Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
File:                     E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json)
Hash identifier:          T0ZYbVkAkKgM2WDhqjgITheb5sdATqI8yLrYCxI+5x0=
Subject key identifier:   F1:C7:2A:E9:C8:C4:91:DD:E4:CB:B5:B1:8F:4A:92:CF:62:3E:72:23
Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
Certificate issuer:       /CN=E9EED0187DAE9147812C7B516912D58FD976B964
Certificate serial:       34479DB4531147598DEA11AAD48CF51368378D91
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
Manifest number:          C3
Signing time:             Sat 13 Jun 2026 22:32:22 +0000
Manifest this update:     Sat 13 Jun 2026 22:27:22 +0000
Manifest next update:     Sun 14 Jun 2026 23:48:22 +0000
Files and hashes:         1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=)
                          2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: KFkKIOJGPvZa3X2qLX7olpFAHd2Z5ZcfopRyfD/MU9k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:47:9d:b4:53:11:47:59:8d:ea:11:aa:d4:8c:f5:13:68:37:8d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964
        Validity
            Not Before: Jun 13 22:27:22 2026 GMT
            Not After : Jun 14 23:48:22 2026 GMT
        Subject: CN=F1C72AE9C8C491DDE4CBB5B18F4A92CF623E7223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:8e:90:71:e8:3b:6f:c0:ed:22:30:b4:f2:
                    b9:44:fd:e7:34:16:8b:47:fa:4a:a7:80:87:11:48:
                    c8:93:cb:1a:d1:5c:df:b6:c1:5f:b9:3e:82:01:7b:
                    ba:9c:36:3a:f0:34:1d:75:be:19:20:1c:cc:cc:80:
                    e8:01:9f:9d:4f:f8:78:3d:51:7b:b2:59:07:e5:5a:
                    60:6a:aa:bc:7d:fb:ac:87:ab:91:c4:0b:2b:3e:26:
                    f1:01:fb:26:7d:39:eb:49:c0:36:9e:01:f6:4f:f7:
                    d1:96:1e:6a:31:27:4d:cb:a2:d7:1f:ba:6c:ef:46:
                    8b:04:64:e9:49:5f:f2:ca:f9:99:b3:bd:10:a9:34:
                    10:6c:59:ec:0e:08:83:b3:12:4d:03:01:89:07:1f:
                    ac:7e:43:11:cf:a6:cf:d2:26:27:64:69:60:cc:f3:
                    0a:c5:17:33:e0:1f:b2:d2:be:da:0e:d4:83:27:cb:
                    2a:6c:bc:95:4a:df:4a:99:97:3b:bb:27:3d:5b:2b:
                    05:4c:90:47:54:c9:8a:6d:40:0f:47:2f:32:17:09:
                    58:07:f7:b1:f8:e3:06:3f:9e:84:30:f6:c4:3a:23:
                    60:cb:8a:dd:8d:cf:2d:6a:e2:8e:e1:1a:1c:0d:a1:
                    d3:7d:68:92:dc:66:2c:61:31:0f:64:81:95:40:40:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C7:2A:E9:C8:C4:91:DD:E4:CB:B5:B1:8F:4A:92:CF:62:3E:72:23
            X509v3 Authority Key Identifier:
                keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:fc:af:f3:af:00:ff:84:4d:b9:f4:ac:3f:b7:2f:35:04:47:
         fe:5c:be:bd:ad:b0:be:96:6c:24:86:6b:61:2b:6e:f7:13:5c:
         11:7e:bc:ba:98:e7:36:38:d9:08:d9:73:1e:8c:65:e3:30:f0:
         0a:34:d3:57:c8:63:dc:9d:a9:3e:a1:f1:71:43:d9:8c:a3:47:
         b4:d8:c5:d0:65:95:9d:47:40:90:4d:4e:cc:65:00:fd:47:82:
         35:9d:e4:f7:8e:87:50:32:eb:b1:54:0a:14:8d:f1:b0:d0:00:
         3d:2c:31:82:ae:96:a2:84:17:e1:d6:6a:da:58:30:1b:f4:81:
         4f:05:5b:a1:0a:94:bf:f3:33:64:d3:5a:34:30:2f:b2:0c:f2:
         c4:1f:70:ba:18:10:ee:f0:df:18:0e:d2:d6:6c:0b:21:86:1c:
         db:0a:fc:f0:3f:a6:1a:51:48:c8:5d:34:86:e0:c7:1a:64:8d:
         eb:b9:95:81:da:94:d5:bb:a0:85:95:0b:e9:a1:8d:53:78:11:
         3e:65:fb:ae:86:56:87:f6:ad:11:43:87:3c:42:b5:bb:ce:9a:
         94:88:37:b7:0f:9f:a7:e2:84:22:ad:c0:5b:91:f0:24:a5:33:
         7f:b5:95:51:2a:36:ea:2e:78:52:98:4f:d3:5d:78:20:38:5c:
         1f:da:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:12 2026 by rpki-client