:53:8a:62:
                    f1:e5:7b:07:ee:5c:8b:7a:2f:80:68:08:2b:a8:f1:
                    6c:bd:be:ee:15:62:17:72:06:dd:3b:bd:e5:b2:83:
                    bc:39:90:d2:79:23:71:fa:67:08:54:66:c7:cd:da:
                    8c:fb:50:3b:80:91:96:a1:4c:bf:6b:08:01:14:c1:
                    cf:8f:5b:b4:cf:b1:46:99:78:99:60:68:48:81:c8:
                    50:06:ec:b6:07:1d:85:12:b2:4e:f2:1d:ff:1d:c3:
                    1b:91:82:d3:26:b3:a5:e5:15:00:8e:a3:30:5d:36:
                    37:f8:d2:cd:68:c9:e3:12:ca:a2:47:20:9e:4e:e1:
                    70:85:5b:8b:e8:5f:34:be:ea:22:67:ab:5a:c2:70:
                    dd:79:cd:ee:b0:23:1b:e8:6d:1f:8f:fc:d5:dc:a4:
                    78:ab:a6:2b:0a:44:a5:02:b3:0e:e5:99:db:b5:71:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:51:98:FC:11:3D:6C:CD:5E:34:38:8D:A4:67:6F:9C:D7:B1:4C
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:9a:2f:a5:74:3a:d1:d5:c9:c0:bf:df:22:1c:9a:b8:7c:
         19:eb:ea:3f:bf:59:83:29:71:3a:6a:aa:83:53:6c:54:3c:16:
         85:1b:ca:f5:ee:36:c3:57:b0:c3:3e:6c:df:f6:66:fe:0c:7c:
         14:0c:c8:99:1e:23:d0:e0:b1:ba:20:77:9e:47:27:22:07:74:
         de:1d:d0:99:44:9a:75:60:00:47:0f:18:3f:0e:9a:26:fd:2c:
         f7:5b:50:0b:e9:c9:93:3c:45:d5:73:64:7b:94:2b:cb:f5:89:
         db:48:16:5d:6b:83:f8:ac:ed:88:e6:f1:56:62:86:a0:52:ea:
         1e:c2:ea:32:3b:e3:15:27:a9:ef:ed:24:7a:19:62:6d:40:e5:
         1b:9e:af:54:73:52:3b:bd:93:cf:95:c2:62:c5:b8:38:61:85:
         de:5c:69:18:ad:43:e9:f2:91:ec:12:40:f1:09:23:a5:9c:c2:
         14:b6:12:76:91:f9:02:59:fa:76:3c:73:f2:b4:3c:8d:12:4a:
         64:51:b6:1d:74:68:57:6a:f5:ed:f6:a6:45:63:0f:7c:03:40:
         d4:4a:52:ac:66:22:98:5a:89:67:1f:40:e8:b0:ac:88:af:ee:
         b7:05:c5:ec:ea:c8:a9:e6:cf:a7:20:1f:9f:a3:55:a7:b6:5d:
         0b:c1:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:25:15 2026 by rpki-client