Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          EA2Pu6WUljJ4X9uSvEnGlP57g2DBEpeKxA40MGUW4q4=
Subject key identifier:   91:F6:48:D2:08:E0:61:9B:A8:D0:69:6B:BC:7D:C1:62:5B:3A:B6:13
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       6E606B577FFFFCF04CB86B33916113EA1F0B232C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          C3
Signing time:             Fri 17 Apr 2026 15:19:43 +0000
Manifest this update:     Fri 17 Apr 2026 15:14:43 +0000
Manifest next update:     Sat 18 Apr 2026 15:25:43 +0000
Files and hashes:         1: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          2: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: sw9YOiV9AvAHzyPoFFv9Y4NDM/MlaetHOgp26Z8Bl2Y=)
                          3: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          4: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          5: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          6: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          7: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          8: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          9: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          10: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          11: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          12: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          13: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          14: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          15: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          16: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:60:6b:57:7f:ff:fc:f0:4c:b8:6b:33:91:61:13:ea:1f:0b:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Apr 17 15:14:43 2026 GMT
            Not After : Apr 18 15:25:43 2026 GMT
        Subject: CN=91F648D208E0619BA8D0696BBC7DC1625B3AB613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:01:2b:02:c7:05:95:8c:2d:3c:4f:76:f1:
                    e5:13:f2:86:37:36:35:0a:9b:6e:58:2e:71:34:91:
                    96:e1:9a:34:2e:df:36:02:d8:f0:c2:2a:7d:33:7a:
                    48:83:d7:04:0f:2d:53:77:6d:e0:e3:88:27:46:94:
                    28:80:12:3a:dd:7c:14:74:d5:ef:45:75:50:c2:69:
                    ec:63:f7:71:e4:bc:3b:38:4e:e2:d4:62:15:de:d3:
                    fb:d3:9f:03:f8:91:fe:90:51:1a:f9:08:0f:b6:c4:
                    d5:1c:e3:57:35:74:09:d8:d8:bc:26:76:7d:f9:41:
                    c2:5f:74:3e:2f:4c:47:12:98:a8:01:66:44:f7:c1:
                    92:43:df:3e:b0:c4:1c:f2:f5:0b:d0:e9:b3:d8:14:
                    fd:be:ec:b6:0a:43:42:3d:42:80:b3:fd:90:f8:fa:
                    22:69:fb:6f:b5:3a:f2:75:be:d4:7f:6e:af:99:c5:
                    c7:36:b1:68:14:08:d8:53:26:09:61:b5:fc:39:6f:
                    2d:41:b5:4a:da:06:51:d3:fa:fa:aa:17:b5:1d:f6:
                    b9:ad:02:3a:e6:c5:56:56:e1:55:6e:29:89:97:13:
                    bf:80:06:c5:20:dd:89:25:ec:f8:2a:9f:17:44:5e:
                    bd:f4:07:db:1c:30:7e:99:c6:39:37:95:24:b1:46:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:48:D2:08:E0:61:9B:A8:D0:69:6B:BC:7D:C1:62:5B:3A:B6:13
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1a:53:41:f5:41:30:cf:6f:6a:e4:ee:26:53:d0:20:2c:3f:
         53:08:da:71:76:a9:48:94:58:8f:ce:0d:af:06:82:ff:15:1b:
         9f:20:9e:34:be:51:58:52:e3:38:6f:41:23:f3:f7:c5:b6:ed:
         b1:de:a9:45:4c:3e:4b:1f:3f:68:d3:22:a9:c3:1e:eb:96:22:
         e7:38:03:1d:4a:4d:ae:cc:eb:7e:a3:aa:ba:53:b0:03:47:5d:
         24:d1:a6:43:6d:85:fe:8e:f7:0f:9a:ac:a2:e4:72:0d:cc:d7:
         8e:5f:86:a0:9d:de:99:6c:d6:ab:84:6a:a5:22:1c:18:1a:53:
         db:e2:aa:44:59:e3:ac:a0:4a:9b:05:34:5e:4a:32:3c:65:6e:
         a1:97:e0:47:f9:74:5f:b0:31:c2:5c:e6:f1:9e:04:fb:9c:e0:
         7b:06:79:9d:68:48:36:ae:ad:9c:6c:7e:b9:72:96:6e:c6:a3:
         1c:70:0d:9e:dc:f0:50:05:55:d6:2f:c8:84:64:91:2e:0f:74:
         cc:a1:1a:b3:37:87:09:80:e3:c0:ff:02:60:d3:36:77:8e:c8:
         2c:91:b6:27:0b:7e:cd:09:2b:8a:0b:6c:47:09:a4:0b:b6:8e:
         64:8a:50:31:34:8d:3f:11:dc:b4:a5:2f:c3:d6:07:b0:5b:72:
         1d:5d:19:cd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbmBrV3///PBMuGszkWET6h8LIywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC
MEQzODlFNTAeFw0yNjA0MTcxNTE0NDNaFw0yNjA0MTgxNTI1NDNaMDMxMTAvBgNV
BAMTKDkxRjY0OEQyMDhFMDYxOUJBOEQwNjk2QkJDN0RDMTYyNUIzQUI2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbQErAscFlYwtPE928eUT8oY3
NjUKm25YLnE0kZbhmjQu3zYC2PDCKn0zekiD1wQPLVN3beDjiCdGlCiAEjrdfBR0
1e9FdVDCaexj93HkvDs4TuLUYhXe0/vTnwP4kf6QURr5CA+2xNUc41c1dAnY2Lwm
dn35QcJfdD4vTEcSmKgBZkT3wZJD3z6wxBzy9QvQ6bPYFP2+7LYKQ0I9QoCz/ZD4
+iJp+2+1OvJ1vtR/bq+Zxcc2sWgUCNhTJglhtfw5by1BtUraBlHT+vqqF7Ud9rmt
AjrmxVZW4VVuKYmXE7+ABsUg3Ykl7PgqnxdEXr30B9scMH6Zxjk3lSSxRqetAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkfZI0gjgYZuo0GlrvH3BYls6thMwHwYDVR0j
BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC
QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9ENjgwNURCMzA5MDU3
NjEyQ0M5MjcyQ0IyQzg1QkE2Q0IwRDM4OUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhpTQfVBMM9v
auTuJlPQICw/UwjacXapSJRYj84NrwaC/xUbnyCeNL5RWFLjOG9BI/P3xbbtsd6p
RUw+Sx8/aNMiqcMe65Yi5zgDHUpNrszrfqOqulOwA0ddJNGmQ22F/o73D5qsouRy
DczXjl+GoJ3emWzWq4RqpSIcGBpT2+KqRFnjrKBKmwU0XkoyPGVuoZfgR/l0X7Ax
wlzm8Z4E+5zgewZ5nWhINq6tnGx+uXKWbsajHHANntzwUAVV1i/IhGSRLg90zKEa
szeHCYDjwP8CYNM2d47ILJG2Jwt+zQkrigtsRwmkC7aOZIpQMTSNPxHctKUvw9YH
sFtyHV0ZzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:56 2026 by rpki-client