Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File:                     EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier:          of/WT2C73khwCxvwNoLJtmt5MpUbUy113XTtQUYGODU=
Subject key identifier:   14:05:6A:D8:55:CA:04:F7:69:06:E3:8B:12:92:EE:B3:64:04:5E:0F
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       2183B9833DFD73C32F4C1AF8340B05EE466C2A2F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number:          BF
Signing time:             Thu 11 Jun 2026 17:59:08 +0000
Manifest this update:     Thu 11 Jun 2026 17:54:08 +0000
Manifest next update:     Fri 12 Jun 2026 21:50:08 +0000
Files and hashes:         1: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
                          2: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
                          3: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
                          4: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
                          5: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
                          6: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: ssv2Il57jN25eOoRJo9rWbJvZDCXz7s17QwyCoe5hFk=)
                          7: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
                          8: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 21:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:b9:83:3d:fd:73:c3:2f:4c:1a:f8:34:0b:05:ee:46:6c:2a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Jun 11 17:54:08 2026 GMT
            Not After : Jun 12 21:50:08 2026 GMT
        Subject: CN=14056AD855CA04F76906E38B1292EEB364045E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:c7:f8:84:0d:37:c7:61:82:33:f2:25:0d:
                    e4:5f:f2:fa:1d:fc:bc:52:60:5f:d6:6a:a1:d0:5b:
                    f5:96:a5:f8:f7:bc:40:64:49:1f:00:40:0e:68:30:
                    06:03:61:cb:99:58:73:e4:c3:95:83:0a:35:62:18:
                    14:45:6a:f4:aa:2b:27:01:00:79:11:b7:fb:f5:18:
                    9a:21:8e:40:0e:f7:e6:96:5d:be:ec:76:68:55:9e:
                    f8:84:9d:d4:fd:36:32:4a:51:20:ea:22:6d:17:06:
                    6e:72:05:97:f2:bf:be:88:40:d1:1f:c2:75:43:32:
                    b8:db:b3:63:32:45:9c:60:21:42:f6:a0:0a:64:00:
                    0d:fe:7f:c4:10:0c:4a:e2:1f:92:74:f0:38:f2:c9:
                    ea:14:e3:30:7a:49:1f:4d:6b:88:62:33:bb:0c:ae:
                    d5:a4:ef:5c:d7:fe:eb:e6:11:bb:92:54:2b:21:6d:
                    97:81:86:84:04:aa:0f:07:fc:25:54:59:f3:86:04:
                    bf:5c:4d:de:87:81:2a:c2:ab:01:0b:21:c2:ea:44:
                    d7:59:22:99:1c:79:0e:a0:d6:87:f8:bf:82:bc:c8:
                    f7:85:ab:f6:d1:18:ec:ab:d9:96:50:3a:24:e8:13:
                    93:02:0c:a7:b4:b0:62:9e:83:38:80:30:e9:9c:f8:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:05:6A:D8:55:CA:04:F7:69:06:E3:8B:12:92:EE:B3:64:04:5E:0F
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:f5:70:f3:ab:03:fc:cc:fd:d8:a8:2e:6f:6e:cb:8b:5f:
         41:4b:21:e0:2c:73:9a:8e:d6:eb:a3:76:08:36:57:11:65:cf:
         78:f7:07:f8:b0:43:c1:03:ee:6b:71:97:3b:35:38:f9:6d:ce:
         16:7a:b3:6d:95:d2:7b:aa:9e:55:f6:2a:6e:32:c1:5e:a9:96:
         70:01:95:76:43:10:33:07:fe:ed:9c:3e:e8:85:42:71:0f:21:
         54:e0:fe:70:e5:48:f5:c9:f4:aa:b0:9c:81:bb:29:d7:7e:ca:
         8d:98:21:12:67:d7:05:9a:6f:42:27:59:0a:58:8d:5b:0a:f1:
         ab:f7:fd:f1:8a:36:5e:7c:b9:04:e8:7c:89:18:42:14:7c:ef:
         c7:c6:bb:58:21:33:b9:7e:b5:cf:28:e8:4f:f3:8b:d6:61:5f:
         a8:7c:e4:88:62:82:74:f0:28:0c:33:28:43:50:8a:af:9c:76:
         d2:dd:4e:7a:ae:af:50:ee:5c:70:d4:fe:d3:cf:db:0c:b0:25:
         c9:76:98:dc:a2:87:d8:50:40:75:b5:60:1d:31:34:16:b7:a6:
         08:80:3f:73:c9:4c:70:e0:70:e1:74:5a:24:f4:87:d5:7e:41:
         a3:01:30:ba:8f:3b:78:11:81:42:b6:c6:bc:98:3f:24:12:bb:
         0e:05:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:25:46 2026 by rpki-client