Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          MYx1iIVgTyZhd8laLMdRN0t9NTErXyS25Dr4OY+UhJU=
Subject key identifier:   D2:C9:F9:D7:FB:1E:58:7B:F0:98:12:89:35:AF:37:81:B8:3F:FE:18
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       68C8956F8AB7A7BCEE62CC8D1AEBAB4ADBEA4A46
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          F1
Signing time:             Fri 22 May 2026 05:01:50 +0000
Manifest this update:     Fri 22 May 2026 04:56:50 +0000
Manifest next update:     Sat 23 May 2026 05:39:50 +0000
Files and hashes:         1: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          2: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          3: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          4: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          5: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          6: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          7: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          8: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          9: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          10: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          11: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          12: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          13: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          14: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          15: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: X372KwFwdhGP6u1moxaH0qDvinLZXyZMb3vWAJ3T8Wc=)
                          16: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 05:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c8:95:6f:8a:b7:a7:bc:ee:62:cc:8d:1a:eb:ab:4a:db:ea:4a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: May 22 04:56:50 2026 GMT
            Not After : May 23 05:39:50 2026 GMT
        Subject: CN=D2C9F9D7FB1E587BF098128935AF3781B83FFE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:6a:2a:d1:3c:8f:48:16:c1:76:7c:ac:30:
                    35:30:7a:44:63:e6:a7:be:68:72:57:19:51:15:b7:
                    67:ba:55:4a:fb:7a:3b:27:23:bc:fc:b9:77:74:4e:
                    63:d5:42:72:70:3d:e6:7e:b9:5c:c3:f8:81:10:af:
                    3e:2e:4a:a0:f3:e0:4b:17:7a:77:de:97:f1:a8:b1:
                    9c:ff:97:f8:a0:49:53:7f:80:ad:c3:04:36:a7:af:
                    8d:d8:a2:ce:5d:0f:36:99:1a:d0:84:27:35:9e:30:
                    b6:2f:41:93:15:89:11:0c:22:d8:1d:bd:c3:0c:79:
                    c7:67:00:74:9e:4f:04:fd:75:6c:e5:6f:96:cc:3e:
                    4c:26:a3:c5:6c:8b:36:34:6f:f1:a2:99:da:d9:b5:
                    70:08:29:ed:52:09:f9:bc:8f:60:20:52:cf:d6:f5:
                    e7:fe:4a:0b:23:91:75:f3:22:7a:6f:4d:98:55:52:
                    ea:47:29:e0:03:24:1f:03:3f:7f:4a:8e:23:a5:64:
                    e1:a7:dd:52:ac:6d:a6:ef:53:b2:81:26:23:1a:4b:
                    4f:9a:40:be:16:23:58:3b:e1:4a:f4:17:5c:a9:99:
                    7b:fb:a4:16:3b:fa:84:68:09:68:dc:c3:25:87:41:
                    1f:01:d3:c0:75:7c:80:94:94:b0:d7:5f:d3:32:aa:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:F9:D7:FB:1E:58:7B:F0:98:12:89:35:AF:37:81:B8:3F:FE:18
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:15:12:cb:65:e2:05:89:38:94:ca:f1:e7:50:c3:5b:de:
         df:5e:7b:69:16:d1:43:7c:ad:e1:7d:f5:f2:e2:1f:1c:99:e4:
         77:14:39:fb:ad:91:24:66:43:30:69:d1:a7:71:1f:80:28:d1:
         64:28:5f:58:c1:34:c6:52:b3:f6:09:71:7e:33:25:ec:2a:17:
         d5:85:c4:50:41:6d:8c:ec:39:0a:17:58:d5:07:d0:aa:6c:46:
         a8:ba:7c:33:fc:99:1b:6a:56:70:fe:2e:db:9d:37:02:34:5c:
         d3:c8:32:c7:19:21:28:5c:33:2b:ea:7f:aa:bb:12:5f:76:97:
         13:19:e8:16:61:d9:38:a8:1f:00:3c:85:25:6c:3b:f4:55:ab:
         4a:3c:d9:1d:1b:ca:3a:06:ab:77:12:1a:2c:1f:00:26:8d:9f:
         fb:b8:a3:74:30:00:42:60:89:e5:1f:c9:12:31:06:ac:f3:50:
         a0:3a:43:b2:6e:3f:89:5b:a7:bb:13:03:cd:63:f8:d6:f5:f5:
         60:e5:cd:42:56:9b:46:d6:a8:b2:d7:46:00:e0:c2:19:2a:28:
         d8:cb:dc:2b:7d:0a:a9:95:67:89:dd:2c:7e:5c:22:55:1c:10:
         7b:8b:7e:ac:ad:42:4b:b9:c3:cd:03:92:ea:13:86:99:6f:6e:
         2f:61:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:34 2026 by rpki-client