Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File:                     6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier:          KXe9Hxu4rl1NKJUoomrf4Ta/zHO9mrX/itZNyyvVyqE=
Subject key identifier:   BD:D1:88:BE:EF:76:83:10:21:81:92:4B:AB:90:48:59:BF:FA:98:2D
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       145A15884D06DB2FCC9E665ACE4B6B4E30E7E4E2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number:          AE
Signing time:             Fri 21 Aug 2026 16:55:12 +0000
Manifest this update:     Fri 21 Aug 2026 16:50:12 +0000
Manifest next update:     Sat 22 Aug 2026 18:45:12 +0000
Files and hashes:         1: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
                          2: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
                          3: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
                          4: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
                          5: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: Qph319SHEV7K5ANMUEUkSbrDVFlm1w5Iqt0P8Lrmf+I=)
                          6: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
                          7: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
                          8: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5a:15:88:4d:06:db:2f:cc:9e:66:5a:ce:4b:6b:4e:30:e7:e4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Aug 21 16:50:12 2026 GMT
            Not After : Aug 22 18:45:12 2026 GMT
        Subject: CN=BDD188BEEF7683102181924BAB904859BFFA982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:a5:40:48:dd:02:22:8a:d8:ca:21:78:ef:
                    24:3b:42:e2:e2:14:ba:5e:a6:7c:08:e2:f2:b5:40:
                    ec:ad:12:be:30:74:3f:af:94:ec:b4:ba:ce:27:d3:
                    05:3a:51:94:a6:b1:f3:d3:da:30:65:d4:d4:4f:58:
                    6e:24:9e:49:44:29:4f:0e:e3:a6:a7:45:88:a8:60:
                    b3:70:fa:18:a5:41:e2:75:2b:e5:f8:58:30:89:ec:
                    b5:8d:3d:0f:be:a7:c5:6a:6c:2f:45:00:9b:31:4e:
                    d9:ea:8a:46:01:90:8a:0b:96:e5:54:0f:71:13:b6:
                    28:c5:d2:93:d6:54:c1:61:4a:d7:18:b7:a4:ec:bb:
                    92:c9:41:1f:c9:0a:17:40:d6:b9:92:c7:d4:84:dd:
                    93:0c:06:d5:fd:69:cd:da:f6:d6:8d:f1:0f:12:54:
                    d7:9b:77:c5:03:fa:ab:b1:13:50:4b:85:03:cd:ee:
                    23:a7:e0:6d:f5:b8:03:ed:e5:d7:69:d6:bf:0f:3a:
                    e5:c2:07:75:89:80:a2:ae:53:38:61:25:a0:94:19:
                    86:0c:64:02:e9:30:84:b9:01:f1:9d:4f:36:28:b9:
                    88:7d:fb:8f:c3:e3:f5:a1:fc:c9:9a:dc:2e:09:8c:
                    b8:a0:2b:9c:47:16:6e:42:99:09:da:a8:90:4e:0f:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:88:BE:EF:76:83:10:21:81:92:4B:AB:90:48:59:BF:FA:98:2D
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:49:7a:23:2c:58:56:db:15:41:e6:04:07:7e:10:d2:dc:f8:
         71:16:8e:d0:78:06:10:5c:30:35:91:d5:22:1b:c7:b4:fb:ef:
         99:8f:d9:55:7c:d8:e5:45:5d:a7:5b:44:35:cf:3b:3a:57:7b:
         e4:d2:fc:70:b9:c2:34:65:2f:b8:84:ad:0b:9c:86:24:cc:38:
         e6:c0:90:3f:b3:e4:14:d3:bf:3e:00:19:1f:57:f2:61:83:a0:
         23:f0:25:ad:56:07:c8:a6:4b:a0:bf:73:3d:35:81:72:98:61:
         71:65:c1:e2:56:9e:22:b9:e4:d9:ed:7e:69:a7:95:f7:8c:87:
         ad:ce:dc:1c:bc:5e:ae:f0:b4:cc:b8:3e:2a:5d:fc:6b:70:de:
         14:81:a9:a1:33:97:36:c5:45:a8:02:34:92:d2:b6:5e:7b:2d:
         43:4b:b7:35:f4:71:23:68:81:df:71:31:18:ee:a4:83:e1:fb:
         9c:a7:c6:8f:f5:6e:94:c6:a4:ce:94:4e:68:6a:4e:e5:70:46:
         b1:85:8d:f1:4d:55:d4:a6:d0:c6:77:48:3d:a9:98:5b:c0:a2:
         f4:cd:c4:ae:1a:dd:59:f7:d9:c4:2a:7a:8e:22:2a:e9:6f:bd:
         a3:e5:21:99:e9:a9:52:3a:db:87:d2:05:70:80:9e:e8:ee:03:
         e2:88:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:24 2026 by rpki-client