Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
File:                     6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json)
Hash identifier:          O/O/dYKtF5Fm7UCdESYf8jB+k+0NDnI+sdMiQefs80Q=
Subject key identifier:   5D:E8:03:94:66:56:A3:8D:9A:5A:75:2C:BA:4B:EB:4F:ED:4E:FB:F6
Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
Certificate issuer:       /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Certificate serial:       1233FB9C0511D0EE93985321D7E87B7191023613
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
Manifest number:          3B
Signing time:             Fri 29 May 2026 07:27:42 +0000
Manifest this update:     Fri 29 May 2026 07:22:42 +0000
Manifest next update:     Sat 30 May 2026 07:57:42 +0000
Files and hashes:         1: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: MyQzWZ1LpdSiubdJU97+cXN9aXu39VLM0QD3k8h6pFU=)
                          2: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=)
                          3: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:fb:9c:05:11:d0:ee:93:98:53:21:d7:e8:7b:71:91:02:36:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
        Validity
            Not Before: May 29 07:22:42 2026 GMT
            Not After : May 30 07:57:42 2026 GMT
        Subject: CN=5DE803946656A38D9A5A752CBA4BEB4FED4EFBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:1a:f4:48:5a:10:2b:6d:b9:59:ff:4b:db:
                    f7:4d:93:81:e9:d2:91:5a:d7:04:50:2e:4b:07:14:
                    71:2e:bf:a0:fe:f0:c7:81:39:3e:b7:96:23:b5:54:
                    c5:9a:e5:02:74:82:62:71:d2:d6:57:f9:a4:c2:24:
                    4e:c1:dc:19:5a:ab:d2:64:96:ef:f6:b4:53:26:8e:
                    71:36:26:4c:ba:3e:d1:24:7c:be:94:5a:08:f9:fa:
                    85:93:c3:a8:eb:56:c9:f0:5a:f8:8b:21:17:42:e2:
                    11:5c:76:2c:fc:6d:c9:be:97:e2:ed:e2:e4:06:5f:
                    87:47:bd:d8:59:92:a9:69:1d:a2:9f:a8:8f:72:4a:
                    c5:a4:e7:59:f6:13:b0:1d:88:bc:2a:34:4b:68:15:
                    d6:f1:5c:f7:5d:7f:e3:a4:f3:84:88:0c:4b:72:7c:
                    4c:ba:e1:f6:35:2a:7c:46:86:b0:b3:9d:06:83:1a:
                    cc:3d:22:6c:c4:ee:fb:07:38:58:e4:60:57:08:18:
                    26:56:ec:29:11:a9:b0:0e:a6:37:20:8a:f4:0c:ff:
                    56:85:86:d7:cb:3d:8c:57:db:cf:75:a6:36:72:10:
                    e3:1e:62:d4:77:8c:6a:74:16:cb:5c:5f:d5:87:49:
                    5e:93:c5:8a:92:55:39:30:90:1f:a2:71:67:de:5b:
                    7e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:03:94:66:56:A3:8D:9A:5A:75:2C:BA:4B:EB:4F:ED:4E:FB:F6
            X509v3 Authority Key Identifier:
                keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d1:87:8f:fe:f5:52:3c:84:8c:60:2c:81:69:6c:75:b5:71:
         44:9b:2a:20:ce:83:e5:cb:50:40:fc:d5:c3:b9:dc:f4:01:9d:
         8e:5c:34:02:de:3c:dd:2c:ca:33:2b:ea:1c:69:ea:7f:62:5a:
         b1:a1:db:79:02:85:79:a4:5d:18:11:bc:c0:ae:f8:9e:8f:d9:
         2d:d3:3d:b7:18:e2:c5:31:1d:5f:56:36:ed:f1:5e:14:b9:6b:
         65:21:bc:2e:c2:2e:9e:bb:a9:21:2c:b6:55:39:5e:c9:c2:1d:
         75:ec:9b:b1:5b:c9:6a:99:12:e7:4d:76:31:01:a2:04:c2:87:
         0a:fc:e1:a7:a7:29:24:af:53:92:6e:9c:e8:45:05:ff:85:83:
         ed:2e:0b:bc:e7:ef:45:8f:80:4b:d0:3d:77:ab:5c:d4:42:56:
         39:c6:e5:e4:ae:9d:80:5e:de:2f:f6:80:7c:9d:2c:9d:8b:d2:
         e7:bc:4e:62:fd:6f:b0:41:33:7d:57:60:b6:d7:c1:f6:e1:0f:
         74:5b:3e:b9:ca:9a:c8:09:b4:ab:0e:f0:79:61:55:d6:72:9b:
         2a:e4:39:4d:a4:c4:24:5a:d9:c2:71:d9:6e:86:8a:b7:f2:47:
         6e:ae:6a:10:81:a6:5d:cb:32:7d:52:2c:c9:14:48:94:ec:53:
         b3:14:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:39 2026 by rpki-client