Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          RXER6GwXN1DIVBmeIk3qiW7+qR0icYbB/r8YbfscHns=
Subject key identifier:   9E:97:BC:BD:3D:5E:CD:6C:55:D3:44:C3:09:CC:7F:A2:2C:75:CD:78
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       790CEBAF5EBDCBFC56D57CD14445434B01EA636D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          C3
Signing time:             Sun 14 Jun 2026 06:07:50 +0000
Manifest this update:     Sun 14 Jun 2026 06:02:50 +0000
Manifest next update:     Mon 15 Jun 2026 09:34:50 +0000
Files and hashes:         1: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          2: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
                          3: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
                          4: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          5: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          6: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: ocrdIXXI+dD72hwOn43K5Zuio23986oVtVTgZJtABIk=)
                          7: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          8: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          9: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          10: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          11: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          12: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
                          13: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          14: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          15: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 09:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0c:eb:af:5e:bd:cb:fc:56:d5:7c:d1:44:45:43:4b:01:ea:63:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Jun 14 06:02:50 2026 GMT
            Not After : Jun 15 09:34:50 2026 GMT
        Subject: CN=9E97BCBD3D5ECD6C55D344C309CC7FA22C75CD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:2a:f5:2e:94:49:82:cd:0b:35:8f:13:40:
                    41:51:30:36:80:be:b3:89:c2:fa:30:a9:21:f6:ff:
                    8b:c3:fb:ee:86:d3:42:6f:eb:c7:ca:b3:79:32:ba:
                    78:b7:63:78:dc:a6:39:e4:75:e3:13:ff:9a:a5:23:
                    41:44:3f:20:7e:0c:84:50:72:c5:74:19:d4:e0:03:
                    cf:43:1e:78:13:e9:48:32:7b:b4:28:20:44:5c:ae:
                    cb:a5:f6:d2:d4:6b:fb:76:e7:3d:74:a4:2c:f7:ed:
                    e0:6f:a5:63:96:b7:f1:ea:b2:af:bc:f8:a0:60:6d:
                    d5:0f:f4:3c:65:1a:0f:3a:5d:e8:d6:93:2f:69:21:
                    7f:82:a7:c2:bb:38:f4:fd:39:9d:2e:50:d4:be:92:
                    d4:83:78:6b:d3:ea:ad:fb:71:9c:45:64:8c:12:72:
                    56:13:d7:cf:38:79:17:34:71:cc:6d:57:46:8e:ae:
                    33:5d:d5:4c:06:60:54:a1:99:3c:83:57:19:80:7e:
                    28:cd:da:bd:16:3c:5a:3a:99:7c:d8:73:8d:ea:0d:
                    29:63:6a:60:d0:19:3b:27:9f:a1:d3:66:e2:c6:c9:
                    18:cf:80:72:36:1e:84:02:c3:78:56:cb:3f:09:ae:
                    29:48:ba:66:f8:72:8b:d3:d3:0a:ac:5f:7d:52:c6:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:BC:BD:3D:5E:CD:6C:55:D3:44:C3:09:CC:7F:A2:2C:75:CD:78
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:04:46:cb:94:3c:61:ad:66:1b:1d:06:14:84:1f:25:6d:e8:
         03:41:e1:38:a2:17:b6:55:db:28:28:aa:4e:2d:de:a5:4b:10:
         73:1a:c6:f0:c8:02:2c:3e:01:a7:f0:74:61:fe:2b:ca:04:3d:
         5c:20:c1:54:03:85:c2:57:2f:e2:6f:aa:7d:0f:b3:02:73:ea:
         14:91:da:21:fc:7a:53:84:b8:81:89:3a:5b:ea:ee:2f:64:14:
         f0:45:f3:77:c9:e5:af:10:ee:2d:9b:d9:99:ff:cc:76:18:e2:
         f8:d3:92:72:34:89:21:c8:94:6d:eb:1c:89:bf:76:bb:59:ef:
         8b:e2:57:ce:52:4b:ce:d0:af:34:64:07:a6:ff:6c:25:d4:dc:
         13:6a:05:12:bf:59:94:09:06:c0:c8:c7:e4:b6:4f:b4:e4:f8:
         41:bb:4b:8e:6d:eb:59:0d:64:1d:96:54:e1:f7:23:a8:da:f8:
         bd:f5:8c:1a:1f:3b:f1:9f:ea:83:51:f6:eb:a3:9f:6b:fe:c0:
         67:9c:0e:ee:63:fe:de:63:0f:0e:eb:c1:73:bb:ce:67:82:8c:
         92:19:1c:d8:fd:90:b4:cd:18:48:ab:7f:59:18:f7:a2:7f:04:
         14:23:e7:86:26:81:93:66:4e:80:58:69:3e:8e:9f:de:2a:12:
         4d:02:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:50:49 2026 by rpki-client