Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          gMPUDqnmF34b1pnlm/mbri2om8QJ6UN/lvtS0CTJCts=
Subject key identifier:   9E:63:4F:4C:23:FF:6B:C4:C8:3A:0A:10:96:F6:3B:C6:7A:76:33:83
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       263D85F40C5B08A11BF04435360F272D400020B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          E9
Signing time:             Fri 12 Jun 2026 10:05:06 +0000
Manifest this update:     Fri 12 Jun 2026 10:00:06 +0000
Manifest next update:     Sat 13 Jun 2026 10:33:06 +0000
Files and hashes:         1: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          2: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          3: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          4: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          5: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: 5MVJxnLZq9yYrB2ul0L8RST+CabZyj5olmLLMDY41Mk=)
                          6: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          7: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          8: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          9: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          10: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          11: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          12: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          13: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3d:85:f4:0c:5b:08:a1:1b:f0:44:35:36:0f:27:2d:40:00:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Jun 12 10:00:06 2026 GMT
            Not After : Jun 13 10:33:06 2026 GMT
        Subject: CN=9E634F4C23FF6BC4C83A0A1096F63BC67A763383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:29:55:0d:f8:b9:4e:a6:81:4b:04:2f:7f:
                    c9:05:af:12:21:fb:e4:c3:36:ba:58:93:27:cd:d6:
                    7c:b9:7c:ec:df:6a:79:c1:f9:81:f7:e9:df:06:65:
                    ff:d0:98:28:69:83:53:68:9c:ad:96:f3:f1:19:1f:
                    55:b4:52:e6:e4:f1:c0:10:0f:4c:1d:53:ad:43:9b:
                    82:b1:bc:6f:b2:a1:29:97:6b:69:fd:34:fa:b5:80:
                    7d:b6:f8:38:19:64:1e:d8:f3:31:ba:3c:32:1a:9d:
                    62:1b:3d:b7:af:e7:b1:24:32:0a:de:bf:bb:95:77:
                    05:33:24:a9:d3:e7:4f:b4:63:f3:71:5f:be:75:9a:
                    be:de:b8:94:22:fc:8e:45:37:b6:7d:14:b0:67:b4:
                    eb:ab:53:e4:a2:ed:4f:dd:6b:d2:fb:c7:30:7e:06:
                    88:1a:11:d4:1a:44:59:28:3e:f8:88:c7:4e:f0:9d:
                    e8:cf:95:21:61:f8:9c:65:60:bb:d2:79:c4:be:a8:
                    b2:ac:6a:c2:b7:fc:83:7b:c9:2b:82:fe:30:a8:c2:
                    56:2a:8b:36:93:bb:a6:c4:af:a6:6a:4b:b5:8f:5a:
                    c6:d0:41:47:e0:25:9f:c5:a5:e7:5a:ae:83:97:fa:
                    27:b0:c4:ce:d8:e5:77:ae:5f:5a:5a:7f:81:5f:00:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:63:4F:4C:23:FF:6B:C4:C8:3A:0A:10:96:F6:3B:C6:7A:76:33:83
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:0b:f2:ad:fb:c7:a1:8b:7b:3b:d9:64:e4:d0:25:3c:f4:
         1e:b4:f9:b1:b2:46:d6:eb:cc:dd:2b:e1:c7:26:8e:11:06:d5:
         8d:d9:d8:b4:9a:3a:a9:ea:c6:b8:0e:47:92:38:b6:bf:f6:da:
         9e:8d:fc:2e:55:45:1e:98:e2:e3:7c:65:95:cc:47:1d:7c:ca:
         7c:98:ae:eb:af:3c:66:c5:1d:cb:17:96:51:26:2b:a7:fa:bd:
         6c:63:ae:3c:62:f9:12:31:c1:fc:3b:ef:8a:46:e6:6a:48:61:
         60:83:1d:b1:b8:79:f0:4c:e0:98:9c:5b:a4:e0:95:a7:fe:a8:
         bd:3a:d0:5e:9a:d6:16:72:39:d0:d9:e6:88:b5:53:22:d8:3c:
         40:b5:3d:70:01:65:8e:3a:60:e8:29:3d:64:82:19:3b:28:24:
         01:32:67:4a:6d:01:1c:45:9d:8a:c5:03:e9:59:a5:e9:de:d1:
         d7:a9:62:9d:9b:4e:20:82:10:69:54:65:9c:c7:d8:f8:66:cf:
         db:67:3c:20:f5:a7:c6:85:b3:cc:6a:72:c3:00:a6:1f:0b:84:
         ff:f3:42:f0:2e:86:82:59:42:a5:0b:2b:71:25:5a:57:20:26:
         9f:d2:22:ba:8b:01:9d:05:dc:27:14:93:11:86:ab:03:bf:14:
         a8:2b:81:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:27:51 2026 by rpki-client