Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
File:                     E81BB67C2F6DF2C6139742FB71645927458EFF19.mft (raw, json)
Hash identifier:          WY6Aoz8lvSW1p9W3EZYBdiiLIgW9ISEgIrfqY79FxeY=
Subject key identifier:   47:2F:56:81:40:C5:3C:7D:73:26:3B:E6:FB:E6:E1:A0:2E:6C:6F:F3
Authority key identifier: E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19
Certificate issuer:       /CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
Certificate serial:       5E98D4847F15A4AB8C5FD11338353F1435ECB1DE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
Manifest number:          23
Signing time:             Thu 03 Sep 2026 20:59:08 +0000
Manifest this update:     Thu 03 Sep 2026 20:54:08 +0000
Manifest next update:     Mon 07 Sep 2026 06:52:08 +0000
Files and hashes:         1: 3136302e3233362e3233342e302f32332d3234203d3e20313531323435.roa (hash: jGT+7cZfQ/GN8HNm0qOW1MFmVQYXpbVwub02uYml9XM=)
                          2: E81BB67C2F6DF2C6139742FB71645927458EFF19.crl (hash: mbzftVliVkZwg51RJDa+R0E/BCeNSH4G3CGOuc1Tm7s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:98:d4:84:7f:15:a4:ab:8c:5f:d1:13:38:35:3f:14:35:ec:b1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
        Validity
            Not Before: Sep  3 20:54:08 2026 GMT
            Not After : Sep  7 06:52:08 2026 GMT
        Subject: CN=472F568140C53C7D73263BE6FBE6E1A02E6C6FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:5e:a3:b3:d2:86:77:d6:65:6e:28:80:ca:
                    ce:e7:92:3a:39:94:1d:19:4c:97:c5:dc:c5:7b:0f:
                    b0:a7:93:04:4f:85:2c:40:8f:71:62:51:3f:68:c4:
                    34:a1:9f:0f:bc:e6:77:36:74:7e:62:ac:a3:09:ff:
                    a3:ce:63:1b:e1:02:3b:77:6f:f0:3e:d6:f5:63:9d:
                    46:53:89:13:76:21:03:b0:04:e7:ef:71:e5:2e:d1:
                    72:2a:de:28:99:a1:f3:ae:c9:c3:84:7f:bc:8d:ae:
                    b6:64:64:ed:c4:ae:ed:d8:07:9b:96:dd:10:ba:df:
                    1f:b5:32:bd:3c:a0:c2:f4:9b:c2:fe:f9:64:8c:bb:
                    16:d3:0b:7b:3a:29:45:48:bf:cb:f2:03:55:1e:b1:
                    d4:d8:be:48:50:bb:11:dd:25:a3:df:b4:c1:13:e2:
                    e1:3a:7b:25:8c:e9:56:81:bd:fd:8a:7a:e3:e0:cd:
                    dc:03:ba:1c:3a:7b:d6:42:f9:ec:24:34:8d:e0:2c:
                    51:0c:ae:3c:3f:2a:02:28:1c:43:9e:5b:c9:98:a5:
                    1f:51:b7:f2:72:e4:43:54:c0:f0:b5:df:90:ce:19:
                    77:f6:c7:89:93:40:d2:65:53:3f:92:2a:d9:e1:1a:
                    c6:47:00:9d:d6:d0:85:04:a9:21:15:99:6e:db:6a:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2F:56:81:40:C5:3C:7D:73:26:3B:E6:FB:E6:E1:A0:2E:6C:6F:F3
            X509v3 Authority Key Identifier:
                keyid:E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:36:e5:c7:11:8f:e6:6b:9c:f0:e5:14:68:20:12:30:40:
         e1:5e:ff:50:3c:2e:f8:81:f5:09:51:d6:50:26:03:31:8d:b0:
         00:83:bf:82:e3:57:b6:b1:70:e1:32:d4:d7:fb:c6:e9:eb:eb:
         8f:51:84:b9:47:83:55:02:c9:65:04:b3:3e:1f:f7:5d:d0:38:
         cc:15:14:12:62:53:8d:b3:d5:ca:1c:fa:79:7c:b1:e8:f3:a9:
         ad:1c:e8:93:68:3a:46:01:bb:52:9d:d4:ea:3f:fd:3f:51:c9:
         58:25:eb:1b:74:7a:fd:26:e5:e9:b8:cb:97:ae:72:37:02:91:
         ce:6f:24:86:da:2b:86:53:3c:a0:d5:d5:1b:3f:47:03:c9:14:
         c9:8d:16:51:d5:48:f4:82:35:fb:13:fa:65:da:cb:56:16:1e:
         96:c0:6b:e7:55:d5:4a:53:90:f7:c7:dc:75:98:3d:89:2f:2d:
         24:c5:31:cf:51:38:f2:1b:de:d8:95:86:09:ae:f4:b9:48:4a:
         b0:df:8f:d1:e2:2f:26:85:b9:96:58:cd:f8:ba:03:a7:c3:f8:
         db:a7:c2:81:35:8d:be:f7:b9:82:cf:61:d6:6e:12:af:db:8b:
         53:71:f4:34:8d:a4:64:9f:fe:a1:8f:ba:78:45:2d:bd:4c:3c:
         da:3a:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:45 2026 by rpki-client