Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
File:                     114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json)
Hash identifier:          i6xvZVIIEqHR/dswIJ6hzc+BbylVelxhgfuXhDt4q6A=
Subject key identifier:   25:C5:9E:5E:B4:46:0B:C9:D2:19:0F:1A:02:DF:44:0F:02:DA:A4:30
Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD
Certificate issuer:       /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
Certificate serial:       0EF7A20055ACBA1420EC4DF2B2A5C9D2544550FC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
Manifest number:          C2
Signing time:             Sat 13 Jun 2026 11:41:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:36:46 +0000
Manifest next update:     Sun 14 Jun 2026 13:18:46 +0000
Files and hashes:         1: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: fUuOslf0UEKCmARx9BXsZ0OyaRQOBB/zmDSzlywAniw=)
                          2: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=)
                          3: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:a2:00:55:ac:ba:14:20:ec:4d:f2:b2:a5:c9:d2:54:45:50:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
        Validity
            Not Before: Jun 13 11:36:46 2026 GMT
            Not After : Jun 14 13:18:46 2026 GMT
        Subject: CN=25C59E5EB4460BC9D2190F1A02DF440F02DAA430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:aa:00:60:85:af:ac:f4:cb:fb:04:36:c2:
                    b6:e3:bb:ae:dd:c4:c9:9c:02:81:f8:64:62:99:82:
                    6a:07:3d:09:75:2e:16:f9:92:a8:9c:c6:dd:ce:ff:
                    0d:a7:63:bf:ed:ae:77:68:06:c9:aa:76:ad:37:00:
                    35:0b:0c:95:76:cf:ca:fb:4f:26:5f:0a:13:ba:dd:
                    74:ce:16:0c:f7:52:a0:59:cb:b1:01:9a:7d:96:c7:
                    cf:9a:44:11:5e:d7:65:0f:ea:7b:69:ad:23:36:c4:
                    a9:9b:75:a8:f1:2d:d4:62:71:83:0b:b2:33:5d:a8:
                    90:fe:27:21:16:2f:d4:b6:4a:ef:1e:3d:2e:49:0b:
                    f6:70:9d:ae:1d:43:01:d2:0f:0d:13:ae:c7:a2:9c:
                    2f:1c:dd:ad:ea:10:b7:a5:37:65:eb:89:0f:f5:26:
                    a4:62:21:ab:69:b0:68:f6:0f:8f:a7:bd:ad:9d:2a:
                    e6:25:09:31:e9:75:c8:0c:43:a9:d6:e1:6d:37:fd:
                    b7:a0:8a:bb:10:94:5d:cf:89:9c:c1:ed:31:43:ed:
                    ac:98:a9:f1:71:92:3c:66:a2:94:26:3a:3d:44:00:
                    72:f1:4f:b3:4f:c9:07:f1:97:d1:3a:17:f4:a0:d3:
                    f4:76:e3:4a:1a:da:dd:52:1b:5c:8e:6c:0e:69:de:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C5:9E:5E:B4:46:0B:C9:D2:19:0F:1A:02:DF:44:0F:02:DA:A4:30
            X509v3 Authority Key Identifier:
                keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:67:23:bb:9b:15:41:18:98:a1:19:cd:2a:25:b9:1b:df:
         f1:29:0b:5c:b3:44:8d:c8:2c:8c:09:d5:ef:c5:1f:18:6a:62:
         4e:73:e3:e2:8f:a6:17:73:97:c8:4b:47:37:55:f2:f6:a5:0b:
         55:87:4d:2c:fb:ef:0b:6d:29:a0:b7:00:8b:a7:46:54:f2:5d:
         92:c9:2b:06:ef:ad:35:7b:18:2b:3f:30:07:94:9d:e3:c7:84:
         2b:64:58:e0:c8:4c:b8:21:ca:57:b6:12:d8:55:42:07:8c:e2:
         b8:39:5b:91:fa:f3:58:1c:25:2f:b6:76:d5:c7:7d:b4:ea:de:
         bb:4b:db:6f:ba:e6:d6:a7:ff:8a:fb:33:01:af:7b:2f:00:e4:
         53:2f:29:66:a9:30:5b:1f:88:f2:68:a5:71:91:52:fc:5b:f2:
         38:35:81:55:e5:5d:f7:07:cd:06:b2:5f:6f:f9:b5:38:c2:d6:
         35:c4:e4:b4:ff:bf:05:99:38:98:67:88:66:64:8f:ef:fe:39:
         92:8f:94:3b:8d:ec:3c:f3:67:e3:06:f5:b2:a7:8f:fa:c8:65:
         fc:e1:81:a6:fc:af:e3:f2:30:66:b9:60:c0:54:15:c6:fb:dd:
         24:72:76:e1:ca:13:51:4f:d3:ba:5c:13:36:72:7a:6f:0a:de:
         e6:8f:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:29:51 2026 by rpki-client