Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
File:                     6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft (raw, json)
Hash identifier:          rWuU7Clt08vFNFsyK278ISHNoiq32U1WW9O/mms//A0=
Subject key identifier:   3D:79:A0:64:61:7D:E1:E9:1F:D0:F4:01:28:3D:05:5B:61:FB:B1:1B
Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52
Certificate issuer:       /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
Certificate serial:       67757F55D2DBC298EB3E0F46E5D2BC87ED95E880
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
Manifest number:          4F
Signing time:             Tue 07 Jul 2026 02:38:14 +0000
Manifest this update:     Tue 07 Jul 2026 02:33:14 +0000
Manifest next update:     Wed 08 Jul 2026 03:35:14 +0000
Files and hashes:         1: 3131302e34302e31332e302f32342d3234203d3e203536303438.roa (hash: 8uClidPzRIIi2TY0jNDCZTbJG1tTD01k7EjzLGmYbG4=)
                          2: 3131302e34302e31342e302f32332d3233203d3e2034383437.roa (hash: FCmR2p4ySSRyQPnTemqBbjgToDRRDpFDl/qQph1YdQU=)
                          3: 3132302e3133312e3132342e302f32322d3232203d3e203536303438.roa (hash: LhI8mdYxd1LLQ8sMWDd4eFucYLTAWf/uPAhQmoP0aNk=)
                          4: 3132302e3133312e38382e302f32312d3231203d3e203536303438.roa (hash: Xg2thkOsk2CbJRKJ/2cEUsiCpzVdz6ialh9JNpJ7MMY=)
                          5: 3131302e34302e302e302f32342d3234203d3e203536303438.roa (hash: dLNX6GEU/TFA1aOuowinO+W5Q17nV4otdw4fGp6rQI0=)
                          6: 3132302e39322e3234302e302f32302d3230203d3e2030.roa (hash: B9W6Zt/DNy4DINt5dVOvkXno2w0XxCDKDBx6wHW8nXY=)
                          7: 3131302e34302e31342e302f32332d3233203d3e203536303438.roa (hash: C1DKsXtMqd0t7ylQxOUhqTDxBE8Xn0uqC4mMsJrvS/0=)
                          8: 3131302e34302e31362e302f32342d3234203d3e2034383437.roa (hash: QqWtSzdGyUhqGdVvO+IfRlZKSuZ7JKKv1AI9r0W89m0=)
                          9: 3132302e3133312e3132382e302f31372d3137203d3e2030.roa (hash: 7W35xT/nsjYMoC1COBHCbbAK+VZGkoCL8aZ2w9lGC60=)
                          10: 3131302e34302e31332e302f32342d3234203d3e2034383437.roa (hash: DIsTCoO+UDO7eStwsivhjHgLTgOox0FdfP6x/1QcTOo=)
                          11: 3131302e34302e302e302f32302d3230203d3e2030.roa (hash: uz8vvrxqhlxPhhSdcfvPutY8ZO3Uap7LyUirimI4VLk=)
                          12: 6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl (hash: MbihvLThUH50dHIHIkKc9HPSvkjA8dSMbahxA1OUARc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 03:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:75:7f:55:d2:db:c2:98:eb:3e:0f:46:e5:d2:bc:87:ed:95:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52
        Validity
            Not Before: Jul  7 02:33:14 2026 GMT
            Not After : Jul  8 03:35:14 2026 GMT
        Subject: CN=3D79A064617DE1E91FD0F401283D055B61FBB11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:a5:83:27:f7:6b:53:6f:d3:c2:cc:9e:da:
                    63:41:51:94:06:7e:06:15:56:fe:56:78:17:4f:1e:
                    31:cc:ef:ee:fd:74:54:af:c0:fb:87:b2:79:c5:51:
                    45:80:f3:3f:61:5d:c0:bc:df:a2:11:77:6b:3b:d9:
                    b0:fb:1b:96:5b:3e:5f:38:27:28:cf:5f:d6:95:db:
                    89:d9:b2:c2:45:e3:ea:fe:5e:53:b8:00:c6:79:30:
                    d0:20:ae:81:0d:24:49:c2:00:f3:9d:21:53:00:38:
                    87:5e:75:a5:ae:1a:34:64:09:dd:19:cc:fd:de:67:
                    46:d0:b4:d6:3e:ac:ef:19:29:d7:5b:4b:de:28:03:
                    7b:e9:95:be:b0:3a:a5:b2:40:50:76:ca:cf:4d:b8:
                    8f:71:09:26:55:cf:fe:47:13:f7:7b:c6:ec:f5:fe:
                    a2:92:cc:e6:70:f2:6e:56:d0:e2:5b:b6:0e:21:20:
                    77:24:d6:a0:26:8e:f9:5d:a6:84:7f:6c:4d:87:b5:
                    52:be:12:9b:25:46:e3:97:56:3a:73:4b:62:0f:61:
                    37:b8:a7:de:93:51:8a:4b:06:79:b4:b7:2f:0f:6c:
                    06:65:0d:13:e9:40:5e:d7:43:b2:0d:eb:1d:0c:c1:
                    26:4c:d8:48:6f:c4:db:d1:88:db:59:44:2b:54:dd:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:A0:64:61:7D:E1:E9:1F:D0:F4:01:28:3D:05:5B:61:FB:B1:1B
            X509v3 Authority Key Identifier:
                keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a4:e5:dc:00:32:da:fe:3b:21:40:b3:98:c1:26:c4:c1:10:
         2a:28:1c:bb:20:7a:9d:69:50:02:94:e4:c4:b1:d1:d0:a5:13:
         ed:1a:99:7f:88:43:aa:11:fb:b8:c1:23:c5:92:a7:ec:96:5a:
         90:46:e1:c9:1a:42:ad:bd:44:6b:c9:bf:0e:3f:3f:4d:e3:90:
         48:4f:b2:5e:94:5d:7b:5f:e6:ff:23:9a:a9:79:c8:b6:e9:a3:
         0a:ca:1d:09:4c:3b:aa:9d:45:61:0a:e4:bf:c7:34:5f:fa:67:
         89:24:08:38:38:ec:60:18:b7:f8:d3:4d:28:46:1f:74:5e:2d:
         31:25:28:ed:e2:c1:d3:50:31:5b:ec:3b:11:21:8e:1b:fd:e4:
         94:34:5e:86:92:7f:cf:c8:3c:a3:40:b7:14:2b:9f:4e:10:43:
         5c:2c:ae:52:61:32:b2:76:67:f0:24:b1:a1:2c:90:de:10:aa:
         dc:fc:60:90:b6:5a:6e:65:9f:7b:c5:55:ad:35:1a:e8:88:e4:
         6b:00:fb:fa:0a:db:f0:70:3e:b8:96:5f:c6:cd:96:d4:bb:32:
         9a:6e:55:fe:2c:5c:01:02:e4:df:45:58:a3:54:af:d2:1a:82:
         ad:52:74:52:64:60:de:03:16:56:fb:b7:5a:6a:42:f3:50:0d:
         ae:6d:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:47:35 2026 by rpki-client