Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
File:                     6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json)
Hash identifier:          PZFTSBkvsf242tLEH1O/8LncUMWFb39ziwGKapFJ+Nc=
Subject key identifier:   70:56:14:69:FD:81:24:C9:A5:DD:83:5A:F4:9F:AA:63:29:C1:D0:B2
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       5AE34E77F55E8E57B6EA54A8635AC96F0761D175
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
Manifest number:          DE
Signing time:             Mon 12 Oct 2026 11:56:55 +0000
Manifest this update:     Mon 12 Oct 2026 11:51:55 +0000
Manifest next update:     Thu 15 Oct 2026 16:01:55 +0000
Files and hashes:         1: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=)
                          2: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=)
                          3: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: kQFkn+HVOi8sTjZxkQn0O/wVvGizzDqL+vIVamObf0I=)
                          4: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=)
                          5: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=)
                          6: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=)
                          7: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=)
                          8: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=)
                          9: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:4e:77:f5:5e:8e:57:b6:ea:54:a8:63:5a:c9:6f:07:61:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Oct 12 11:51:55 2026 GMT
            Not After : Oct 15 16:01:55 2026 GMT
        Subject: CN=70561469FD8124C9A5DD835AF49FAA6329C1D0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:e0:df:07:17:25:01:60:69:17:da:91:e4:
                    14:f6:a3:e7:3e:16:3b:6b:ff:42:3f:f7:f7:56:90:
                    97:8d:07:f6:de:38:15:60:63:cd:c9:ee:27:8c:b7:
                    25:23:6a:13:5b:7e:59:83:a3:8e:aa:de:eb:76:0d:
                    4d:60:ba:a2:45:06:97:1a:66:b9:25:e3:3a:c9:0e:
                    33:d5:07:b2:d0:88:75:f9:85:9f:86:bc:04:d6:bd:
                    d4:38:b3:f4:77:25:e0:7e:81:f1:36:21:20:ab:c4:
                    f1:ee:9c:6d:da:48:ca:c3:80:49:83:80:da:95:da:
                    0b:ce:0c:4e:5c:22:9c:5d:69:ad:e4:f0:6c:44:f5:
                    2e:20:61:56:45:f6:70:ad:bc:fb:3b:5d:d5:ca:31:
                    51:a2:f4:82:db:13:76:92:95:15:95:5d:eb:82:4a:
                    4c:15:16:46:df:3b:79:81:23:3b:b8:35:1c:33:b8:
                    e1:b1:89:1d:f7:fa:1d:79:56:09:88:55:ea:2d:be:
                    21:62:51:62:91:b8:c4:57:1a:4e:aa:81:f4:36:e4:
                    71:c9:1c:8a:c8:c5:f3:d9:f5:e2:8a:ed:be:db:8a:
                    a0:53:0d:ac:26:e6:ba:57:4d:01:d6:35:65:86:09:
                    fe:df:4d:a0:93:f2:ff:e6:7f:eb:44:3c:5c:9b:16:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:14:69:FD:81:24:C9:A5:DD:83:5A:F4:9F:AA:63:29:C1:D0:B2
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:4d:8c:d3:a5:3e:00:1f:8c:78:a3:99:2c:20:01:2b:d9:
         80:38:f0:7c:ac:50:cd:70:4a:5c:a6:45:c6:e4:5a:66:26:5a:
         46:32:45:9f:36:3f:a3:5f:b2:55:9f:21:e1:d2:9b:ad:39:79:
         3d:c4:26:e0:c7:57:7d:2f:b2:d5:85:e3:51:01:dc:7b:2b:2a:
         bd:c8:dd:54:5e:d6:bc:29:5c:38:a3:47:c8:41:ac:f9:be:1f:
         0d:6d:51:27:46:6a:3c:e4:f2:a2:3d:f9:b8:9e:03:29:e8:f4:
         ff:83:4b:5a:72:48:1d:9a:e6:c8:18:af:6c:78:89:2c:68:8e:
         c8:4a:67:f3:47:45:e8:9d:61:fe:3f:0c:b3:46:83:9c:9f:69:
         35:ef:b1:95:51:06:80:17:7c:7c:46:7c:7e:8c:a4:f7:87:52:
         b1:ac:5e:8d:ac:c3:3e:c8:5a:fa:58:b1:89:03:cb:08:02:74:
         d6:22:0d:d7:26:bc:9f:be:ac:08:1a:b0:29:fd:2a:c6:cc:c0:
         3d:f5:1e:28:e1:64:82:d5:56:6f:14:9a:e7:2e:1e:9d:4e:00:
         bc:63:0d:fc:ef:af:ef:29:b5:ce:ae:9e:ce:37:e9:d3:46:58:
         b9:a1:2a:0c:85:cf:ea:d0:96:19:47:23:28:f5:69:5e:a9:d9:
         c1:98:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:15:56 2026 by rpki-client