Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          mZr/ihwQieWh1Ah2TxpVXXI/hohtzsdbLOiHm/Ar67Y=
Subject key identifier:   1A:AC:6A:1C:5D:48:34:88:21:0C:68:8B:C6:AA:FB:B2:61:BE:5D:61
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       65386686BA9A71BF0CD17DA30CD7C7FDC727D7A6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          5D
Signing time:             Sat 13 Jun 2026 16:56:57 +0000
Manifest this update:     Sat 13 Jun 2026 16:51:57 +0000
Manifest next update:     Sun 14 Jun 2026 18:50:57 +0000
Files and hashes:         1: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: R/FBAKAsvthqCGYQDWz47QxrXGo43SZxzCHNzqYcJbE=)
                          2: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
                          3: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          4: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          5: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          6: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          7: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          8: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          9: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          10: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          11: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          12: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          13: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          14: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          15: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          16: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          17: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          18: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:38:66:86:ba:9a:71:bf:0c:d1:7d:a3:0c:d7:c7:fd:c7:27:d7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Jun 13 16:51:57 2026 GMT
            Not After : Jun 14 18:50:57 2026 GMT
        Subject: CN=1AAC6A1C5D483488210C688BC6AAFBB261BE5D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:e0:7d:14:21:b8:4a:52:fd:01:0a:7f:7b:
                    ae:fd:a5:82:a9:bc:b0:c9:58:3f:20:c0:ca:77:06:
                    fb:40:e6:61:1c:92:64:2d:83:76:75:59:4b:5d:ca:
                    0c:23:af:46:c9:6d:af:fa:57:aa:b8:a4:54:60:c0:
                    9c:34:5b:63:15:da:8f:7c:66:92:f9:73:5b:75:80:
                    9e:22:5c:2a:3b:eb:59:1c:b2:f6:9c:6b:fe:c9:58:
                    46:2d:a1:90:6d:43:98:35:90:dd:ba:b3:a8:07:98:
                    34:95:cd:dd:3f:b8:f7:f0:0b:c9:ff:38:ea:83:6a:
                    0a:6d:bb:86:1c:23:31:39:77:f6:8a:df:78:31:c8:
                    9d:6e:af:bd:15:ed:cc:3b:62:98:45:30:cd:08:7d:
                    74:38:6f:07:a3:f6:68:ba:7f:40:5d:bc:47:9b:17:
                    01:76:b3:ce:e3:ca:82:c8:28:2f:75:af:c7:ae:27:
                    a9:08:ba:28:a0:de:a5:c1:be:bf:7b:d2:b1:4b:67:
                    ae:8a:d1:8a:9b:b8:54:6f:7c:f5:8e:80:6a:2e:a7:
                    95:f2:8f:40:e0:9a:68:be:81:8e:ad:4f:d1:e8:93:
                    ee:77:26:ba:52:82:df:98:dd:1f:02:91:db:05:af:
                    fe:cd:3e:ec:a9:0f:e9:5c:f6:a1:bd:7e:bc:e8:8e:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:6A:1C:5D:48:34:88:21:0C:68:8B:C6:AA:FB:B2:61:BE:5D:61
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:dd:fb:eb:45:82:32:1a:4c:c3:7a:62:3e:f7:e8:c0:ad:
         af:5c:59:a7:ad:f9:42:f0:3d:cb:17:a1:8c:8a:a0:27:ed:6d:
         cf:35:d6:96:b9:ad:de:20:76:d3:be:5b:a3:29:5c:db:8a:bb:
         77:5f:10:a9:62:dd:ea:d3:5c:12:9e:0c:ff:78:4e:17:b7:92:
         c2:87:b6:76:7c:d3:15:a6:dc:b6:64:24:66:59:f6:4d:79:da:
         c9:97:ca:77:0a:3d:a7:86:59:a6:24:28:c6:13:29:c4:b1:e2:
         b2:62:b7:c7:36:8c:84:e2:5f:35:a9:1b:2b:37:aa:46:b3:0f:
         4f:f1:a7:71:4f:ad:ae:de:c7:fa:74:35:cb:29:b6:0c:99:90:
         d8:56:f8:0a:de:ec:fe:23:4d:d6:b9:3b:35:e1:dd:ef:d6:04:
         be:13:df:5e:27:55:22:32:2f:4c:3b:87:7b:d4:83:9f:1c:2a:
         d3:67:9c:34:12:35:7e:d2:40:45:65:68:63:ad:77:0c:a1:33:
         e3:20:11:13:f9:e7:56:6d:55:58:98:03:bd:ef:6a:fe:dc:e6:
         70:27:82:2c:3f:ce:0a:e1:c8:b8:64:fc:9f:ce:74:d8:d2:9f:
         a8:1c:c5:9d:55:48:7a:95:b6:d5:2d:ae:74:70:52:68:5c:9b:
         d2:46:5f:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZThmhrqacb8M0X2jDNfH/ccn16YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIy
M0JGQzNGNTAeFw0yNjA2MTMxNjUxNTdaFw0yNjA2MTQxODUwNTdaMDMxMTAvBgNV
BAMTKDFBQUM2QTFDNUQ0ODM0ODgyMTBDNjg4QkM2QUFGQkIyNjFCRTVENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY4uB9FCG4SlL9AQp/e679pYKp
vLDJWD8gwMp3BvtA5mEckmQtg3Z1WUtdygwjr0bJba/6V6q4pFRgwJw0W2MV2o98
ZpL5c1t1gJ4iXCo761kcsvaca/7JWEYtoZBtQ5g1kN26s6gHmDSVzd0/uPfwC8n/
OOqDagptu4YcIzE5d/aK33gxyJ1ur70V7cw7YphFMM0IfXQ4bwej9mi6f0BdvEeb
FwF2s87jyoLIKC91r8euJ6kIuiig3qXBvr970rFLZ66K0YqbuFRvfPWOgGoup5Xy
j0Dgmmi+gY6tT9Hok+53JrpSgt+Y3R8CkdsFr/7NPuypD+lc9qG9frzojqn5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUGqxqHF1INIghDGiLxqr7smG+XWEwHwYDVR0j
BBgwFoAUzuD7Cl5Nqax9eMX8jwPZqyO/w/UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8xL0NFRTBGQjBBNUU0REE5QUM3RDc4QzVGQzhGMDNE
OUFCMjNCRkMzRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIyM0JGQzNGNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc5MjM3MTUvMS9DRUUwRkIwQTVFNERB
OUFDN0Q3OEM1RkM4RjAzRDlBQjIzQkZDM0Y1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfDd++tFgjIa
TMN6Yj736MCtr1xZp635QvA9yxehjIqgJ+1tzzXWlrmt3iB2075boylc24q7d18Q
qWLd6tNcEp4M/3hOF7eSwoe2dnzTFabctmQkZln2TXnayZfKdwo9p4ZZpiQoxhMp
xLHismK3xzaMhOJfNakbKzeqRrMPT/GncU+trt7H+nQ1yym2DJmQ2Fb4Ct7s/iNN
1rk7NeHd79YEvhPfXidVIjIvTDuHe9SDnxwq02ecNBI1ftJARWVoY613DKEz4yAR
E/nnVm1VWJgDve9q/tzmcCeCLD/OCuHIuGT8n8502NKfqBzFnVVIepW21S2udHBS
aFyb0kZf2w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:58 2026 by rpki-client