Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File:                     6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier:          gLISWM8yWU4Vm8Abmjz6iBcxOmIKg/zVpdxIO27np/M=
Subject key identifier:   26:B6:77:2D:17:43:5F:83:C6:6B:81:36:79:F8:89:9F:45:04:88:CC
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       068DAF82D12BCC56237A69342DE7065927457397
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number:          71
Signing time:             Mon 06 Jul 2026 17:52:27 +0000
Manifest this update:     Mon 06 Jul 2026 17:47:27 +0000
Manifest next update:     Tue 07 Jul 2026 21:32:27 +0000
Files and hashes:         1: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
                          2: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
                          3: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: Y2m65t1WhGwaue8uwyHiqK6pdsDewavuxag+jkw1VL0=)
                          4: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
                          5: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
                          6: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
                          7: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
                          8: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 21:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8d:af:82:d1:2b:cc:56:23:7a:69:34:2d:e7:06:59:27:45:73:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Jul  6 17:47:27 2026 GMT
            Not After : Jul  7 21:32:27 2026 GMT
        Subject: CN=26B6772D17435F83C66B813679F8899F450488CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:f7:fc:15:d5:04:30:92:98:ff:7f:1c:89:
                    54:26:2c:22:19:fb:15:26:5e:ff:ae:82:74:0c:0e:
                    13:d0:88:7a:45:24:97:0f:e5:62:6a:d5:65:8c:df:
                    eb:b4:79:2f:2a:83:e8:63:2e:c0:48:34:59:9f:e7:
                    e7:b1:50:ad:38:a6:a1:aa:24:cd:8f:51:47:e2:d6:
                    35:06:da:1c:dc:66:35:02:3e:46:e0:c7:bc:9d:89:
                    30:41:b5:c2:1c:81:61:4b:a0:d9:8d:fc:c0:45:49:
                    ac:d7:1e:48:84:c4:f3:d9:d1:99:37:ec:a4:1c:c2:
                    cd:bc:76:31:40:58:3b:81:a0:00:93:58:f3:f3:67:
                    14:52:0e:36:98:59:39:1a:27:4c:f9:b5:75:e3:3d:
                    12:c3:84:c4:8a:90:38:80:7d:6c:ce:c2:6a:4d:0c:
                    fa:d1:2a:fb:c8:5e:02:ef:4f:48:0a:3f:5a:ca:09:
                    a4:92:63:e2:34:bd:c1:e6:4a:5d:58:19:42:0f:ac:
                    d3:d7:0d:49:57:db:04:d1:c6:1f:08:40:29:45:41:
                    67:d9:66:57:8d:1d:7a:b9:77:ae:05:dc:13:ff:8e:
                    25:dd:7a:92:20:da:47:6c:12:3d:c6:72:fd:2c:ab:
                    2e:63:74:62:db:78:4e:b5:a9:56:30:59:a3:28:60:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:77:2D:17:43:5F:83:C6:6B:81:36:79:F8:89:9F:45:04:88:CC
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:92:71:ff:52:8f:c5:7d:7d:6c:9e:91:9c:28:37:64:3e:6d:
         2b:84:7c:d1:07:c1:22:f6:c5:ec:a6:e4:4f:85:04:f0:45:a4:
         ab:57:b1:5f:f4:bd:42:af:28:54:8b:b0:47:53:2a:bd:2a:28:
         7f:4a:28:a1:55:c8:92:ae:33:16:2a:98:a3:e7:56:59:ee:0a:
         c2:1c:2d:65:1d:3d:7a:83:a1:a8:b3:1d:7b:f6:4e:62:6c:29:
         da:27:87:2c:9a:c7:13:38:f7:89:c1:8b:46:53:4f:f8:42:e7:
         9e:a0:a7:12:7b:ae:75:7a:97:45:6c:4a:89:9c:9a:12:33:81:
         04:90:b2:df:06:03:b7:f5:7f:17:05:f1:02:d8:f9:ef:60:c2:
         d8:9e:7b:6d:3e:0c:5e:49:f8:4f:91:80:c5:13:c8:0e:ed:60:
         07:ea:5d:1d:b0:bf:07:75:d6:f0:d0:5a:b8:ff:de:ae:5d:e6:
         bd:3d:eb:61:b3:c6:d7:52:18:c4:79:0b:de:4a:cd:56:02:f6:
         43:a2:0f:05:b5:64:e4:fc:64:ea:48:dd:8b:a8:35:ab:92:26:
         e9:69:9f:ae:45:ef:11:5b:2a:d8:dd:da:48:a8:fc:91:9b:29:
         ca:7d:21:0d:54:ac:37:b7:47:ba:c1:c0:21:29:f7:42:d1:c6:
         9b:df:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:30 2026 by rpki-client