Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File:                     2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier:          V1hH9XOGufgWc6WDo2HzS3036caxXo2uvonn0W3Z488=
Subject key identifier:   CF:ED:CC:35:D1:90:1C:E6:85:9A:9E:78:D5:65:3A:21:D8:E5:5D:1A
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer:       /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial:       28754E8FD2372F38F8AE54A7D13F1A89265805AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number:          A6
Signing time:             Sat 23 May 2026 01:22:37 +0000
Manifest this update:     Sat 23 May 2026 01:17:37 +0000
Manifest next update:     Sun 24 May 2026 02:00:37 +0000
Files and hashes:         1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: ZOh3ZQE8+iR7grvdJ4kg5Ea8ytp7dYfhfytw3OVtoAA=)
                          2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:4e:8f:d2:37:2f:38:f8:ae:54:a7:d1:3f:1a:89:26:58:05:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
        Validity
            Not Before: May 23 01:17:37 2026 GMT
            Not After : May 24 02:00:37 2026 GMT
        Subject: CN=CFEDCC35D1901CE6859A9E78D5653A21D8E55D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:d1:aa:eb:99:56:87:2f:31:8e:11:20:1b:
                    4e:26:ab:10:26:03:17:8c:a3:1c:0c:10:06:ee:f0:
                    43:9d:0e:63:da:9b:1b:4b:0d:19:b6:40:91:13:3b:
                    70:2c:11:16:2b:ad:4e:6a:23:59:2e:de:19:0f:1c:
                    f8:a2:a9:2f:d1:50:32:04:b5:d6:dd:f7:59:9f:ac:
                    83:64:4d:bc:00:db:60:7b:b2:c0:8a:06:9a:8a:74:
                    b9:c0:77:a1:f6:97:aa:e9:0a:ba:38:c1:83:17:c8:
                    45:dc:a8:f7:8d:a3:e2:e0:33:be:31:a9:4f:9d:61:
                    35:53:34:e6:a8:40:45:d9:9c:70:1a:42:ee:05:8a:
                    3d:f3:69:8f:80:e8:85:36:47:df:9b:04:f8:85:aa:
                    40:fa:ef:87:93:30:81:57:db:c7:ac:e2:2d:49:bf:
                    b6:98:f1:43:bd:09:82:84:4c:94:92:1f:11:fe:99:
                    88:f0:d8:80:83:f7:d8:42:c5:3c:14:ce:78:5a:e1:
                    ca:f3:d9:ef:56:07:ce:68:e0:0b:1b:0f:df:ca:b2:
                    3f:76:2a:1d:37:6d:6c:84:6b:61:4a:b4:eb:41:5b:
                    ad:1d:e9:31:c1:b3:36:e3:a7:3b:b2:14:15:f1:e1:
                    6c:af:80:82:34:a3:a1:71:e3:05:ce:30:ce:43:84:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:CC:35:D1:90:1C:E6:85:9A:9E:78:D5:65:3A:21:D8:E5:5D:1A
            X509v3 Authority Key Identifier:
                keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:86:f4:7e:13:04:e6:03:b1:9a:ad:0d:f0:91:ad:63:10:10:
         6e:be:ec:7f:16:b7:80:a0:53:9f:a1:00:88:9f:e1:ea:1a:14:
         b5:4d:bc:9e:0b:5e:d3:a4:e3:1b:f8:1a:ec:51:ee:88:5f:31:
         51:3e:37:dd:b2:52:7a:34:5b:ec:ae:aa:3d:60:4e:34:d0:26:
         3f:8c:6a:cf:b1:cf:2c:6b:01:d0:95:49:2a:bb:14:a4:f4:47:
         fc:c2:9c:62:f1:4e:8c:05:82:18:a1:1a:8e:d8:9a:32:54:69:
         76:42:c0:da:21:e5:29:df:a3:5e:b8:33:2a:08:01:e5:dd:a0:
         0c:4e:3f:75:7e:24:cc:ff:43:77:3a:5c:83:85:10:61:a6:ac:
         bb:a7:e6:99:da:9c:2d:c3:f7:ef:6c:0f:69:33:5f:14:7b:62:
         10:39:ce:fc:4b:bc:f0:a7:c5:eb:b9:e1:30:7a:4a:82:a1:73:
         fa:5f:2c:a8:00:40:e0:7a:12:93:61:3c:e5:68:6c:00:0f:10:
         cb:c0:49:c7:7f:dd:f6:34:62:98:55:e1:53:63:6e:6a:06:ab:
         cf:d0:68:15:95:04:ea:f6:9a:ad:be:43:a1:1c:af:ca:86:fd:
         f6:3e:85:e1:82:fb:33:96:37:98:f8:4c:b7:59:6d:34:e8:d5:
         47:40:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:11 2026 by rpki-client