Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
File:                     A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json)
Hash identifier:          D4K9Y/isqD5w0UjcvLDcTAokrNwHLX0/0RJDTK66oYE=
Subject key identifier:   14:5F:00:84:E1:72:4A:4C:D1:AD:9A:60:FC:2E:B4:1A:0A:6E:91:E6
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       08E6F2AA04BEA163B21C00850FD842AA1DE9C6D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
Manifest number:          F5
Signing time:             Sat 13 Jun 2026 13:21:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:16:49 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:49 +0000
Files and hashes:         1: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=)
                          2: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=)
                          3: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=)
                          4: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=)
                          5: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=)
                          6: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=)
                          7: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: Zk8dBWrTgySh3dmiulvWO+Cs66BOMEA/MnTpOUJTijY=)
                          8: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=)
                          9: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=)
                          10: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=)
                          11: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=)
                          12: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=)
                          13: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=)
                          14: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e6:f2:aa:04:be:a1:63:b2:1c:00:85:0f:d8:42:aa:1d:e9:c6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Jun 13 13:16:49 2026 GMT
            Not After : Jun 14 14:01:49 2026 GMT
        Subject: CN=145F0084E1724A4CD1AD9A60FC2EB41A0A6E91E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:3a:5d:57:9b:78:2b:a4:da:e0:35:c0:e1:
                    a6:91:cc:8f:89:66:a9:9c:12:a5:9a:ec:18:c5:3d:
                    2d:8a:ea:ed:d4:b2:33:5c:da:4e:ee:da:64:31:95:
                    61:b8:f9:f7:b5:58:f2:ca:36:04:b2:dc:76:32:a3:
                    ee:da:a4:ed:e7:83:48:3c:38:56:82:55:45:be:e0:
                    a8:65:c8:a9:08:1e:d0:7b:13:fb:17:61:99:d1:d9:
                    7f:1e:bd:57:0b:d5:b0:d9:ce:82:ad:45:6b:2a:27:
                    62:30:cf:ea:db:91:52:9a:b6:ae:4d:72:cf:42:41:
                    e7:a8:04:26:fc:30:c8:70:fd:5c:79:9a:40:d7:4c:
                    6f:cf:dd:af:42:d8:6e:f1:39:67:93:4b:3c:26:a4:
                    84:17:d9:63:4b:32:40:b8:a6:ab:28:39:ee:71:6d:
                    64:bd:0f:33:32:d5:7f:59:e5:57:d0:02:0b:eb:69:
                    9e:2a:de:15:7a:1e:bb:8c:ac:cd:1b:a1:40:d4:6d:
                    24:df:8b:cd:dc:d8:d6:7b:80:d9:d6:03:a2:98:61:
                    8f:4d:72:ec:b6:9f:fe:77:81:2b:55:65:a3:5f:79:
                    db:46:e2:8f:34:ce:9c:94:71:fe:c9:ff:9e:37:24:
                    ad:e8:b3:e9:e6:40:ac:43:69:b7:a2:c6:ea:5b:eb:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5F:00:84:E1:72:4A:4C:D1:AD:9A:60:FC:2E:B4:1A:0A:6E:91:E6
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:69:0f:8b:bd:0c:1c:d3:5d:cd:dc:7f:4a:d0:d3:de:2e:
         16:2b:c1:f9:6b:34:f7:1a:41:1e:9c:53:38:97:60:31:ac:77:
         d3:ae:3c:85:7c:2c:28:b9:a4:e1:5d:92:70:cd:e7:46:f9:5b:
         88:95:53:a0:5a:77:6d:14:a6:06:45:e4:f8:a4:ca:f4:f0:b9:
         f0:b3:b7:d7:61:ab:7b:59:8c:de:19:d0:79:f7:96:f6:f7:f2:
         d0:f3:9f:9b:2d:01:c0:b8:c1:44:0d:c1:91:06:b9:a2:25:fd:
         6c:c1:d8:da:11:fb:2b:f3:b0:c2:ad:7e:71:7f:40:90:1c:15:
         b0:c0:d6:c9:c8:76:48:7a:ab:e5:be:ca:9b:24:be:ac:8b:17:
         63:b4:ae:aa:95:61:ce:29:3d:06:21:04:0c:5c:ea:c3:ff:3b:
         68:ca:17:50:34:b7:74:65:92:e6:7d:0d:f8:15:63:3c:65:77:
         61:72:19:39:f4:74:33:76:98:14:67:ca:c1:67:a9:f7:70:36:
         09:7f:85:dd:a5:73:29:29:14:eb:0e:42:7d:f9:e6:ea:60:38:
         2b:2f:fb:99:46:db:e7:c7:00:02:a6:df:41:08:57:51:dc:db:
         98:1d:5f:2d:bb:b0:cc:0f:5f:59:74:82:27:c4:ae:4f:94:a1:
         cd:f7:fa:15
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCObyqgS+oWOyHACFD9hCqh3pxtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA2MTMxMzE2NDlaFw0yNjA2MTQxNDAxNDlaMDMxMTAvBgNV
BAMTKDE0NUYwMDg0RTE3MjRBNENEMUFEOUE2MEZDMkVCNDFBMEE2RTkxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliDpdV5t4K6Ta4DXA4aaRzI+J
ZqmcEqWa7BjFPS2K6u3UsjNc2k7u2mQxlWG4+fe1WPLKNgSy3HYyo+7apO3ng0g8
OFaCVUW+4KhlyKkIHtB7E/sXYZnR2X8evVcL1bDZzoKtRWsqJ2Iwz+rbkVKatq5N
cs9CQeeoBCb8MMhw/Vx5mkDXTG/P3a9C2G7xOWeTSzwmpIQX2WNLMkC4pqsoOe5x
bWS9DzMy1X9Z5VfQAgvraZ4q3hV6HruMrM0boUDUbSTfi83c2NZ7gNnWA6KYYY9N
cuy2n/53gStVZaNfedtG4o80zpyUcf7J/543JK3os+nmQKxDabeixupb67/tAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUFF8AhOFySkzRrZpg/C60GgpukeYwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB
N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0lpD4u9DBzT
Xc3cf0rQ094uFivB+Ws09xpBHpxTOJdgMax30648hXwsKLmk4V2ScM3nRvlbiJVT
oFp3bRSmBkXk+KTK9PC58LO312Gre1mM3hnQefeW9vfy0POfmy0BwLjBRA3BkQa5
oiX9bMHY2hH7K/Owwq1+cX9AkBwVsMDWych2SHqr5b7KmyS+rIsXY7SuqpVhzik9
BiEEDFzqw/87aMoXUDS3dGWS5n0N+BVjPGV3YXIZOfR0M3aYFGfKwWep93A2CX+F
3aVzKSkU6w5Cffnm6mA4Ky/7mUbb58cAAqbfQQhXUdzbmB1fLbuwzA9fWXSCJ8Su
T5Shzff6FQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:00 2026 by rpki-client