Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
File:                     6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft (raw, json)
Hash identifier:          NsZiEb41GoIZBJi7xxXpb3ni/2pVrDcrvEnYuzejVsk=
Subject key identifier:   A6:9B:71:07:6E:69:72:C6:AC:C5:F0:C5:9B:69:C5:9C:9F:83:6D:6D
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       0353005C79F0D96A087AE6FF3EEA86643C298996
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
Manifest number:          7D
Signing time:             Tue 14 Jul 2026 10:11:02 +0000
Manifest this update:     Tue 14 Jul 2026 10:06:02 +0000
Manifest next update:     Wed 15 Jul 2026 11:22:02 +0000
Files and hashes:         1: 3132352e3235342e3136382e302f32312d3231203d3e2039383038.roa (hash: jIBaOQf/G7rNS/DVWjE6H4dhEL1mXI4wvD13/gtpmAU=)
                          2: 34322e36322e302e302f32312d3231203d3e2039383038.roa (hash: EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=)
                          3: 3132352e3235342e3137362e302f32312d3231203d3e203233373234.roa (hash: ZSgRpA/5spQ7+nn24xwWT1dkpORgmEl9Tobd39U1oL4=)
                          4: 3132352e3235342e3136382e302f32312d3231203d3e203233373234.roa (hash: gj+UmcoP7t9OxmOHfB+/nZrnXWANKJKXP2VI5gBrjmM=)
                          5: 34322e36322e38352e302f32342d3234203d3e2034383038.roa (hash: d6s6STG5xAhM+Q03cuASnNG/lEicPG7doEKUy6uuw0A=)
                          6: 34322e36322e38322e302f32342d3234203d3e2034383038.roa (hash: yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=)
                          7: 34322e36322e302e302f32312d3231203d3e203233373234.roa (hash: lBGsBAewsxptaODp2y7ZM47gOj5BjTjZx+tz5uMV0yY=)
                          8: 34322e36322e34382e302f32302d3230203d3e2039383038.roa (hash: 6QDbx2KjRpz8KPX6rRbAHTFqhAQbtXxyfAjUQWLilWE=)
                          9: 34322e36322e39332e302f32342d3234203d3e2034383038.roa (hash: uxBI9K/066b15ycUoFdjxRmXfDk6KJQDbm8b5kUa/e0=)
                          10: 34322e36322e33322e302f32312d3231203d3e2039383038.roa (hash: yQx/mYuVkSoCaiWuA20eaqop82i+JViDE/hLHSp2Frk=)
                          11: 34322e36322e33322e302f32312d3231203d3e203233373234.roa (hash: 5fV6EvkK9HY5cJ6QMdi44kgDLBAOMwIObTFqRz2Ou6U=)
                          12: 34322e36322e34382e302f32302d3230203d3e203233373234.roa (hash: T5P+TWlJuodb3Cv9T3YIhLPy23PjFvvDhtdwPZHDWrw=)
                          13: 34322e36322e332e302f32342d3234203d3e2034383038.roa (hash: jEyZcujH1QL1hLT4TmAdROjtQhT4W+m9Sxd5UgGb68s=)
                          14: 3132352e3235342e3137362e302f32312d3231203d3e2039383038.roa (hash: lUeK8xpVipC5mFV8styuczLSL00UPEUPbJqAx4qGge8=)
                          15: 6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl (hash: Y/HO2JZ2Cz+bZ7y9fTJA7cGNUh0JAyp5htLTtdKGwPM=)
                          16: 3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa (hash: FFsVQX7YMz+Uh7zFfyThQ8wwzvkbi+7ZqBOYGNl3RHc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 11:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:53:00:5c:79:f0:d9:6a:08:7a:e6:ff:3e:ea:86:64:3c:29:89:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: Jul 14 10:06:02 2026 GMT
            Not After : Jul 15 11:22:02 2026 GMT
        Subject: CN=A69B71076E6972C6ACC5F0C59B69C59C9F836D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:35:c9:93:ae:ec:db:95:bf:4a:ff:9e:21:
                    8d:e5:06:d5:26:4e:77:f3:8a:1d:ea:0f:bb:97:6e:
                    5f:93:40:65:60:03:91:b6:7e:0b:e1:72:1d:20:d0:
                    06:64:9a:d4:16:cb:19:f3:f8:33:0d:9d:7c:40:c0:
