Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
File:                     6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json)
Hash identifier:          /Wf0GUbbuVYU3/WvEScdp5RcGrGtnSzAdMXS0RCRqdk=
Subject key identifier:   8E:1B:09:24:F2:22:8B:40:28:9E:E6:D7:A4:20:29:C4:27:5B:74:2D
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Certificate issuer:       /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial:       32C7B454A522A226400DC6EE735F3EF9BC1256BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 13:29:43 +0000
Manifest this update:     Fri 17 Apr 2026 13:24:43 +0000
Manifest next update:     Sat 18 Apr 2026 16:15:43 +0000
Files and hashes:         1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=)
                          2: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=)
                          3: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: WmA8tKcuhn7D6nWwA0eiBDfjhH+S1AV6AtIWC2H+Cok=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c7:b4:54:a5:22:a2:26:40:0d:c6:ee:73:5f:3e:f9:bc:12:56:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
        Validity
            Not Before: Apr 17 13:24:43 2026 GMT
            Not After : Apr 18 16:15:43 2026 GMT
        Subject: CN=8E1B0924F2228B40289EE6D7A42029C4275B742D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c0:44:e9:6f:05:7d:b3:73:98:ec:88:29:0e:
                    e9:ee:23:15:7b:b2:82:8a:cf:83:ea:d2:87:4c:34:
                    e3:d4:02:52:1c:c2:c9:f2:0d:4b:39:fa:4c:a4:03:
                    8e:97:3f:bb:87:32:db:38:32:7a:e6:98:bb:ab:19:
                    e7:f1:67:91:96:9b:99:08:b1:2b:26:7b:15:39:25:
                    f9:5f:30:32:2b:ee:9e:85:a9:ba:54:c6:26:af:71:
                    f6:35:84:cb:01:5a:76:2c:4d:50:a9:44:6c:4f:15:
                    1a:7e:ed:bc:38:99:b6:c8:b6:b3:6c:74:9d:5e:00:
                    20:37:db:e5:a4:0f:66:cc:5e:72:e4:59:e7:9d:f7:
                    41:b9:24:23:a3:6c:26:a0:aa:15:d4:47:fd:5b:84:
                    b6:e0:a9:5e:75:90:35:ba:6e:ba:b2:cd:59:4c:8f:
                    b0:0f:4a:1b:a7:22:40:e5:c7:c2:f5:3f:1f:14:ca:
                    4a:29:b4:39:ff:64:a7:83:c5:49:60:ab:48:65:22:
                    66:28:b7:b7:ab:94:29:30:4e:da:b0:07:b7:93:01:
                    ea:65:d3:d1:02:b5:dd:56:f6:71:a6:d2:52:40:9e:
                    fa:04:52:89:91:91:da:79:2d:72:21:5e:cf:d8:04:
                    27:ec:05:a4:13:42:4f:c9:d2:02:4a:4e:76:54:c7:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:09:24:F2:22:8B:40:28:9E:E6:D7:A4:20:29:C4:27:5B:74:2D
            X509v3 Authority Key Identifier:
                keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:31:d0:26:da:9e:51:4f:e2:9f:49:73:06:17:b3:5e:b2:
         12:61:0d:b4:62:09:e8:95:67:0f:8e:73:27:1a:1e:9f:53:a7:
         e0:09:70:cd:03:b5:b1:cb:08:36:10:c6:5f:ae:08:ab:b0:0b:
         01:b8:ec:90:40:c3:f3:4b:58:b8:34:f5:12:32:25:99:51:f0:
         f4:b0:f4:c8:cd:ac:17:25:7c:0e:2b:3b:d6:e5:34:7a:9b:ab:
         ae:d3:b4:f2:b8:3c:e6:59:44:7e:42:39:24:77:6e:be:01:65:
         77:75:b4:f9:4a:5b:89:aa:c0:09:de:f9:ff:43:85:1d:bb:34:
         88:09:06:d5:eb:ca:ba:e8:3c:07:65:f3:93:b9:aa:08:33:a8:
         21:68:0c:c5:08:fb:89:ac:36:d4:46:6a:f1:f7:8b:49:1c:a3:
         2a:12:d0:89:a1:28:12:83:fe:0e:5e:77:ff:92:a3:36:12:34:
         ea:fb:9f:95:6d:0a:26:e0:13:b9:06:5b:71:09:9c:1f:3a:5c:
         3a:61:4a:3c:71:71:93:08:b3:17:22:2a:64:9a:b4:fd:2e:9a:
         78:a3:7b:10:e4:dc:a4:74:88:8e:49:8a:96:3b:95:75:65:ea:
         2c:2f:9c:6a:a9:cf:be:d1:9e:32:6f:c6:fd:3e:71:8f:8e:99:
         84:e8:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:47 2026 by rpki-client