Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
File:                     601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json)
Hash identifier:          hxYmp3z3gnKGfLk2aou3jyqwVuB1O4M6rD7qv3Li3mI=
Subject key identifier:   F1:46:81:43:1F:36:5F:0C:4B:1D:02:72:10:41:73:3F:1A:F3:21:81
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Certificate issuer:       /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial:       62795273D4DDF3E58503159E4E6410AE41529AFF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
Manifest number:          59
Signing time:             Sat 13 Jun 2026 04:41:14 +0000
Manifest this update:     Sat 13 Jun 2026 04:36:14 +0000
Manifest next update:     Sun 14 Jun 2026 08:07:14 +0000
Files and hashes:         1: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=)
                          2: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: RJxN0I79BI+JzMZ6mz35jiaogZV6YCfh9R4lZLv9/uM=)
                          3: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=)
                          4: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=)
                          5: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=)
                          6: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=)
                          7: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=)
                          8: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=)
                          9: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=)
                          10: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=)
                          11: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=)
                          12: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=)
                          13: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 08:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:52:73:d4:dd:f3:e5:85:03:15:9e:4e:64:10:ae:41:52:9a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
        Validity
            Not Before: Jun 13 04:36:14 2026 GMT
            Not After : Jun 14 08:07:14 2026 GMT
        Subject: CN=F14681431F365F0C4B1D02721041733F1AF32181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:a7:f5:74:20:ba:d7:89:c2:52:23:b2:2f:
                    ff:67:76:e7:1f:de:64:76:19:cb:2c:6f:2c:64:19:
                    b4:31:07:fb:18:e2:bf:89:01:78:d8:78:fa:7a:7a:
                    83:96:35:ce:e3:b5:b4:d7:11:26:f1:57:aa:93:d1:
                    37:14:10:5b:d2:13:6b:25:b0:2d:fa:9f:f5:40:7e:
                    07:05:c5:c3:87:25:18:9a:83:43:b5:46:a4:21:d2:
                    a0:a8:56:7b:94:e4:1f:14:2e:a6:ed:73:98:48:11:
                    7d:61:57:4d:bb:be:86:bf:a2:47:b4:ce:ad:16:0c:
                    02:b6:20:3f:74:b3:52:45:82:8e:67:20:c6:a5:65:
                    16:0a:ab:d7:6a:b3:48:65:f3:22:f0:29:a7:50:2f:
                    65:40:f1:cd:73:cf:a8:c5:00:1f:94:5b:34:1b:89:
                    6e:fe:68:a1:ac:c9:f6:3a:10:cc:32:a3:df:cc:b1:
                    26:7b:52:96:5b:ba:0c:0d:ba:c8:00:36:14:e7:ad:
                    29:88:75:ef:b4:5d:d9:23:f2:67:1e:7d:6b:09:4b:
                    b7:36:a0:9b:1b:60:7e:ad:35:6e:20:0b:d8:fc:bc:
                    9f:68:c0:1c:cb:fa:5a:8d:62:0b:5b:42:15:d3:fb:
                    2d:66:f5:80:9d:50:1b:b3:c7:94:6c:c2:46:69:67:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:81:43:1F:36:5F:0C:4B:1D:02:72:10:41:73:3F:1A:F3:21:81
            X509v3 Authority Key Identifier:
                keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:13:5e:d3:01:c5:15:44:dd:db:45:c0:da:b2:bb:23:36:3e:
         ed:ea:b1:84:c0:6f:7c:d3:83:a1:66:a9:5a:48:39:be:ac:de:
         76:96:f6:4f:e8:f5:fe:47:0c:e4:57:80:fb:e4:d1:c7:2b:3b:
         18:af:5d:ab:f4:fe:58:87:e6:5c:c1:55:a9:98:af:16:07:87:
         9e:21:2c:0a:bd:e4:11:35:b1:67:80:c3:fe:ff:24:8a:fa:24:
         3f:a0:10:39:d2:be:2f:db:28:04:7e:72:e7:1e:13:fd:00:d2:
         b4:89:ea:f4:0e:33:ee:61:5f:c2:90:fc:70:b8:e1:18:1b:93:
         98:cd:61:a8:6f:90:3d:b2:40:f5:82:2c:6a:5e:4d:36:92:06:
         3e:a8:59:03:db:86:a6:aa:9c:24:d5:b8:43:ba:58:2a:e1:79:
         c8:f5:49:18:73:ab:c1:73:c8:b8:54:2d:8c:8f:fc:fc:a9:51:
         56:5f:7d:ea:02:c7:35:55:e5:5d:24:dc:7c:2a:ef:23:49:f9:
         34:82:37:1b:fc:8f:ae:55:f9:b3:dd:ad:33:ff:fa:18:92:fe:
         77:aa:26:aa:85:8c:81:54:e6:cb:e2:cd:1b:f3:1b:c9:0b:a9:
         11:ac:38:b3:ec:43:51:11:0c:2f:99:ff:a5:e9:47:5a:cb:f6:
         74:cf:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:53 2026 by rpki-client