Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          Czl3exKnnt+QMRMAWnowdGKA5Z7qMkrJ1D0PPW/ZFro=
Subject key identifier:   71:FA:45:2C:BB:56:C3:DA:8B:31:01:82:4C:4A:9C:FA:C1:4E:9C:69
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       61D09EFF3B321C3835C1687EE7342BE0ADFC7741
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          AE
Signing time:             Fri 29 May 2026 06:52:42 +0000
Manifest this update:     Fri 29 May 2026 06:47:42 +0000
Manifest next update:     Sat 30 May 2026 07:15:42 +0000
Files and hashes:         1: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          2: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          3: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
                          4: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          5: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          6: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
                          7: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          8: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
                          9: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          10: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          11: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          12: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
                          13: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          14: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          15: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: CeCKj3iVefnEcikriA20HzEYg69eGgDo77wqHR+lf3w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d0:9e:ff:3b:32:1c:38:35:c1:68:7e:e7:34:2b:e0:ad:fc:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 29 06:47:42 2026 GMT
            Not After : May 30 07:15:42 2026 GMT
        Subject: CN=71FA452CBB56C3DA8B3101824C4A9CFAC14E9C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:71:8a:bb:3f:55:7f:40:e9:e1:6d:90:2e:
                    af:c8:35:c2:f0:df:89:7a:b3:15:99:ea:8c:5d:7f:
                    93:1d:d8:26:f0:a6:da:4e:23:66:42:6a:c7:d9:ec:
                    59:73:34:78:fd:06:12:1a:8a:82:ea:8a:92:1e:cf:
                    cb:42:fd:de:e2:d4:9b:5e:b0:86:fd:ad:da:9a:49:
                    e8:2f:49:5c:aa:6f:b6:27:a4:78:b6:55:22:51:5b:
                    16:69:bf:55:8f:88:b3:5f:80:98:ea:4b:d3:53:49:
                    6b:54:6b:ea:b1:70:3e:a5:57:da:96:65:25:d9:fe:
                    ca:61:b8:95:fb:d1:52:06:9e:43:25:14:19:56:de:
                    27:b9:9a:7e:52:de:3b:f9:a9:0e:60:99:db:84:f3:
                    8c:68:7f:b6:25:af:45:3e:16:b1:b7:bf:08:9c:40:
                    bd:ae:2a:4c:0b:3c:2b:9f:ad:ec:45:15:95:6a:98:
                    3c:db:90:8d:3d:7a:e4:be:74:e0:24:1f:1d:af:50:
                    c5:ef:3b:2b:df:eb:41:7c:56:a6:6e:3a:66:a7:b4:
                    24:f8:48:77:02:ea:4e:06:4e:da:61:79:6c:dc:fc:
                    16:c8:0b:e7:d2:1b:ec:42:ee:b8:8f:b0:18:3b:a9:
                    be:ba:66:7a:4d:1e:c3:33:28:34:37:be:ea:80:94:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FA:45:2C:BB:56:C3:DA:8B:31:01:82:4C:4A:9C:FA:C1:4E:9C:69
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:68:7a:a4:87:47:fb:47:e0:28:94:61:ab:f6:b0:2b:4b:
         e4:cd:16:b5:d2:1b:29:8e:97:1f:09:30:7a:f9:81:b3:f7:85:
         a0:a5:81:89:22:fe:35:9f:25:e9:eb:a7:78:e6:a7:a6:40:e6:
         28:c0:db:ff:3f:18:7a:7e:9a:8d:01:71:81:09:52:6f:ca:d0:
         26:10:b7:ab:89:7b:89:4e:3d:1e:67:9d:ff:98:84:e2:7e:77:
         77:8d:c1:ff:49:e4:39:a7:97:20:15:b8:23:4d:8c:32:d6:1b:
         41:8d:7e:96:31:4a:34:e3:a6:9e:0d:60:79:55:89:a0:fb:f5:
         4f:66:28:b0:f9:49:e6:51:6d:d7:0e:90:f2:75:8b:c6:45:c7:
         22:b2:1d:4e:af:b0:85:99:d8:0d:22:a9:22:e7:82:cb:cd:7c:
         83:e0:c9:84:cd:3b:05:d2:c8:e4:94:31:8f:a8:b5:e8:2f:ad:
         68:9e:9d:d3:2b:b0:ce:72:8a:c9:93:3f:d9:09:a8:f3:56:80:
         b2:90:78:37:ce:0e:7c:3c:5f:63:a0:9a:38:44:70:b4:c5:ce:
         67:c1:94:c6:be:78:73:f3:d3:35:ec:b9:d6:3c:96:8c:5d:81:
         b3:92:17:fe:0a:7a:a1:11:bc:81:cb:21:72:bb:bf:d2:dc:c2:
         57:fb:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:49 2026 by rpki-client