Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          OVgiW5YasioTb3vNh1xHszVBbljYr1+d2A7OLDaCyxo=
Subject key identifier:   FB:DC:C1:BC:60:B3:3E:C9:1A:5A:8D:6C:D3:C0:1F:10:02:0E:1C:55
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       233BBF88766080BB896B34F59607C6FA92BEA171
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          010F
Signing time:             Sat 13 Jun 2026 09:26:39 +0000
Manifest this update:     Sat 13 Jun 2026 09:21:39 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:39 +0000
Files and hashes:         1: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          2: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          3: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          4: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          5: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          6: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          7: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          8: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          9: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          10: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          11: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          12: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          13: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: W2AKBVGqBa8TU4LdTadSJNuvh5KrnPvn6OhnTn9Gh+Q=)
                          14: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          15: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          16: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3b:bf:88:76:60:80:bb:89:6b:34:f5:96:07:c6:fa:92:be:a1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Jun 13 09:21:39 2026 GMT
            Not After : Jun 14 12:01:39 2026 GMT
        Subject: CN=FBDCC1BC60B33EC91A5A8D6CD3C01F10020E1C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:cb:81:c7:33:7c:95:c9:86:45:b6:5e:e3:
                    53:f8:ab:42:8f:9e:55:2c:a2:c4:e9:cc:67:ef:76:
                    49:f0:08:85:70:db:19:36:b2:62:41:ac:e7:2e:ba:
                    ba:f2:28:9a:3c:84:ca:90:43:df:34:59:de:33:75:
                    1a:36:4c:25:bd:a3:5e:1b:50:1f:d3:b5:3b:05:b6:
                    70:80:4b:9c:15:22:e8:b8:6d:62:75:92:9d:32:61:
                    b7:b7:80:46:c4:5c:e3:b4:1c:5f:05:38:64:d5:35:
                    fc:62:22:5d:80:d1:57:a6:59:c4:2c:34:8c:59:ac:
                    81:aa:8d:1e:46:46:8e:fd:fe:e8:c4:59:7c:6b:c3:
                    39:ee:6b:05:c5:a6:87:12:88:43:4c:8f:76:c7:20:
                    a8:8f:3c:89:b5:de:87:ed:c6:df:63:b4:8b:35:a6:
                    27:a8:2e:60:df:ff:f0:6f:67:c8:69:a8:bb:20:4c:
                    95:db:ff:14:05:e7:68:66:3d:7e:17:a3:35:6e:7c:
                    03:c9:ad:24:22:f4:5f:8b:bc:ae:2a:01:8b:b9:c5:
                    9a:86:c8:00:95:07:c4:14:83:71:3d:9a:95:48:4d:
                    cb:9e:24:47:86:b2:cf:9c:95:4c:80:d1:15:4a:a9:
                    9d:68:e1:23:2f:a5:61:6f:2c:6a:30:4a:84:05:43:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:C1:BC:60:B3:3E:C9:1A:5A:8D:6C:D3:C0:1F:10:02:0E:1C:55
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:55:a2:14:80:3b:d4:ca:b3:9f:06:60:9e:42:86:dc:c1:
         20:8d:b1:2e:eb:85:cb:a7:88:a7:df:e9:b0:70:90:d7:11:62:
         bd:98:c9:3e:9a:c2:2b:14:d1:00:1e:50:de:c7:dc:b7:03:75:
         e9:e5:39:a2:04:2f:06:60:ea:e3:b0:08:88:dc:bf:9a:ce:c5:
         be:93:0a:7b:42:17:aa:fc:6e:6f:ea:e8:a3:88:58:d6:e7:2b:
         15:a2:e2:c6:09:1d:9e:86:f5:e7:b9:e8:18:0c:f3:cf:d3:6b:
         14:7e:e7:da:5d:81:7a:b9:78:38:da:d5:60:4d:c1:4d:a9:cd:
         fb:51:49:0b:9c:c8:62:8d:fd:28:a5:ba:bd:dc:44:7d:97:7a:
         6f:00:65:9b:ce:ef:b4:04:6d:fc:b1:68:9b:70:a8:8a:bd:4f:
         ca:2f:e6:29:56:66:d0:11:ce:11:5a:37:64:0c:51:e4:75:e9:
         40:fc:24:45:46:a2:b6:d5:d0:01:06:8d:e8:4f:44:35:7e:ad:
         48:33:b3:ce:43:20:17:1d:bc:a7:0a:02:6c:39:8f:62:e1:bb:
         c2:e4:6f:92:42:66:67:05:79:f6:6e:c0:9a:58:27:54:9a:81:
         9f:ca:a4:d3:e0:05:42:a8:71:9f:ee:de:d9:1d:52:cc:4a:a2:
         e3:79:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:49 2026 by rpki-client