Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
File:                     E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json)
Hash identifier:          ZScJNZT+DFIG2+BBgXBp433SQj8HCR3A3++shL/8Lhs=
Subject key identifier:   97:DA:1F:23:41:4F:C5:87:4B:6A:69:56:9B:EE:0C:D3:AA:BA:2D:61
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       17C689FEA00D62AEAD26B087881C8A2AFA2126E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
Manifest number:          D4
Signing time:             Sat 13 Jun 2026 19:42:11 +0000
Manifest this update:     Sat 13 Jun 2026 19:37:11 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:11 +0000
Files and hashes:         1: 3131362e3139392e3135362e302f32322d3234203d3e20313436383334.roa (hash: Uh2/EDdWK4c6ZYX1tLFLGx4xTpdDGyLVBokH0GwB3j4=)
                          2: 3230322e3136352e3230382e302f32312d3231203d3e20313332323033.roa (hash: dEG+kQvtarrj1C4NWnBPL9AHHKm7rT38VFsC+e+j+CI=)
                          3: 3230322e3136352e3230382e302f32302d3234203d3e20313436383334.roa (hash: xG3PI0F+sPPi1DnSGZHfDnmRvSYoRWgSB+By3rD4zv0=)
                          4: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: i51BpquczA/rY1lJJ00fViF+tfdMLdULLXBX6oUv8vc=)
                          5: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=)
                          6: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (hash: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U=)
                          7: 3130332e3135362e37382e302f32332d3233203d3e203231383539.roa (hash: guHCeGNcndypZ9RT0It28OXAIuLz9aYDjgK5y7y4NYE=)
                          8: 3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (hash: Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=)
                          9: 3130332e3135362e37382e302f32332d3233203d3e20313436383334.roa (hash: fu7L0rmKYwgHzfVKmHdDaBxA79W3IfTKnrKsSuayS2Y=)
                          10: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=)
                          11: 3131362e3139392e3135322e302f32322d3232203d3e20313436383334.roa (hash: IdMIH3y+HHsm4+d7ESvMntfPnsJBJ8L31r1CJc4f2Bo=)
                          12: 3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (hash: E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c6:89:fe:a0:0d:62:ae:ad:26:b0:87:88:1c:8a:2a:fa:21:26:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Jun 13 19:37:11 2026 GMT
            Not After : Jun 14 23:00:11 2026 GMT
        Subject: CN=97DA1F23414FC5874B6A69569BEE0CD3AABA2D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:20:8f:80:82:8c:09:e5:6d:b0:42:47:bf:
                    0b:f9:ca:63:32:d3:84:d2:6f:1e:ff:cc:9b:bb:94:
                    8a:fc:7f:e0:a7:f1:36:ed:6e:c2:fb:3d:dc:42:39:
                    49:45:96:54:f0:24:28:b3:26:b1:f8:52:51:ba:0e:
                    c0:a4:b8:67:03:2f:f7:be:22:71:dd:23:4f:bf:44:
                    8c:3a:ff:bb:15:fd:9a:b7:27:f4:f3:55:7c:02:b3:
                    b5:c9:96:eb:cb:2d:0a:9c:78:28:c9:11:00:d7:33:
