Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File:                     2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier:          eNNzy7ksWibjgpeY00BIXpq2BkZg3NZ4do2n6yxhoRw=
Subject key identifier:   50:C5:9A:42:6D:3D:A1:76:AD:50:08:4F:38:0C:DD:EB:E7:A0:DD:F0
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer:       /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial:       6420C3531924139052F8B0D70E7FEE8E266B5F17
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number:          E1
Signing time:             Mon 06 Jul 2026 14:47:01 +0000
Manifest this update:     Mon 06 Jul 2026 14:42:01 +0000
Manifest next update:     Tue 07 Jul 2026 18:46:01 +0000
Files and hashes:         1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
                          2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: 19OW6ZITEiNp/PGXDXhZCukwlmWlO7z2vLGPoECBKds=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 18:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:c3:53:19:24:13:90:52:f8:b0:d7:0e:7f:ee:8e:26:6b:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
        Validity
            Not Before: Jul  6 14:42:01 2026 GMT
            Not After : Jul  7 18:46:01 2026 GMT
        Subject: CN=50C59A426D3DA176AD50084F380CDDEBE7A0DDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:f2:45:57:2a:e9:79:59:53:46:dc:68:d4:
                    c1:fa:d2:4e:9e:c7:4e:19:38:12:df:fd:68:e9:ad:
                    29:ee:0b:af:79:3e:5c:03:c1:d5:75:74:8d:a7:b0:
                    a3:86:cb:16:af:83:99:73:72:71:42:4a:a4:1c:05:
                    f2:ea:9d:a1:3a:f8:29:b2:c1:51:6f:1e:85:85:b4:
                    b8:b5:0c:8d:ff:df:09:d4:09:a8:17:de:26:d3:25:
                    56:3b:e9:1e:d1:1a:5d:61:94:75:c7:59:9e:6d:8b:
                    c2:06:2f:ce:05:f4:39:39:54:f3:c3:6c:ca:40:55:
                    41:65:27:89:aa:fc:6d:c6:cf:dd:96:3a:5f:13:d8:
                    44:62:15:8b:2a:9c:84:c2:9b:65:b7:65:76:c1:06:
                    60:de:de:e4:c6:ba:ff:55:05:23:29:ee:de:fa:1a:
                    2f:8c:8b:95:9f:35:5a:db:60:87:ce:d1:a3:4f:ed:
                    d0:15:60:03:47:10:46:06:d1:49:aa:1e:b3:29:6f:
                    d4:2e:ff:b4:8e:9e:0f:d0:c2:51:2d:43:f0:7f:43:
                    3c:5b:52:17:9c:ad:cf:87:51:24:8c:99:ac:5d:9d:
                    c9:04:f3:08:0c:8f:12:14:a0:4a:d4:37:6f:72:de:
                    6e:49:6f:0e:10:53:74:21:84:16:88:37:b3:24:bd:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C5:9A:42:6D:3D:A1:76:AD:50:08:4F:38:0C:DD:EB:E7:A0:DD:F0
            X509v3 Authority Key Identifier:
                keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1c:ba:af:87:cf:01:fd:38:22:8e:a6:5f:68:b3:63:38:d7:
         d5:2b:39:3b:d4:53:b9:f8:48:5e:46:bb:1a:aa:87:1e:1b:1b:
         ba:22:07:0c:8d:2f:f7:53:61:85:c3:9e:b6:03:f3:16:82:33:
         55:e6:ed:51:ce:51:cb:e0:b7:5b:07:22:f7:d2:9d:3c:bd:2f:
         60:15:12:87:24:a6:a1:c3:26:03:b0:4f:e7:ee:2a:e5:2c:cd:
         74:56:d7:4f:42:c8:43:da:f5:71:b7:98:26:1b:f2:67:c6:5f:
         63:6a:ed:ea:d9:0a:bb:b5:76:00:cf:91:2e:5a:c2:27:59:fe:
         1a:1d:44:a5:cf:12:27:7c:de:12:65:e3:0f:46:e3:84:9b:cd:
         d4:ab:8b:0d:97:62:ee:22:53:83:ec:ca:76:c9:89:33:ce:43:
         1f:64:c4:d8:16:8d:14:0c:3c:8e:b8:31:1f:72:01:da:43:07:
         5f:e5:1e:b3:f2:f7:fb:58:b0:c8:c8:0f:fc:cf:96:dc:53:3d:
         ce:d0:26:0e:e0:4c:5a:aa:fd:29:6e:3a:b1:8f:0d:2b:87:6c:
         20:be:a7:92:82:b7:b7:97:f4:31:7c:44:b7:ae:70:20:78:01:
         30:67:19:e0:b5:6d:4b:de:80:cf:c6:18:9e:ee:15:58:54:19:
         94:76:50:28
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZCDDUxkkE5BS+LDXDn/ujiZrXxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1
ODFBNUM4NTAeFw0yNjA3MDYxNDQyMDFaFw0yNjA3MDcxODQ2MDFaMDMxMTAvBgNV
BAMTKDUwQzU5QTQyNkQzREExNzZBRDUwMDg0RjM4MENEREVCRTdBMERERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TvJFVyrpeVlTRtxo1MH60k6e
x04ZOBLf/WjprSnuC695PlwDwdV1dI2nsKOGyxavg5lzcnFCSqQcBfLqnaE6+Cmy
wVFvHoWFtLi1DI3/3wnUCagX3ibTJVY76R7RGl1hlHXHWZ5ti8IGL84F9Dk5VPPD
bMpAVUFlJ4mq/G3Gz92WOl8T2ERiFYsqnITCm2W3ZXbBBmDe3uTGuv9VBSMp7t76
Gi+Mi5WfNVrbYIfO0aNP7dAVYANHEEYG0UmqHrMpb9Qu/7SOng/QwlEtQ/B/Qzxb
Uhecrc+HUSSMmaxdnckE8wgMjxIUoErUN29y3m5Jbw4QU3QhhBaIN7MkvYBNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUMWaQm09oXatUAhPOAzd6+eg3fAwHwYDVR0j
BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1
RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew
MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxy6r4fPAf04
Io6mX2izYzjX1Ss5O9RTufhIXka7GqqHHhsbuiIHDI0v91NhhcOetgPzFoIzVebt
Uc5Ry+C3Wwci99KdPL0vYBUShySmocMmA7BP5+4q5SzNdFbXT0LIQ9r1cbeYJhvy
Z8ZfY2rt6tkKu7V2AM+RLlrCJ1n+Gh1Epc8SJ3zeEmXjD0bjhJvN1KuLDZdi7iJT
g+zKdsmJM85DH2TE2BaNFAw8jrgxH3IB2kMHX+Ues/L3+1iwyMgP/M+W3FM9ztAm
DuBMWqr9KW46sY8NK4dsIL6nkoK3t5f0MXxEt65wIHgBMGcZ4LVtS96Az8YYnu4V
WFQZlHZQKA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:59 2026 by rpki-client