Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          9qR8IE4q00H1YArHTgrdRT2+EbI+G2BWEMncUHuwsko=
Subject key identifier:   CD:A1:E1:C4:B6:7D:43:AA:0C:F1:34:1B:E0:1D:B8:AB:88:3F:9B:C6
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       16B360C8079471D419BFB9CBB99CE5A2FB5E3E45
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          84
Signing time:             Mon 27 Apr 2026 07:08:42 +0000
Manifest this update:     Mon 27 Apr 2026 07:03:42 +0000
Manifest next update:     Tue 28 Apr 2026 08:18:42 +0000
Files and hashes:         1: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          2: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: oDFvS9chlxlDmpE8MinLewRum7h2j3SYSqk6eb0dQhI=)
                          3: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          4: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          5: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          6: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          7: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          8: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          9: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          10: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          11: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:60:c8:07:94:71:d4:19:bf:b9:cb:b9:9c:e5:a2:fb:5e:3e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Apr 27 07:03:42 2026 GMT
            Not After : Apr 28 08:18:42 2026 GMT
        Subject: CN=CDA1E1C4B67D43AA0CF1341BE01DB8AB883F9BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:f1:e9:41:d8:cf:d9:8c:3d:21:b3:05:60:
                    ab:9a:bc:4d:d4:5f:dd:46:d1:63:56:1c:c4:44:9e:
                    50:9b:7d:9c:dc:97:1c:a3:54:85:27:f6:d5:b5:70:
                    ea:57:a0:60:17:9b:e1:a5:8f:d1:21:90:3f:bf:d1:
                    a3:1f:48:65:a0:e3:3b:84:8f:bc:c6:df:4b:34:29:
                    71:7b:34:24:72:84:9b:34:d8:af:c0:ed:9a:42:67:
                    10:20:8e:22:d2:05:eb:4a:fe:5c:87:7d:c0:59:d4:
                    06:32:76:d9:62:7c:11:ae:12:81:a1:ec:96:71:91:
                    9d:b0:59:06:94:d3:26:ae:f7:a5:0d:47:81:cf:a9:
                    c1:ac:f7:97:e1:ff:b3:3a:2b:29:1f:95:69:2c:80:
                    5d:86:d1:01:59:90:8d:c1:56:82:77:aa:40:c6:49:
                    1b:0b:b1:34:95:c0:41:8a:94:c8:1e:a2:21:4a:fc:
                    73:64:89:87:8d:8b:f7:32:f9:ce:4d:8f:e6:36:66:
                    40:45:19:a2:96:50:0e:d9:4e:71:f9:6d:37:1e:af:
                    7a:62:24:3b:3a:c6:71:e5:00:d2:ad:79:32:d9:23:
                    c1:e9:22:aa:c8:ad:c6:99:b6:dd:cf:c7:cf:4d:4a:
                    e8:64:23:06:f4:d8:2d:fa:0e:5c:2d:04:67:92:4b:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:E1:C4:B6:7D:43:AA:0C:F1:34:1B:E0:1D:B8:AB:88:3F:9B:C6
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:16:0e:d2:4e:78:ad:d6:5c:15:0b:68:9d:01:01:a5:7c:96:
         e7:a1:bc:1b:f5:c4:32:0b:9d:06:99:44:89:16:af:e1:ae:e0:
         ed:14:ac:3c:0d:7c:39:1b:67:e0:a1:78:d5:30:00:74:2b:6a:
         3e:8a:9e:d7:86:3e:72:e7:61:89:c1:4c:09:73:07:5b:43:5b:
         96:ad:1d:98:e3:4a:4a:f5:c3:79:02:ae:4e:2e:88:6f:30:d3:
         29:4d:84:c8:1c:bf:2d:9c:b9:a8:dc:22:aa:89:3f:7f:f6:28:
         9a:67:60:79:5d:9c:e7:ce:bd:8a:a9:88:67:ed:c3:af:e9:82:
         31:28:de:52:26:50:3a:68:af:92:59:09:ba:39:96:d6:95:34:
         e6:5f:85:7a:c7:99:db:ce:39:76:da:ed:5b:08:53:cd:71:27:
         0b:be:ce:2e:40:a7:f8:3f:1c:b2:f2:eb:26:11:02:26:8f:1d:
         e5:95:19:7e:9e:fd:64:6a:1e:21:ff:39:5e:33:86:36:0f:7e:
         53:87:6b:e2:1c:9c:62:04:1a:15:2a:b1:c7:cf:7f:4d:a7:2d:
         d9:65:e5:7a:47:90:b5:38:ae:35:aa:1a:50:36:17:a0:79:b6:
         17:74:a3:9f:9c:df:1b:29:ba:94:65:44:03:af:c7:c8:e3:5b:
         f9:2d:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:02:37 2026 by rpki-client