Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          8C+l7TU2NNQ3cppe1BmzyDNvN614VXdfXZnWf4RK5E0=
Subject key identifier:   C6:74:80:76:B6:92:82:D6:41:8A:6E:C2:33:7E:5B:ED:13:C9:48:A2
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       6B789950A82360E42C00FAF294DCABC3E2B55E3A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 10:06:44 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:44 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:44 +0000
Files and hashes:         1: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          2: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          3: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          4: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          5: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          6: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          7: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          8: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: ZRQOcECeWmAZJN11v2jaW7166MxRb63RfhuOsMKJiQw=)
                          9: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
                          10: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          11: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          12: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          13: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          14: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
                          15: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          16: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          17: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          18: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          19: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          20: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
                          21: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          22: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          23: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          24: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          25: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          26: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:99:50:a8:23:60:e4:2c:00:fa:f2:94:dc:ab:c3:e2:b5:5e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jun 13 10:01:44 2026 GMT
            Not After : Jun 14 14:00:44 2026 GMT
        Subject: CN=C6748076B69282D6418A6EC2337E5BED13C948A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:94:e1:49:25:2b:66:82:ae:5c:a2:60:1b:
                    2d:2a:e3:2b:8f:0f:72:91:53:c7:27:cc:76:c8:95:
                    79:50:a1:99:92:37:9e:1d:1f:23:fc:fc:31:fa:fb:
                    30:b6:4a:05:b0:56:06:11:88:97:0f:d4:6d:0a:4f:
                    9c:e6:95:de:b7:71:e2:69:be:fb:82:41:a0:49:05:
                    e5:64:fe:e6:5a:0a:8b:7c:20:a3:13:04:9a:2a:72:
                    fe:80:c4:3e:c4:db:7d:b5:30:6d:b8:8d:34:4f:bb:
                    7c:7b:f3:11:8b:00:46:a7:8d:88:d1:56:06:17:fe:
                    83:f4:68:09:fd:dd:48:21:0c:28:52:98:99:db:34:
                    96:0c:3c:18:79:38:bb:4c:80:64:4a:be:7d:8d:3a:
                    d4:6f:34:fb:2a:83:c7:4d:a8:46:88:a1:1c:19:af:
                    cd:26:ec:92:b6:87:60:b1:aa:2c:1b:ac:22:42:95:
                    5a:a9:84:19:fa:a1:39:5a:1e:73:4f:2d:9c:20:6b:
                    fa:e4:7d:9a:ea:89:47:ee:7d:76:6d:50:7b:db:3e:
                    d6:09:8c:74:e0:97:cd:bd:bf:9a:ef:6d:d1:28:f8:
                    4a:e2:a6:ed:58:35:bd:f7:98:88:d4:ed:73:f6:ba:
                    5c:3d:99:72:3b:68:95:54:0c:10:c2:d3:07:0b:c0:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:80:76:B6:92:82:D6:41:8A:6E:C2:33:7E:5B:ED:13:C9:48:A2
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:60:c4:eb:df:d8:86:71:d0:6b:b5:2a:b0:80:95:98:fb:59:
         f5:91:57:bc:bb:c0:01:45:bc:9d:75:1a:c3:aa:35:e7:4e:dd:
         80:d5:83:5d:eb:5c:fb:07:70:61:d3:cc:df:66:49:cb:69:3b:
         4c:0a:22:62:db:23:f9:5b:22:23:90:4b:47:62:db:01:6a:17:
         4d:a7:4f:2b:00:18:53:98:e0:dd:42:2a:79:aa:7c:99:c0:76:
         1c:0c:6d:52:e9:29:e9:5f:0e:5f:d1:24:07:15:6b:c8:0a:d5:
         46:cd:0d:8b:67:07:79:6b:5c:9f:40:60:9d:ad:33:ca:0a:d0:
         87:e0:f4:02:6d:bb:18:6e:a8:5a:d6:8d:da:ae:ff:cf:7d:37:
         3d:f0:d6:af:f2:8f:2a:70:64:92:2d:f6:fc:c6:1f:2d:9a:3f:
         bd:59:bc:08:81:e5:8c:ee:53:e9:5c:5e:69:06:1a:9e:56:7a:
         18:f9:93:65:f9:81:31:29:3e:a4:7f:26:bf:3c:80:f9:e7:d9:
         fc:55:f9:5c:c4:22:40:42:98:ba:bb:e2:c4:b2:e7:45:36:5d:
         5f:b9:34:7d:79:c9:31:3c:ac:d2:27:9e:92:b1:e1:fb:e3:22:
         d9:f7:2a:35:bd:70:4f:a2:ab:13:1c:b5:cd:3c:01:f7:be:fa:
         4d:6d:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:12 2026 by rpki-client