Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier:          o773/jrcF41Mt6alByIH/WeHr/nsBUm5h85eXH18X+w=
Subject key identifier:   E2:ED:6A:39:10:A9:39:62:79:0D:EF:55:5A:43:58:82:8B:E2:1B:82
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       348586A1F9F7410785720D3B19743C6C760B5009
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 13:44:43 +0000
Manifest this update:     Fri 17 Apr 2026 13:39:43 +0000
Manifest next update:     Sat 18 Apr 2026 15:43:43 +0000
Files and hashes:         1: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
                          2: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
                          3: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
                          4: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
                          5: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
                          6: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
                          7: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
                          8: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: EanxOOuxDiKXLwqsAoGLR9Byc1FdDm8fPTwznxgWZ2w=)
                          9: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
                          10: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
                          11: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:85:86:a1:f9:f7:41:07:85:72:0d:3b:19:74:3c:6c:76:0b:50:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Apr 17 13:39:43 2026 GMT
            Not After : Apr 18 15:43:43 2026 GMT
        Subject: CN=E2ED6A3910A93962790DEF555A4358828BE21B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:fc:d9:c4:c7:2f:ff:86:a7:c3:b6:ce:b9:
                    4f:3c:f1:7a:3b:e5:38:d9:54:06:fb:0f:6a:96:4e:
                    20:03:28:43:36:36:f3:db:67:84:39:63:03:d9:fa:
                    e4:2d:f9:9e:2f:71:8f:c6:d8:06:bc:9c:1b:ec:6c:
                    b5:5c:cc:91:89:8f:f1:d8:6f:ae:48:db:66:93:69:
                    63:c3:b5:55:69:b4:ff:4f:ed:0e:1d:57:6b:dc:94:
                    bc:51:5c:44:f5:56:48:89:22:d6:d0:35:7c:1e:f2:
                    7e:e4:65:87:7f:c6:c1:a5:5f:dc:3f:87:59:7a:a1:
                    7b:4f:26:df:b2:9c:4b:08:77:6d:9a:e9:e7:79:bf:
                    16:56:a7:b9:68:98:3b:8d:d7:77:74:f8:a4:d0:cd:
                    10:a6:f8:30:92:d8:d1:12:65:25:d6:da:e6:dc:3e:
                    11:ae:c1:9a:a8:6a:56:5b:ab:4b:cb:4d:cb:89:33:
                    9b:3a:4c:09:f9:8e:d0:32:86:8f:c2:8a:32:47:5d:
                    32:bf:78:4c:98:61:37:c0:3b:17:cc:8b:11:8e:45:
                    10:ec:83:d8:ad:4d:cc:b9:78:dc:0a:21:ac:c4:bd:
                    2b:c4:20:4b:a4:b8:11:16:f5:cd:80:34:af:1c:05:
                    a8:10:fd:97:28:71:7d:10:8a:d1:c3:3e:59:c4:7e:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:6A:39:10:A9:39:62:79:0D:EF:55:5A:43:58:82:8B:E2:1B:82
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:58:06:70:a6:83:16:bf:d9:81:24:a6:9c:f0:38:57:15:
         ba:f4:a4:8f:62:c5:63:72:af:4e:53:4c:39:69:11:70:4c:86:
         9d:dd:d0:c1:31:00:3d:86:57:fa:d4:9f:27:a4:23:04:4b:96:
         1c:8f:da:be:20:fc:ed:8f:29:f5:e9:e4:58:84:b9:91:8c:cf:
         33:ba:b0:fd:a8:35:6d:c5:06:54:4c:7b:16:d2:41:1c:f8:ae:
         1e:1b:bf:62:e0:f9:1f:98:40:57:93:13:c5:72:04:2b:2c:f4:
         a8:23:64:cb:45:8e:d3:46:62:17:ee:d7:38:67:b9:18:68:68:
         de:2f:5b:aa:83:2e:30:53:bf:85:df:12:aa:92:ba:84:c6:c4:
         6b:1c:39:c2:b5:01:9d:b3:fa:99:b7:3c:ce:27:e7:91:d4:d7:
         6c:4f:d4:d4:b6:78:82:f5:a8:91:14:4a:06:a8:37:47:6d:06:
         fc:35:07:47:10:1d:55:be:cc:f1:d9:0b:97:f7:a4:42:3f:ce:
         7d:81:9f:6c:3a:49:0b:ee:7e:f9:a2:99:5b:8f:5e:6d:51:d0:
         a1:39:a4:22:20:3e:40:04:e5:9b:26:e2:a1:6d:9b:6b:5a:fc:
         fe:4f:95:80:d5:49:82:88:16:e0:3b:16:55:80:11:b3:50:aa:
         37:7d:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:20 2026 by rpki-client