Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File:                     816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier:          Y2K1BPL0V3MxSvWjAe1qyvMJ0G8Y1+sOINs5pka0TQE=
Subject key identifier:   73:E1:5D:88:FA:10:4F:76:A0:A3:CC:40:29:3F:97:CF:46:16:CC:66
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer:       /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial:       61036EA63062B942EF32C6953ACE86557CC8A581
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number:          C3
Signing time:             Sun 14 Jun 2026 00:37:29 +0000
Manifest this update:     Sun 14 Jun 2026 00:32:29 +0000
Manifest next update:     Mon 15 Jun 2026 04:03:29 +0000
Files and hashes:         1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
                          2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: 2Cn3YsatdMkU4slktpg0YDv2DAoq4yDn6hnTOTvYUEc=)
                          3: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:6e:a6:30:62:b9:42:ef:32:c6:95:3a:ce:86:55:7c:c8:a5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
        Validity
            Not Before: Jun 14 00:32:29 2026 GMT
            Not After : Jun 15 04:03:29 2026 GMT
        Subject: CN=73E15D88FA104F76A0A3CC40293F97CF4616CC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:0a:5c:92:68:7b:a6:9a:a7:3c:62:97:3f:
                    d2:ca:d9:7f:55:0e:a4:f1:ad:eb:93:95:50:5f:3a:
                    5e:7e:03:f1:8a:51:70:13:a5:17:c7:29:28:3e:d7:
                    b8:c4:11:1c:6a:94:12:de:7e:f0:04:4b:ef:5b:b1:
                    80:68:40:fe:37:27:70:f9:a0:91:56:cf:29:eb:c6:
                    e5:82:be:bc:33:f1:5f:93:c7:bc:61:95:91:c7:74:
                    9c:07:07:e2:9b:51:13:5f:4b:c2:e1:7a:01:43:72:
                    2d:a8:ab:55:ff:07:4d:9a:42:9d:e2:42:75:3d:6b:
                    45:59:ba:e4:d0:fb:9d:87:b6:ff:13:66:f0:32:1c:
                    55:c5:39:3b:df:f8:04:5f:16:10:92:3a:82:9a:b0:
                    c0:31:f1:45:4f:ac:31:54:fe:0d:4b:a3:3e:1b:be:
                    24:71:55:08:9a:63:a0:4b:13:94:92:06:20:7f:f9:
                    5b:fc:fd:46:c9:eb:04:a4:35:23:df:5d:1f:a4:7f:
                    ca:c1:a5:34:f5:ef:73:c0:f7:49:c1:55:b9:00:ce:
                    90:3c:ab:1e:d6:c6:f4:ac:3d:93:0e:b8:ff:05:7c:
                    ea:1f:bd:4f:b0:65:b0:66:34:ca:6d:e8:73:6c:12:
                    da:6d:cd:48:84:00:47:e7:63:c0:13:a2:6a:bf:0e:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:5D:88:FA:10:4F:76:A0:A3:CC:40:29:3F:97:CF:46:16:CC:66
            X509v3 Authority Key Identifier:
                keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:65:b6:b5:d1:07:05:a4:55:c5:3e:aa:03:5a:12:1e:17:71:
         9d:de:81:26:cd:f8:dd:a1:7b:47:79:39:11:c1:be:d5:b5:78:
         cc:3c:b3:a5:eb:dd:de:ea:08:f5:eb:a3:74:19:48:60:c7:fc:
         1f:81:26:97:8c:02:86:f8:03:8b:f0:58:f1:e8:01:5c:a9:d2:
         81:a4:12:95:ab:9f:a1:41:08:88:43:1a:aa:32:95:39:64:b1:
         6e:2e:ce:f9:72:70:5d:0c:d6:33:2d:f9:1f:31:bb:ba:f7:7d:
         5b:42:24:45:b9:ea:19:c2:93:75:77:bf:ad:e3:1a:8b:56:41:
         5e:07:90:41:f8:83:c7:ca:c7:7c:56:bf:48:7c:44:ed:36:76:
         28:2a:b4:b2:fc:db:20:3b:6f:91:21:c2:43:d8:d8:63:86:31:
         1c:6d:f8:7c:e9:17:71:f7:4c:73:a8:8d:aa:cb:f5:65:cd:ed:
         88:32:1c:80:0f:ae:fd:62:79:e1:26:1e:30:a8:54:45:4d:f1:
         5b:e7:d5:3e:6e:9f:6f:f7:25:d2:da:fc:d5:17:f6:cf:24:34:
         fd:b7:46:62:6c:ca:df:2e:b5:e4:55:de:3b:2b:33:41:3f:29:
         fa:a4:90:46:8f:43:ea:34:5f:7d:e6:b7:20:8b:66:ae:6a:93:
         ea:d4:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:15 2026 by rpki-client