Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
File:                     6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft (raw, json)
Hash identifier:          XT4B51cMmmPvxkw2ZvAij+FyXzURMXlcsLVPPo8Lg2k=
Subject key identifier:   F8:F4:37:F5:52:19:ED:3B:27:4F:8D:56:1B:8F:26:6B:C1:BA:8F:9B
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       562689F0B831DBCA297A8D9B8B9AAB36440733AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
Manifest number:          12
Signing time:             Fri 22 May 2026 14:37:21 +0000
Manifest this update:     Fri 22 May 2026 14:32:21 +0000
Manifest next update:     Sat 23 May 2026 16:10:21 +0000
Files and hashes:         1: 3132302e3133312e3132342e302f32322d3232203d3e203536303438.roa (hash: LhI8mdYxd1LLQ8sMWDd4eFucYLTAWf/uPAhQmoP0aNk=)
                          2: 3132302e3133312e3132382e302f31372d3137203d3e2030.roa (hash: 7W35xT/nsjYMoC1COBHCbbAK+VZGkoCL8aZ2w9lGC60=)
                          3: 3131302e34302e31332e302f32342d3234203d3e203536303438.roa (hash: 8uClidPzRIIi2TY0jNDCZTbJG1tTD01k7EjzLGmYbG4=)
                          4: 3131302e34302e31342e302f32332d3233203d3e203536303438.roa (hash: C1DKsXtMqd0t7ylQxOUhqTDxBE8Xn0uqC4mMsJrvS/0=)
                          5: 6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl (hash: Lwcgr5xoOt/O2q94vzD6ALrKt/Zz5jviJLypYDoNRz4=)
                          6: 3132302e3133312e38382e302f32312d3231203d3e203536303438.roa (hash: Xg2thkOsk2CbJRKJ/2cEUsiCpzVdz6ialh9JNpJ7MMY=)
                          7: 3131302e34302e302e302f32302d3230203d3e2030.roa (hash: uz8vvrxqhlxPhhSdcfvPutY8ZO3Uap7LyUirimI4VLk=)
                          8: 3131302e34302e31332e302f32342d3234203d3e2034383437.roa (hash: DIsTCoO+UDO7eStwsivhjHgLTgOox0FdfP6x/1QcTOo=)
                          9: 3131302e34302e31362e302f32342d3234203d3e2034383437.roa (hash: QqWtSzdGyUhqGdVvO+IfRlZKSuZ7JKKv1AI9r0W89m0=)
                          10: 3131302e34302e302e302f32342d3234203d3e203536303438.roa (hash: dLNX6GEU/TFA1aOuowinO+W5Q17nV4otdw4fGp6rQI0=)
                          11: 3132302e39322e3234302e302f32302d3230203d3e2030.roa (hash: B9W6Zt/DNy4DINt5dVOvkXno2w0XxCDKDBx6wHW8nXY=)
                          12: 3131302e34302e31342e302f32332d3233203d3e2034383437.roa (hash: FCmR2p4ySSRyQPnTemqBbjgToDRRDpFDl/qQph1YdQU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 16:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:89:f0:b8:31:db:ca:29:7a:8d:9b:8b:9a:ab:36:44:07:33:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: May 22 14:32:21 2026 GMT
            Not After : May 23 16:10:21 2026 GMT
        Subject: CN=F8F437F55219ED3B274F8D561B8F266BC1BA8F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:eb:48:d6:d6:ed:5a:2f:cb:15:e2:de:1c:
                    fb:fb:1a:0b:eb:b5:1a:38:51:50:71:8c:d6:3f:d2:
                    fe:9a:c6:88:8e:60:ea:02:ff:5f:08:cd:3f:1f:5c:
                    27:19:2f:e6:4f:73:a9:9d:e8:26:a1:3a:db:28:62:
                    24:3e:84:fb:1b:01:dc:ac:a6:56:1c:a0:b2:4b:56:
                    b7:e4:71:5a:6e:a6:c6:77:78:5f:9a:b0:b5:a3:79:
                    7d:39:3a:a2:63:4e:2a:2a:27:cb:2f:6f:97:8f:58:
                    66:49:3e:e9:d2:4e:3d:9c:61:75:d3:aa:cb:3a:b5:
                    e4:76:75:13:8c:7b:73:fc:db:7c:02:b7:7d:6d:3a:
                    01:66:d5:ec:a5:a4:54:0c:85:4b:42:6f:80:8a:e2:
                    2e:c0:94:57:82:bc:4d:1b:e8:41:67:f4:fd:78:7c:
                    ac:9d:fb:5f:8e:d0:81:fb:4a:b2:59:cc:3c:55:32:
                    41:5e:0a:05:31:50:6a:f7:97:b3:39:39:4d:ee:b8:
                    f6:31:b5:5c:61:54:2d:39:e2:50:0e:1a:db:54:7a:
                    b6:7e:41:82:06:a9:7e:f9:2b:68:57:9d:ec:33:e3:
                    79:a6:9e:02:31:91:0f:72:50:ca:49:40:62:1c:46:
                    9f:ec:9e:3d:4b:19:b6:03:6c:a1:2b:25:9e:18:c2:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:37:F5:52:19:ED:3B:27:4F:8D:56:1B:8F:26:6B:C1:BA:8F:9B
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:50:72:3c:ca:81:a1:64:6c:00:7f:a0:99:86:4f:3d:0b:ee:
         8f:98:2e:3a:d6:8d:7b:ff:d1:8e:9b:66:00:18:8f:d0:82:32:
         1e:81:3e:cf:dc:a1:61:1d:0d:b4:ee:cd:42:4c:b0:8c:1d:a3:
         80:b0:18:f2:6a:ad:e0:e0:8c:24:90:e7:b2:a9:4a:34:c7:0d:
         2f:af:b8:86:0c:2d:73:4b:6a:ef:ce:37:dd:7d:9d:05:d7:fb:
         d2:d6:04:c8:02:d4:d5:c0:c7:f2:be:47:90:df:00:21:aa:a1:
         54:65:d6:5d:77:8b:3e:75:fe:c9:00:8a:f8:68:ea:1b:d6:b8:
         85:4c:e6:8e:04:57:72:f2:c5:81:4c:df:39:ae:f6:ed:b3:ac:
         41:4d:03:e6:41:15:be:c1:0b:a9:78:47:e8:7e:74:9c:b6:8c:
         3a:f3:93:a1:ae:f0:94:04:e8:97:0f:4f:92:51:5b:fa:58:3c:
         36:2f:47:ab:7d:32:4f:c8:52:9e:03:97:28:6f:4e:77:29:40:
         64:e8:7f:e1:f4:13:91:c1:ec:a3:df:9d:d9:7c:e4:55:b7:25:
         e4:17:ac:15:ea:25:c0:17:a2:70:c6:71:73:70:28:69:bb:7e:
         b9:bf:8c:4f:20:3a:28:5e:dc:fe:f9:f6:35:9b:ca:e9:b3:af:
         43:2c:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:45:30 2026 by rpki-client