Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          e5+UAzyCkwy1JBOPGz8Su0V+722E83yRzCsVnx/MNLU=
Subject key identifier:   5C:A2:F7:16:DB:F6:32:DA:2B:86:41:9F:19:A9:58:46:2E:4B:69:48
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       0A03C8EB9EB66D925C3ACF0263BC34362400395A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          86
Signing time:             Tue 14 Jul 2026 10:06:01 +0000
Manifest this update:     Tue 14 Jul 2026 10:01:01 +0000
Manifest next update:     Wed 15 Jul 2026 12:04:01 +0000
Files and hashes:         1: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          2: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          3: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
                          4: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          5: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          6: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
                          7: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          8: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          9: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          10: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          11: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: baG9uZ4C0JjxRNzblIonHGUD+57M8AdyyF46frofdNU=)
                          12: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          13: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          14: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          15: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          16: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          17: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          18: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:03:c8:eb:9e:b6:6d:92:5c:3a:cf:02:63:bc:34:36:24:00:39:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Jul 14 10:01:01 2026 GMT
            Not After : Jul 15 12:04:01 2026 GMT
        Subject: CN=5CA2F716DBF632DA2B86419F19A958462E4B6948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:93:f9:77:be:af:46:d2:08:71:77:2e:71:
                    78:b2:77:1b:66:d8:22:a4:1e:72:e0:12:d3:55:4c:
                    0a:f7:b9:c3:b7:e9:c9:e0:1b:de:56:e0:2f:4d:3d:
                    06:9b:34:6a:75:3b:8c:27:a6:4a:b0:30:37:6a:64:
                    f3:f6:c9:d1:0a:07:ca:9c:ce:b6:cf:78:47:6b:5d:
                    fe:2e:4d:b7:d9:9e:ff:55:e6:fc:26:e5:fc:18:f4:
                    96:0c:20:78:a4:9e:5e:8b:78:dc:90:20:5e:83:93:
                    f7:cb:a6:1d:83:74:2c:1c:d2:64:ba:6c:84:8f:9d:
                    45:33:34:c7:3a:c5:68:3d:32:ca:f0:58:41:44:c5:
                    b2:41:b5:8e:ff:6a:3d:2d:cb:de:55:bb:b2:af:2f:
                    79:b0:4a:ad:3c:b1:b2:f4:87:cb:0e:b6:ea:c6:6d:
                    5c:73:f4:3b:9b:26:18:25:74:19:76:ab:65:15:be:
                    95:51:b7:6e:14:06:94:bd:b5:21:48:ba:c8:eb:c1:
                    0f:a3:fa:29:55:24:45:29:81:11:f0:92:3b:ef:61:
                    fd:76:e5:4c:da:43:bb:15:df:26:6d:b8:2c:5b:bb:
                    c0:7e:77:a6:48:1a:f6:81:d2:2f:c3:62:0d:f8:95:
                    eb:e9:5e:1b:4e:d2:c5:88:63:cb:29:44:09:7c:80:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:F7:16:DB:F6:32:DA:2B:86:41:9F:19:A9:58:46:2E:4B:69:48
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:8a:00:44:94:69:65:ac:5e:3b:2d:79:05:d9:a8:19:0a:
         3b:fd:5d:ca:25:29:05:b7:28:b0:f9:a9:92:dd:eb:54:65:68:
         e7:a1:71:9d:1e:cd:7b:51:6c:81:76:c7:94:59:70:5c:38:64:
         e5:a1:05:ca:aa:53:ca:80:c5:b7:a6:bb:36:7b:59:ab:59:d2:
         72:78:c0:1a:61:56:b8:7c:4e:ef:20:88:45:9b:df:26:1b:0f:
         b1:74:b0:cb:3a:65:ff:03:da:de:64:b9:74:5c:6f:d8:d0:35:
         fa:6d:2b:7a:30:e8:1c:1f:1e:5b:ff:6f:ea:cf:40:9a:4f:8b:
         d5:4d:f8:9f:f8:a7:e5:56:dc:90:6f:c9:c1:e2:b5:11:bd:8e:
         df:2f:73:22:d7:23:06:b7:91:3f:c6:49:ae:00:5b:e1:81:b3:
         a2:47:51:7f:cd:9b:53:94:23:b1:26:67:4a:e8:c0:80:f5:a0:
         3a:ff:04:56:dc:b4:e7:df:e1:31:1a:65:8c:bd:41:c5:95:6f:
         d0:30:74:d8:ac:17:42:6b:29:4a:9e:0d:16:2b:af:4d:74:91:
         2a:4f:c8:d3:ea:6f:c8:64:99:e5:22:e5:84:33:e1:3b:18:89:
         ac:ce:4f:4d:50:9c:a3:09:b4:59:0c:da:6c:86:35:1b:65:89:
         e9:f2:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:58:26 2026 by rpki-client