Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          kSzRfvLaBwutS2YdkEhgDW1Ep1evUh7eiN2uVwMyjK4=
Subject key identifier:   DF:AB:C7:45:8B:D4:5D:C9:7E:AD:6C:FC:12:41:63:4C:98:41:EB:98
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       07913E77D13785F21572660CCEE689AC664A12E4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          012D
Signing time:             Mon 06 Jul 2026 08:16:14 +0000
Manifest this update:     Mon 06 Jul 2026 08:11:14 +0000
Manifest next update:     Tue 07 Jul 2026 11:13:14 +0000
Files and hashes:         1: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          2: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          3: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          4: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          5: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          6: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          7: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          8: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          9: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          10: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          11: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: HvMFrLwygp57kpP9eNF2MBvGP64nEabCwIvJa7jjAWQ=)
                          12: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          13: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          14: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          15: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          16: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 11:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:91:3e:77:d1:37:85:f2:15:72:66:0c:ce:e6:89:ac:66:4a:12:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Jul  6 08:11:14 2026 GMT
            Not After : Jul  7 11:13:14 2026 GMT
        Subject: CN=DFABC7458BD45DC97EAD6CFC1241634C9841EB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:d1:1d:33:91:f4:d9:cc:96:6b:9f:d3:cd:
                    70:3a:d7:82:72:6e:39:3e:3c:87:a5:b3:cd:18:c6:
                    5f:3b:96:1b:71:2c:1f:8b:a5:e4:31:89:a4:5e:28:
                    b4:bf:b7:ac:80:ea:9d:bc:a7:82:0e:0e:b5:23:40:
                    c4:aa:ca:9c:4c:34:fb:ce:4d:a6:b3:5c:bf:87:fc:
                    5c:23:2e:4e:3b:d6:31:8f:9a:f3:4c:a1:99:42:3e:
                    81:98:b7:f4:92:37:0f:d2:cd:0a:e0:19:e0:3f:b5:
                    f4:62:de:9b:0e:a9:5f:ee:ff:4e:7c:1a:d8:34:37:
                    bb:9f:bd:93:31:d9:ae:62:98:66:64:c7:10:a6:70:
                    32:40:e6:3e:78:7e:8f:7b:7e:09:e5:b6:60:d0:13:
                    af:e3:67:d8:07:ec:e8:f8:b9:b9:f2:c5:f0:34:e2:
                    59:21:1e:6c:af:15:fc:e2:be:04:a1:e1:74:46:f7:
                    ba:55:08:0a:c0:60:60:1b:fc:7a:51:a6:7a:a9:9e:
                    35:4a:43:39:12:8c:ea:1a:82:3d:20:73:d6:16:ae:
                    d4:47:aa:7b:fc:41:f8:9f:df:c1:45:92:04:fa:bb:
                    ec:8a:d9:b9:65:93:0a:7a:b9:2a:62:11:72:4f:c9:
                    2c:1c:ef:17:d3:c1:83:24:ca:11:32:a1:51:b6:6c:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:C7:45:8B:D4:5D:C9:7E:AD:6C:FC:12:41:63:4C:98:41:EB:98
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:07:af:ab:67:3b:28:c6:ce:83:4f:61:4b:74:39:bc:40:
         ea:f2:48:fc:c8:72:51:06:2c:44:fb:9d:58:04:02:a6:5e:70:
         fe:ba:86:54:7f:1e:46:7b:3e:74:d5:60:13:a0:95:5f:ca:c6:
         41:d4:01:16:dd:5a:f5:68:90:1b:ae:c3:e9:52:73:02:47:06:
         c5:06:15:2e:c4:88:31:4d:28:f9:c5:38:2e:32:12:f3:5e:7f:
         16:db:18:de:31:4d:28:b2:23:cf:b7:68:2d:fd:ff:ad:be:25:
         45:55:f9:d3:3b:4c:5f:a4:ca:58:1b:5e:01:14:fa:72:20:3a:
         8b:83:ae:87:e6:30:30:3a:42:89:02:16:38:42:d8:af:dd:a0:
         51:ca:b5:9d:a1:d8:06:ff:70:d5:67:8d:a3:e4:ee:7b:49:68:
         55:84:4f:e8:e8:07:59:82:85:46:83:6f:b2:f7:a1:b6:50:cd:
         dd:cd:25:ef:2f:59:fb:69:37:7a:cc:db:ad:38:71:11:c1:10:
         38:02:f1:99:ff:6d:4d:f5:18:06:33:2f:77:92:bd:eb:d1:32:
         e9:56:e2:14:2a:cf:52:f8:ba:aa:af:77:4e:e0:e9:53:b0:8a:
         ca:75:6e:45:45:30:56:10:3e:3a:59:9f:e4:8d:8e:1f:1e:db:
         6d:d9:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:07:51 2026 by rpki-client