Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          IxS5yqE5JmKNXrbQf239dwnk2u1N8tveM4JI8UgTXKs=
Subject key identifier:   A7:15:5D:35:2C:D7:8E:FB:39:AD:38:7D:7C:11:C8:BC:FE:9A:B6:E5
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       18790A22093207D5EC4B1158E9817145F91919A7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          013B
Signing time:             Mon 12 Oct 2026 04:31:31 +0000
Manifest this update:     Mon 12 Oct 2026 04:26:31 +0000
Manifest next update:     Thu 15 Oct 2026 10:01:31 +0000
Files and hashes:         1: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          2: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          3: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: zkgScfzqxyXy5sp/wSAYU4pt2KwfB4hSzwg0fpgzG5I=)
                          4: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          5: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          6: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          7: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          8: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          9: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          10: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
                          11: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:79:0a:22:09:32:07:d5:ec:4b:11:58:e9:81:71:45:f9:19:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Oct 12 04:26:31 2026 GMT
            Not After : Oct 15 10:01:31 2026 GMT
        Subject: CN=A7155D352CD78EFB39AD387D7C11C8BCFE9AB6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:eb:b2:83:29:ec:3a:59:74:5f:15:e5:0b:
                    3e:6d:6a:fa:bd:74:71:1d:e4:aa:77:8e:20:4d:b0:
                    99:70:5b:28:6f:da:7e:da:a6:c7:44:2b:8c:05:17:
                    84:e0:74:4d:1b:86:b2:c6:74:69:49:95:6d:99:cf:
                    6c:da:d0:19:d0:47:8e:e0:ac:14:79:6e:3b:49:b2:
                    20:74:e6:10:98:41:a7:cc:92:f7:38:f8:9a:7e:15:
                    a2:52:eb:4c:91:82:31:e5:47:45:fb:c8:e0:c7:15:
                    e4:74:6b:2e:7e:f7:f3:fd:c4:48:90:2a:2b:5f:08:
                    18:81:24:62:42:42:c0:d5:7f:57:b6:b0:8c:a1:1f:
                    d6:e3:12:ae:0e:f0:17:31:ba:6d:34:1a:81:02:0d:
                    d2:f5:a9:1b:1c:04:4c:96:7c:e6:ed:f3:09:c7:cb:
                    ee:4d:1c:aa:dd:6f:ce:6a:ec:c8:59:c5:32:61:8f:
                    fa:48:72:05:11:fe:20:f6:9a:4c:84:af:e2:c4:2c:
                    3b:af:bd:6b:78:7d:9b:89:a6:b3:01:7b:de:cb:3d:
                    59:9c:52:07:48:95:a2:0f:cb:b1:7b:b1:0e:87:51:
                    0a:2c:e1:92:a3:ed:86:2b:78:99:4e:d7:8b:d4:6d:
                    33:93:46:f3:2b:94:d1:7a:34:50:c2:dd:ac:79:b6:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:5D:35:2C:D7:8E:FB:39:AD:38:7D:7C:11:C8:BC:FE:9A:B6:E5
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:60:c7:34:d8:cd:ae:66:cb:09:cc:2f:fa:85:2d:b8:a2:13:
         87:0e:e6:20:58:ef:eb:67:7d:23:05:82:47:a5:ff:1b:b0:ba:
         37:8f:b9:88:1c:f1:00:fc:f9:8e:a3:93:d6:9f:71:1a:7a:4c:
         33:4e:38:5e:c5:fa:02:c8:67:a6:24:91:62:99:ba:08:19:83:
         77:20:d3:dd:1b:c5:f9:dc:f2:d7:4c:18:69:d5:ba:be:1f:d5:
         2c:d8:83:6d:61:48:23:60:0b:9d:5d:fe:31:e4:75:7f:e0:d4:
         4f:e9:24:3b:b2:00:81:b8:a0:41:45:8b:33:10:08:a7:05:56:
         78:82:f6:e0:4b:51:3d:23:bd:ed:75:7f:26:b8:3a:b1:35:a5:
         2c:0d:62:71:a4:c0:a6:56:ea:fa:cb:6c:2e:ec:ee:fc:85:cb:
         69:e3:6b:e2:27:5f:8c:c6:8d:80:58:d3:1d:e9:41:49:51:42:
         6f:fa:e5:97:15:bd:de:07:9b:9d:5f:a7:3b:ae:1b:3f:35:a5:
         0b:04:a9:31:db:ca:43:8e:f6:5b:66:0d:18:94:83:39:48:b7:
         f9:6e:9d:b6:ba:30:6f:4a:e3:13:72:aa:2d:51:75:43:12:c8:
         d4:84:2b:38:67:c1:1f:be:a0:f6:a0:69:88:10:85:92:3b:a3:
         52:4c:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:08:04 2026 by rpki-client