Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
File:                     6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft (raw, json)
Hash identifier:          fi3djykCsjFuOLDd4Tb7di3qmZxFeBRZZpUIBlSTS4E=
Subject key identifier:   E9:97:74:E0:9D:4F:BB:22:EC:D7:64:C7:5B:1B:2D:6A:4A:5A:BC:66
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       5FD02CA13B73CD448F86D359E55BC15F240A9F8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
Manifest number:          CE
Signing time:             Wed 14 Oct 2026 10:28:55 +0000
Manifest this update:     Wed 14 Oct 2026 10:23:55 +0000
Manifest next update:     Sat 17 Oct 2026 10:56:55 +0000
Files and hashes:         1: 34322e36322e38352e302f32342d3234203d3e2034383038.roa (hash: d6s6STG5xAhM+Q03cuASnNG/lEicPG7doEKUy6uuw0A=)
                          2: 3132352e3235342e3136382e302f32312d3231203d3e2039383038.roa (hash: jIBaOQf/G7rNS/DVWjE6H4dhEL1mXI4wvD13/gtpmAU=)
                          3: 3132352e3235342e3137362e302f32312d3231203d3e2039383038.roa (hash: lUeK8xpVipC5mFV8styuczLSL00UPEUPbJqAx4qGge8=)
                          4: 34322e36322e33322e302f32312d3231203d3e203233373234.roa (hash: 5fV6EvkK9HY5cJ6QMdi44kgDLBAOMwIObTFqRz2Ou6U=)
                          5: 3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa (hash: FFsVQX7YMz+Uh7zFfyThQ8wwzvkbi+7ZqBOYGNl3RHc=)
                          6: 34322e36322e302e302f32312d3231203d3e203233373234.roa (hash: lBGsBAewsxptaODp2y7ZM47gOj5BjTjZx+tz5uMV0yY=)
                          7: 34322e36322e33322e302f32312d3231203d3e2039383038.roa (hash: yQx/mYuVkSoCaiWuA20eaqop82i+JViDE/hLHSp2Frk=)
                          8: 6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl (hash: mjGirLQge11DhJRnwqbNUSVuRjsdu36HOXGQoSyTdR8=)
                          9: 34322e36322e34382e302f32302d3230203d3e2039383038.roa (hash: 6QDbx2KjRpz8KPX6rRbAHTFqhAQbtXxyfAjUQWLilWE=)
                          10: 3132352e3235342e3136382e302f32312d3231203d3e203233373234.roa (hash: gj+UmcoP7t9OxmOHfB+/nZrnXWANKJKXP2VI5gBrjmM=)
                          11: 34322e36322e39332e302f32342d3234203d3e2034383038.roa (hash: uxBI9K/066b15ycUoFdjxRmXfDk6KJQDbm8b5kUa/e0=)
                          12: 3132352e3235342e3137362e302f32312d3231203d3e203233373234.roa (hash: ZSgRpA/5spQ7+nn24xwWT1dkpORgmEl9Tobd39U1oL4=)
                          13: 34322e36322e34382e302f32302d3230203d3e203233373234.roa (hash: T5P+TWlJuodb3Cv9T3YIhLPy23PjFvvDhtdwPZHDWrw=)
                          14: 34322e36322e38322e302f32342d3234203d3e2034383038.roa (hash: yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=)
                          15: 34322e36322e302e302f32312d3231203d3e2039383038.roa (hash: EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=)
                          16: 34322e36322e332e302f32342d3234203d3e2034383038.roa (hash: jEyZcujH1QL1hLT4TmAdROjtQhT4W+m9Sxd5UgGb68s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 10:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d0:2c:a1:3b:73:cd:44:8f:86:d3:59:e5:5b:c1:5f:24:0a:9f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: Oct 14 10:23:55 2026 GMT
            Not After : Oct 17 10:56:55 2026 GMT
        Subject: CN=E99774E09D4FBB22ECD764C75B1B2D6A4A5ABC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:0f:c6:c3:33:b8:12:93:f6:8d:ca:85:39:
                    24:ec:c2:4b:51:3f:54:11:ed:d5:16:ef:a2:af:7b:
                    c8:8b:d1:e8:27:c3:7a:99:40:84:54:b5:65:fb:db:
                    a5:8e:e5:ce:54:54:30:42:5c:7e:d5:00:99:88:84:
                    96:35:e3:64:cb:10:6a:4c:05:87:e0:23:2b:bf:e4:
                    03:3b:16:1d:c7:a1:36:55:79:1b:1f:4d:e3:22:72:
                    1a:fd:2b:20:32:5b:ee:01:28:c7:b3:e4:20:08:2a:
                    9d:bf:3f:2b:8e:2f:6a:47:74:97:43:e4:93:de:ce:
                    36:34:66:71:2a:e3:47:7c:58:de:ac:3a:15:09:fd:
                    89:36:3b:64:b0:fe:7d:84:55:35:46:23:ce:bc:d1:
                    2d:1e:bb:62:fd:b9:f6:2d:ff:a7:d3:b1:f8:43:90:
                    d3:43:3c:f6:64:2e:8e:58:14:d0:4d:b5:4a:1d:48:
                    d1:a7:ea:e4:89:60:92:8b:24:54:17:63:1c:1c:15:
                    81:8d:81:7b:d0:83:5b:e4:5e:5f:c7:7b:ac:e4:a2:
                    0e:88:73:ed:4f:9a:90:66:61:51:ee:92:cf:77:db:
                    e3:60:ab:2d:60:22:d8:f4:d4:76:e6:e7:39:98:1d:
                    ad:1c:56:af:c2:ed:df:4a:5f:ef:f9:cd:01:01:4c:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:74:E0:9D:4F:BB:22:EC:D7:64:C7:5B:1B:2D:6A:4A:5A:BC:66
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:65:da:2d:13:f8:fd:f7:92:de:c0:19:21:0d:68:50:a6:
         5e:e4:74:06:0f:d3:69:6b:f9:5f:e2:12:5c:7f:0f:8d:fa:87:
         c9:9b:55:e6:14:50:37:f6:05:b2:e0:bc:79:fd:17:18:7a:b0:
         c5:70:fb:96:3d:51:4b:e3:3b:b0:2d:7a:77:5b:b4:0b:49:ad:
         d4:3b:8a:3c:1d:7b:89:7b:74:d4:10:47:a6:31:ec:73:84:70:
         16:60:69:30:b4:29:7b:11:5a:e9:46:17:1e:f6:d7:b7:1f:38:
         48:c0:53:77:f3:e8:08:fd:60:f7:c3:8b:32:60:3b:9b:84:c3:
         07:94:de:56:70:d9:7b:52:ca:7b:8e:72:1c:cb:5c:5d:f2:1c:
         3e:45:c6:a4:c1:27:9f:ac:16:77:56:4a:f7:fb:88:af:d0:50:
         d4:a3:5c:98:dd:63:69:bd:f0:23:b8:1f:a5:9a:09:4c:27:77:
         04:8d:d1:e8:b5:f0:98:e7:6d:1b:d4:ae:c3:17:da:30:b6:ac:
         3d:cd:0a:b4:39:4f:af:9f:fb:05:d4:a2:9f:d6:82:30:0f:43:
         6f:a3:f4:72:88:7b:13:c0:d0:00:5d:8c:32:56:6a:cd:16:69:
         d2:1e:0c:88:82:1b:d3:25:c8:c0:6b:33:cb:94:18:92:ab:14:
         15:ca:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:49:26 2026 by rpki-client