Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File:                     EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier:          IzJP98UME3SmM63SQHdXFExSbjqBql7eSg2+VzK4zLA=
Subject key identifier:   D4:8B:EF:5F:DA:AB:B0:B4:2C:AC:24:AF:3B:DE:C1:DA:4F:31:C1:6A
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       17EC0E8E401A83CC982D173C82D3054D0CB7C6AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number:          C1
Signing time:             Sat 13 Jun 2026 06:51:24 +0000
Manifest this update:     Sat 13 Jun 2026 06:46:24 +0000
Manifest next update:     Sun 14 Jun 2026 08:57:24 +0000
Files and hashes:         1: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
                          2: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
                          3: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
                          4: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
                          5: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
                          6: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
                          7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
                          8: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: uBmme+TRtkYkrgRxdwkbjjtiYp1tbH7jFloC3NSRbCI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 08:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:0e:8e:40:1a:83:cc:98:2d:17:3c:82:d3:05:4d:0c:b7:c6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Jun 13 06:46:24 2026 GMT
            Not After : Jun 14 08:57:24 2026 GMT
        Subject: CN=D48BEF5FDAABB0B42CAC24AF3BDEC1DA4F31C16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:7f:21:cf:24:38:c2:7a:24:d1:69:fb:b0:
                    00:e4:de:c7:2b:eb:37:bd:79:8a:ff:af:f9:a5:ba:
                    dd:99:40:8d:e9:3c:79:78:3a:d8:eb:a0:06:cb:42:
                    9b:63:18:00:a0:ad:79:ea:ce:d5:52:7e:62:a1:bf:
                    d3:d2:1f:b9:3d:0b:3e:ae:d9:20:0e:34:90:71:00:
                    80:24:83:c1:ba:03:92:51:b2:15:11:33:d3:87:ee:
                    00:fb:ad:3c:f5:11:36:0c:a8:ea:75:f9:76:8b:6b:
                    a6:ad:d4:17:6e:eb:28:24:eb:39:04:b0:0e:54:17:
                    72:0f:66:ef:61:63:28:6a:ca:47:c5:6e:4f:bd:03:
                    c6:b4:be:48:37:ca:d9:b2:e5:a1:a9:8b:a8:b1:ad:
                    57:8a:31:ca:84:68:ab:bf:29:37:86:fb:7b:ae:94:
                    78:d6:2d:94:47:38:2b:f8:8f:c2:50:06:5f:88:ce:
                    72:fc:09:8f:f8:85:48:9b:46:80:50:b4:64:e6:54:
                    9c:08:79:d2:aa:20:e4:de:6d:3d:25:5e:fb:f6:0a:
                    d2:74:98:78:37:65:20:60:b3:6e:fb:0c:7d:88:17:
                    28:65:46:d9:4b:28:96:8a:21:46:87:83:37:77:4e:
                    a9:63:d4:6d:23:62:65:46:92:41:e6:16:da:fd:ce:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:EF:5F:DA:AB:B0:B4:2C:AC:24:AF:3B:DE:C1:DA:4F:31:C1:6A
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:25:f9:f1:27:ea:88:19:39:50:80:23:46:26:98:c8:66:
         0e:c1:fc:ba:47:62:32:4d:d9:a4:8e:1d:18:47:c3:c7:61:46:
         a5:84:af:7f:3f:0e:28:13:dd:af:87:8d:89:e3:12:1c:9f:3a:
         e7:60:65:1b:84:52:c5:96:75:90:5d:c1:6c:ef:35:c3:d1:75:
         36:fe:fc:6c:3b:df:c8:18:bf:0f:d6:5c:c1:a6:23:32:de:23:
         8d:8f:77:65:1a:02:29:05:29:64:85:6e:b3:c1:ee:58:77:b7:
         1a:8a:7d:2d:a0:6d:e5:a2:53:91:f5:ed:58:7d:95:70:84:82:
         95:95:b9:1a:a6:a2:fd:3c:e2:f7:24:5e:a0:6d:ac:0b:44:28:
         fe:25:3b:ba:8d:f2:13:36:db:5d:a0:51:c4:32:57:f4:28:e6:
         0a:8c:65:a8:64:fa:77:54:18:e4:76:ed:33:ce:83:8b:53:07:
         5b:b6:57:f9:fc:71:dd:32:14:2d:e9:42:68:92:89:dc:dc:e8:
         76:e9:e1:ad:ed:19:e1:78:e3:38:e8:8d:9e:60:36:dd:17:a5:
         41:0b:fb:f4:49:94:dd:d8:bf:a6:2b:cc:90:68:38:94:16:b5:
         d2:00:ba:c5:e0:cd:92:31:81:bb:7d:c5:fa:08:ba:36:eb:14:
         18:c7:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:54 2026 by rpki-client