                    af:a8:c3:1e:c0:37:ee:5a:31:db:67:f7:d3:d9:62:
                    0f:bd:92:9d:b3:29:7a:5c:fd:24:7e:c5:54:38:e3:
                    40:fd:0a:b7:6e:df:0f:36:d2:6c:70:29:97:e6:6e:
                    b7:bd:d2:c3:f7:e0:18:68:a8:ee:57:ee:42:58:e8:
                    54:8e:d9:b9:e6:c2:bd:7d:55:8b:35:51:97:21:cf:
                    f7:43:09:f4:13:f0:40:1a:83:f2:20:98:76:df:af:
                    e2:4e:eb:ff:49:6b:54:4d:37:39:5d:eb:16:2e:ad:
                    78:e9:29:13:ed:11:5d:14:72:77:af:ce:79:9d:d1:
                    c6:d8:02:d9:d5:26:36:c1:f1:8e:99:89:88:b2:44:
                    15:be:39:bf:8e:ec:95:39:a4:4e:d3:95:20:3a:20:
                    d5:9c:a1:c1:8f:3c:46:af:af:67:31:a6:24:dc:d9:
                    de:1e:f2:e2:fd:ec:0a:73:02:e2:3a:b6:c0:39:75:
                    a7:6a:fa:00:a4:31:94:62:3c:2a:35:ce:d1:c5:0b:
                    ad:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9B:71:07:6E:69:72:C6:AC:C5:F0:C5:9B:69:C5:9C:9F:83:6D:6D
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:43:c2:c6:71:ff:0f:1f:82:93:80:d9:71:64:6b:83:b6:2c:
         03:0a:42:a7:d2:2d:58:3b:f5:ca:cf:8a:8e:c8:86:e1:70:b7:
         bc:7f:89:eb:c0:7a:69:1b:ce:23:60:40:c5:5a:91:0a:fe:16:
         ee:e0:39:03:4e:0a:1e:d1:a4:e0:83:48:2b:59:4a:a4:51:51:
         ce:70:a3:ac:80:85:e4:90:6a:9f:27:1a:c1:44:dc:33:be:02:
         58:36:15:55:46:f1:20:a2:74:7d:67:4c:ac:62:f7:fd:40:23:
         1e:c7:14:26:c7:95:79:9a:ff:a1:14:51:41:e5:a0:c0:3a:e3:
         0a:72:eb:8f:f5:5c:6d:96:4f:ca:de:b6:c0:00:46:ba:16:ac:
         59:8c:cb:3c:43:01:1b:7c:b3:1e:74:32:ed:84:f8:86:ba:cf:
         24:5d:77:aa:fa:a6:f6:28:79:eb:2c:90:f4:ff:e7:a3:b5:e2:
         c6:8a:99:23:0c:69:de:99:01:d9:be:c4:dc:2a:b6:02:78:2b:
         7a:aa:e6:70:8f:e4:59:05:a6:4c:8b:68:c1:bb:4a:e1:eb:e9:
         80:bb:4f:85:db:17:02:85:28:61:44:6a:61:fe:f5:e3:d3:c2:
         10:91:16:df:04:99:c8:9b:af:d7:17:ae:5e:25:b3:10:df:06:
         fb:49:cc:5b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUA1MAXHnw2WoIeub/PuqGZDwpiZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMx
OEQ0OUZBRjAeFw0yNjA3MTQxMDA2MDJaFw0yNjA3MTUxMTIyMDJaMDMxMTAvBgNV
BAMTKEE2OUI3MTA3NkU2OTcyQzZBQ0M1RjBDNTlCNjlDNTlDOUY4MzZENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubjXJk67s25W/Sv+eIY3lBtUm
Tnfzih3qD7uXbl+TQGVgA5G2fgvhch0g0AZkmtQWyxnz+DMNnXxAwK+owx7AN+5a
Mdtn99PZYg+9kp2zKXpc/SR+xVQ440D9Crdu3w820mxwKZfmbre90sP34BhoqO5X
7kJY6FSO2bnmwr19VYs1UZchz/dDCfQT8EAag/IgmHbfr+JO6/9Ja1RNNzld6xYu
rXjpKRPtEV0Ucnevznmd0cbYAtnVJjbB8Y6ZiYiyRBW+Ob+O7JU5pE7TlSA6INWc
ocGPPEavr2cxpiTc2d4e8uL97ApzAuI6tsA5dadq+gCkMZRiPCo1ztHFC61LAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUpptxB25pcsasxfDFm2nFnJ+DbW0wHwYDVR0j
BBgwFoAUbRq1hWH8qFNJs0SzzKuvkxjUn68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5NDIxMDg3NDU0MDAzNS8wLzZEMUFCNTg1NjFGQ0E4NTM0OUIzNDRCM0NDQUJB
RjkzMThENDlGQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMxOEQ0OUZBRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTg0OTQyMTA4NzQ1NDAwMzUvMC82RDFBQjU4NTYxRkNB
ODUzNDlCMzQ0QjNDQ0FCQUY5MzE4RDQ5RkFGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0PCxnH/Dx+C
k4DZcWRrg7YsAwpCp9ItWDv1ys+KjsiG4XC3vH+J68B6aRvOI2BAxVqRCv4W7uA5
A04KHtGk4INIK1lKpFFRznCjrICF5JBqnycawUTcM74CWDYVVUbxIKJ0fWdMrGL3
/UAjHscUJseVeZr/oRRRQeWgwDrjCnLrj/VcbZZPyt62wABGuhasWYzLPEMBG3yz
HnQy7YT4hrrPJF13qvqm9ih56yyQ9P/no7XixoqZIwxp3pkB2b7E3Cq2Angreqrm
cI/kWQWmTItowbtK4evpgLtPhdsXAoUoYURqYf7149PCEJEW3wSZyJuv1xeuXiWz
EN8G+0nMWw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:17 2026 by rpki-client