                    b8:08:b4:87:54:2a:b9:49:de:8e:f4:ef:fb:db:1c:
                    21:14:21:08:33:73:d6:8b:42:e8:ba:05:ab:a0:16:
                    7c:b9:3a:0d:55:83:4b:b9:63:4b:e4:55:1d:ea:16:
                    a1:6f:e2:7c:fe:6b:e3:4a:10:8b:a8:1e:c5:a5:61:
                    24:4c:6a:64:53:45:dd:7f:78:62:dc:bd:11:e1:10:
                    a9:9e:cc:bc:f6:74:93:77:22:96:bc:cc:b7:92:28:
                    f4:70:33:67:0b:ae:a0:16:80:d3:cf:aa:51:c6:f6:
                    09:21:8f:44:f6:27:94:0e:2a:15:18:d9:14:08:8d:
                    da:fb:cc:6a:6a:45:fd:2a:0e:e5:69:69:a1:cc:b9:
                    b1:b4:c6:c0:d6:d4:98:81:10:13:07:a2:4c:ce:3f:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DA:1F:23:41:4F:C5:87:4B:6A:69:56:9B:EE:0C:D3:AA:BA:2D:61
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:28:d2:78:bf:6c:d1:c8:c5:3a:fc:16:c8:85:c1:20:a8:fd:
         c5:2d:32:34:da:99:38:ea:3f:de:f1:b1:25:2d:21:f5:a5:69:
         d6:c9:f3:1c:78:ff:15:71:7f:fe:a3:64:be:8b:ae:f4:ce:ac:
         6a:27:8b:d5:c2:25:9f:32:ac:ba:76:2a:dc:8f:a3:4c:6e:cb:
         c8:81:ee:6c:ef:b6:29:ec:b6:15:7f:04:fa:23:2e:ea:6e:2d:
         92:b8:cf:f0:7e:e4:be:63:e6:12:17:17:54:b7:91:5e:09:71:
         c2:b6:2a:d9:4f:e9:5f:ee:2e:92:6a:bf:69:65:a4:51:01:bf:
         2e:cd:cc:90:14:c0:7e:08:3e:b6:34:e0:b6:5a:c5:6c:a9:8f:
         62:6e:aa:e1:2f:a1:09:5d:a4:87:7e:7d:80:3e:51:fa:0a:75:
         65:0b:82:5d:0d:a9:e1:78:e6:42:7f:c8:95:24:0b:43:8f:ec:
         28:51:fc:cc:27:01:a5:e5:d0:fa:93:50:df:33:ce:7f:f2:66:
         db:7c:b9:17:5e:2c:63:3c:a1:4b:3e:4a:72:e8:45:6a:0d:dc:
         57:d8:46:70:28:9c:ef:be:01:1f:f9:a7:d1:6d:ea:83:6f:7b:
         0c:85:19:75:2d:a4:7a:f4:e4:79:4b:83:d1:e1:69:24:2d:d9:
         af:bd:50:04
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUF8aJ/qANYq6tJrCHiByKKvohJuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjA2MTMxOTM3MTFaFw0yNjA2MTQyMzAwMTFaMDMxMTAvBgNV
BAMTKDk3REExRjIzNDE0RkM1ODc0QjZBNjk1NjlCRUUwQ0QzQUFCQTJENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFByCPgIKMCeVtsEJHvwv5ymMy
04TSbx7/zJu7lIr8f+Cn8TbtbsL7PdxCOUlFllTwJCizJrH4UlG6DsCkuGcDL/e+
InHdI0+/RIw6/7sV/Zq3J/TzVXwCs7XJluvLLQqceCjJEQDXM7gItIdUKrlJ3o70
7/vbHCEUIQgzc9aLQui6BaugFny5Og1Vg0u5Y0vkVR3qFqFv4nz+a+NKEIuoHsWl
YSRMamRTRd1/eGLcvRHhEKmezLz2dJN3Ipa8zLeSKPRwM2cLrqAWgNPPqlHG9gkh
j0T2J5QOKhUY2RQIjdr7zGpqRf0qDuVpaaHMubG0xsDW1JiBEBMHokzOP0flAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUl9ofI0FPxYdLamlWm+4M06q6LWEwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy
QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSjSeL9s0cjF
OvwWyIXBIKj9xS0yNNqZOOo/3vGxJS0h9aVp1snzHHj/FXF//qNkvouu9M6saieL
1cIlnzKsunYq3I+jTG7LyIHubO+2Key2FX8E+iMu6m4tkrjP8H7kvmPmEhcXVLeR
XglxwrYq2U/pX+4ukmq/aWWkUQG/Ls3MkBTAfgg+tjTgtlrFbKmPYm6q4S+hCV2k
h359gD5R+gp1ZQuCXQ2p4XjmQn/IlSQLQ4/sKFH8zCcBpeXQ+pNQ3zPOf/Jm23y5
F14sYzyhSz5KcuhFag3cV9hGcCic774BH/mn0W3qg297DIUZdS2kevTkeUuD0eFp
JC3Zr71QBA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:10:01 2026 by rpki-client