Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          dSei75OpciBNfcj/6s+mZVxJIm7+2YqfVXAGjeUznJg=
Subject key identifier:   E7:36:0B:FE:C0:A9:E6:1E:C9:E6:4F:C2:3C:50:AB:3D:4F:8C:03:A3
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       499B24F15DEE06EAF64D5380764510FD42D6C6BE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          49
Signing time:             Fri 29 May 2026 14:27:57 +0000
Manifest this update:     Fri 29 May 2026 14:22:57 +0000
Manifest next update:     Sat 30 May 2026 14:30:57 +0000
Files and hashes:         1: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          2: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          3: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          4: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          5: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
                          6: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          7: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: lPOyT1bnRWlAQCgbe4Qiwj3+iK28MulVB2nKK7kW71Q=)
                          8: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          9: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          10: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          11: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          12: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          13: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          14: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          15: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          16: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          17: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          18: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9b:24:f1:5d:ee:06:ea:f6:4d:53:80:76:45:10:fd:42:d6:c6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: May 29 14:22:57 2026 GMT
            Not After : May 30 14:30:57 2026 GMT
        Subject: CN=E7360BFEC0A9E61EC9E64FC23C50AB3D4F8C03A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9b:43:e0:57:d9:05:df:91:e6:3d:5b:70:27:
                    c2:f6:d2:ed:fd:4a:78:fc:df:f7:cf:d7:ab:39:65:
                    34:91:29:27:7e:95:23:a9:c7:08:f2:7d:0a:64:20:
                    4f:47:7f:86:69:24:04:81:84:67:1b:0b:62:6d:0a:
                    31:c8:5d:6d:2d:b8:1e:9b:1d:ad:f6:6e:cd:2f:38:
                    8a:38:e2:89:10:38:92:fc:e5:cf:3e:f4:6c:46:d5:
                    38:3d:98:12:6e:3d:3d:9b:f6:37:45:74:f1:55:e4:
                    91:6a:23:49:02:77:20:43:de:8b:c9:35:30:a4:66:
                    db:8b:a6:53:26:ba:d9:28:c4:46:6d:54:56:bc:b7:
                    47:3a:47:90:35:df:ed:92:37:33:ab:3c:3f:03:8b:
                    88:a5:59:7c:da:05:a1:8b:d4:82:77:b6:51:e5:67:
                    f8:40:41:98:b1:89:bf:2e:d8:87:7b:da:fe:fc:58:
                    7d:ae:18:d7:ac:8f:df:33:ad:9a:44:79:6c:c8:71:
                    43:8d:f6:8a:71:d6:59:d4:7f:bf:ed:fa:af:9f:38:
                    32:3e:95:56:76:60:78:95:ea:db:ce:6e:ed:fd:0f:
                    3a:5a:77:5b:fa:84:39:8e:48:86:19:99:d3:16:29:
                    27:cb:c3:19:22:83:3f:dd:55:1e:c0:04:d6:7b:9c:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:36:0B:FE:C0:A9:E6:1E:C9:E6:4F:C2:3C:50:AB:3D:4F:8C:03:A3
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:3b:40:ab:2a:a9:2c:2b:a1:0a:7f:3d:f3:fc:4e:d6:49:
         2f:f3:82:4f:4c:65:61:c8:4f:95:7d:12:2d:57:f8:1e:f3:47:
         e8:8f:4a:d5:72:9e:1d:1a:aa:2b:f4:46:05:a7:74:62:35:eb:
         71:c0:ac:7d:98:e4:97:24:dd:b0:6f:2d:61:00:78:e0:4f:3b:
         c6:2b:b0:06:6e:30:6e:1c:88:47:58:3d:28:76:c7:1b:55:71:
         70:c2:5f:de:a1:de:b9:da:b3:6f:2d:ba:f4:89:7b:15:7d:eb:
         42:fb:49:31:bf:4e:41:5e:b3:6e:03:01:07:ca:f7:18:19:68:
         25:83:74:0f:4e:cd:6e:9d:a3:0c:e8:3f:5d:e9:69:2d:c0:18:
         3c:ce:d6:8e:cb:ed:9f:88:c0:1e:18:80:31:11:2a:e8:0c:55:
         7b:6d:2a:16:1d:b6:09:c5:5d:4b:f1:f8:38:1c:34:0b:8d:49:
         a0:ee:d3:0f:c7:3e:02:ac:ee:56:df:40:ed:1e:47:13:3f:be:
         d0:4d:60:b2:10:79:c3:00:a2:ce:74:4d:1f:72:69:c1:b7:5f:
         91:8a:4b:14:39:b5:2c:e3:84:e3:20:8d:46:1d:41:66:5b:63:
         68:6e:25:c7:c0:d8:4d:f5:94:18:a0:16:24:6c:78:c3:11:6a:
         bd:cb:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:08 2026 by rpki-client