Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
File:                     6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json)
Hash identifier:          ATxH4aZsEf+cIhSx/fYCq42R+wWvnOPHqs2QNQqngzU=
Subject key identifier:   1C:A8:72:C9:A0:09:7E:2E:95:E7:CD:97:33:03:25:C0:A8:7D:C1:78
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       62BAFE7955235E2A1491EDA98306048753811B23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
Manifest number:          51
Signing time:             Fri 29 May 2026 10:37:46 +0000
Manifest this update:     Fri 29 May 2026 10:32:46 +0000
Manifest next update:     Sat 30 May 2026 11:12:46 +0000
Files and hashes:         1: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=)
                          2: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: IK0MQTr2TkNrIjQF3mZjlt5xhPttD1pYFR4N4UjMQ1k=)
                          3: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=)
                          4: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=)
                          5: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=)
                          6: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=)
                          7: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=)
                          8: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=)
                          9: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 11:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ba:fe:79:55:23:5e:2a:14:91:ed:a9:83:06:04:87:53:81:1b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: May 29 10:32:46 2026 GMT
            Not After : May 30 11:12:46 2026 GMT
        Subject: CN=1CA872C9A0097E2E95E7CD97330325C0A87DC178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:dd:e1:0a:a0:3b:64:61:66:cd:99:7f:fa:
                    a6:14:e8:3e:aa:c6:ae:f9:74:96:c9:83:38:07:b4:
                    5c:7f:80:21:2c:67:0b:ca:60:83:68:82:23:29:fe:
                    e5:17:7d:7a:8b:03:df:59:1c:7b:b8:21:a0:7c:5b:
                    41:0e:c2:44:7e:64:1d:88:96:2c:aa:86:42:80:a7:
                    a4:09:8c:7c:4b:e1:32:be:0c:5d:56:20:10:95:2d:
                    db:ae:21:bc:d3:8d:7b:7e:da:4a:9e:c1:38:6b:72:
                    7a:d1:3b:4c:0e:a4:2f:d5:44:05:70:70:02:04:dd:
                    71:c4:ee:b0:35:74:82:de:18:90:fe:db:7b:0c:db:
                    70:86:e7:f0:08:b3:cd:39:ac:3c:87:28:00:8b:61:
                    15:ef:53:20:ca:e2:63:8c:20:2f:66:ef:b1:28:e2:
                    01:e4:c0:6d:0f:51:58:31:ab:e2:41:aa:5a:b8:33:
                    fb:c9:37:44:8b:7d:69:5f:79:25:4f:30:92:0e:6f:
                    4f:8a:13:bc:dc:b1:39:95:66:48:86:6a:b7:7f:f7:
                    69:fc:91:8c:fe:6e:d6:ee:26:3a:72:d9:48:a1:4c:
                    01:24:3a:76:18:4e:9f:91:2b:14:b2:40:5f:c7:9b:
                    09:a2:71:bd:88:85:62:7e:79:3d:f7:a0:8b:51:96:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:72:C9:A0:09:7E:2E:95:E7:CD:97:33:03:25:C0:A8:7D:C1:78
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:75:f8:5a:a2:47:e6:2c:a9:48:a5:61:61:af:cd:cd:d9:34:
         35:01:b0:27:e1:57:65:64:6a:b0:d6:6e:95:14:e9:c6:d8:67:
         2c:4f:93:f8:45:cf:e9:4d:81:58:1b:c7:01:bf:1d:63:4f:71:
         c2:1e:4b:13:d9:4d:b2:41:03:de:a8:d0:5b:b7:30:47:d6:1c:
         97:bd:dd:33:e6:e9:60:2d:c1:7d:43:1a:35:78:50:f9:ca:89:
         60:ca:f5:ad:78:1e:5a:31:34:a8:11:fc:40:49:03:6b:ec:b3:
         a0:07:b4:e2:dd:85:fe:6b:6f:8e:c7:92:f7:2c:df:a4:7a:ed:
         a6:fa:fa:05:d7:be:d1:44:81:91:05:3b:8d:2b:c5:7c:61:3b:
         50:28:dd:c8:56:f4:ad:7e:c1:0d:8d:42:f0:fc:75:49:37:21:
         1a:c6:ac:a4:a6:9a:0f:09:0a:79:24:df:3a:c0:77:54:33:aa:
         31:98:b3:18:81:6f:03:05:4c:7b:1b:b5:db:1c:06:79:15:5b:
         09:98:26:63:14:54:0a:89:15:80:de:9b:36:8b:71:7f:64:b6:
         69:a3:bf:a3:20:20:88:17:de:80:00:d5:b6:9f:65:cb:7d:20:
         34:86:95:3a:59:fd:da:fe:84:e8:2b:0b:9b:65:6e:c0:db:9b:
         7c:ec:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:30 2026 by rpki-client