Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          0saK6ZU/TNBbfJ6zMTpsmEHslTzUxTPNeT55siREkSk=
Subject key identifier:   7B:FD:D2:F2:FC:BE:65:B1:27:96:D4:2A:10:F9:7A:B1:9D:5B:D5:5F
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       11A81388395278558D2D95FBBC2A65366C604098
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          FC
Signing time:             Sun 26 Jul 2026 23:07:45 +0000
Manifest this update:     Sun 26 Jul 2026 23:02:45 +0000
Manifest next update:     Mon 27 Jul 2026 23:15:45 +0000
Files and hashes:         1: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          2: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          3: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          4: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          5: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          6: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          7: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          8: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          9: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          10: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          11: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: JfGzdFV4vkOOVJwzwWg+pnM9AyBhP+huTHVtRdLgwU0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a8:13:88:39:52:78:55:8d:2d:95:fb:bc:2a:65:36:6c:60:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jul 26 23:02:45 2026 GMT
            Not After : Jul 27 23:15:45 2026 GMT
        Subject: CN=7BFDD2F2FCBE65B12796D42A10F97AB19D5BD55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:aa:30:ee:56:e6:5a:5a:2f:17:60:b6:0a:
                    25:f1:0c:2d:cf:b2:74:bd:11:73:f0:9c:48:5f:1d:
                    82:bb:88:30:14:f8:7d:e1:5d:aa:83:98:fa:d0:5f:
                    57:99:bf:de:1a:74:c6:c2:8c:88:73:c3:d9:9e:bc:
                    28:8f:ec:d4:78:bd:9e:6a:ff:67:21:1c:f8:7c:6d:
                    cf:c6:0b:f8:00:a6:80:2d:b4:90:a7:ea:26:39:67:
                    04:50:9d:d5:bd:34:d2:b3:b0:75:55:95:63:86:a8:
                    fe:e5:cf:08:9b:85:c1:b0:48:66:0b:c8:25:7b:81:
                    83:f2:d7:40:c4:81:eb:bf:36:1c:0e:6b:ed:28:51:
                    1f:4e:e6:eb:32:99:28:fb:f1:45:cf:28:e5:4e:ee:
                    83:67:d5:29:30:8a:af:04:62:03:a6:a8:62:0c:25:
                    f7:6e:e7:5d:9c:c1:43:7c:6d:e0:6e:c4:aa:87:e8:
                    7b:c2:62:64:60:8a:6a:81:bd:9e:c2:86:00:24:78:
                    6c:c6:9e:7c:75:15:3e:43:b9:67:e1:26:97:d1:b3:
                    00:e3:4a:ba:8e:18:0a:bf:0e:14:30:77:0e:4e:d9:
                    c2:ea:b1:c8:64:33:70:b9:f6:c6:36:33:87:d4:39:
                    43:16:e5:92:55:25:c6:57:86:e4:ae:26:46:56:af:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FD:D2:F2:FC:BE:65:B1:27:96:D4:2A:10:F9:7A:B1:9D:5B:D5:5F
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:df:90:de:8f:9d:fa:b6:95:33:ee:52:08:db:61:43:56:10:
         0d:73:b4:8a:cb:0c:5d:e0:b1:7d:25:de:c6:6c:e5:18:51:d0:
         6c:a3:1a:e3:45:9f:97:55:b1:52:c1:c4:98:11:80:fc:6e:61:
         e6:04:04:9c:e6:b1:b1:3b:ab:3d:ad:82:b3:40:8c:26:b1:14:
         93:27:c8:41:4e:7f:af:8d:66:31:37:41:7b:da:23:fe:2c:e5:
         94:6d:a1:b4:f2:ac:a2:3e:cd:37:2b:25:d4:76:63:6d:36:e7:
         26:9e:25:aa:87:a6:f5:68:e2:59:79:c0:42:37:f8:1d:16:a5:
         66:d5:16:3b:0a:4d:bc:e3:7b:cd:03:54:2b:61:a7:9f:2c:49:
         c0:45:87:da:93:13:0f:5c:3e:84:1e:90:d5:bc:4d:8d:c2:c4:
         d7:94:3f:9a:27:6b:ec:6c:57:56:46:e2:16:45:9d:d2:63:43:
         42:52:83:df:95:44:8b:b2:19:2c:ea:a3:ac:51:70:03:5a:28:
         e9:c7:a7:31:6d:b2:55:78:43:08:76:f6:6f:33:81:1f:0c:e5:
         2f:27:14:56:68:73:68:57:9c:10:19:fe:db:41:61:77:4e:cf:
         f9:c0:ac:ed:ad:38:80:c5:15:14:93:92:9c:57:af:28:cc:2a:
         48:0a:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:06 2026 by rpki-client