Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          ytl5wc4XStihgqw8Tsu3mQE/n/lOWchlPgWD4YUZrUU=
Subject key identifier:   C6:1A:CC:69:4C:1B:19:45:E9:60:54:CC:BC:85:1C:96:DF:2A:66:85
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       5D1EE83CF597845DFD43D103FAC4C8E8BD73B076
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          0F
Signing time:             Thu 16 Apr 2026 08:00:45 +0000
Manifest this update:     Thu 16 Apr 2026 07:55:45 +0000
Manifest next update:     Fri 17 Apr 2026 09:00:45 +0000
Files and hashes:         1: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          2: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          3: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: nf6Tlxnckz7HPiuZMJHLVU6AU/+S6hzk9dMBxNJJiNE=)
                          4: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
                          5: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          6: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          7: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          8: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          9: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
                          10: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          11: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          12: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          13: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          14: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          15: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          16: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          17: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          18: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1e:e8:3c:f5:97:84:5d:fd:43:d1:03:fa:c4:c8:e8:bd:73:b0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 16 07:55:45 2026 GMT
            Not After : Apr 17 09:00:45 2026 GMT
        Subject: CN=C61ACC694C1B1945E96054CCBC851C96DF2A6685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:9b:5d:49:f8:7f:28:c2:46:0b:eb:6d:5a:
                    47:5d:ed:ca:91:2d:0c:5c:bd:45:ec:59:3b:bc:77:
                    2a:c7:aa:ea:2c:39:15:65:83:bb:e1:01:b7:9e:dc:
                    d6:74:f1:20:7e:0c:d2:69:dd:f9:7a:f8:68:da:cd:
                    14:9f:6a:65:d3:e9:bd:fd:d1:93:32:f2:45:01:fa:
                    04:f6:94:fe:95:9f:df:d6:9b:de:31:9f:e5:11:41:
                    5d:95:08:3d:86:6c:cd:b2:96:db:46:0e:5a:5e:df:
                    a4:a7:60:2b:4f:12:1e:3c:ea:98:e5:35:69:8b:50:
                    f7:6b:f7:6b:1a:af:6c:4d:60:75:23:ac:75:30:dc:
                    4f:53:ff:31:f1:c7:b4:20:44:7c:9c:f6:e5:d4:ae:
                    33:dc:48:b7:f8:d4:2e:55:2e:e9:eb:e4:17:bd:ea:
                    e6:0f:2d:d2:9e:71:b6:a4:83:83:6a:34:4a:e1:ab:
                    2a:cd:6f:58:2d:40:73:1a:a0:3b:4f:b8:d1:a9:62:
                    bc:c8:34:90:f3:9a:c5:6c:cf:d0:a6:7e:7c:9e:87:
                    78:18:53:b6:a9:89:62:5b:39:72:69:a9:b4:51:b7:
                    ba:db:51:4d:13:61:54:ab:f4:94:0f:a4:ec:ef:e0:
                    14:a6:93:c6:75:f0:a8:da:a7:e4:67:cb:68:47:fe:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:CC:69:4C:1B:19:45:E9:60:54:CC:BC:85:1C:96:DF:2A:66:85
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:0c:e3:1f:13:a1:39:fb:84:9f:d2:b9:f7:4f:55:bc:8b:
         e8:fd:85:fc:f2:22:71:5b:a9:7d:df:b2:75:28:a5:ca:12:5f:
         30:5e:3f:b5:b1:80:e7:16:e5:8e:89:ac:c2:40:be:8c:df:31:
         68:d1:d1:bc:28:8f:51:95:65:b7:c7:2b:be:23:4e:0f:11:ee:
         69:22:fa:7f:ad:21:96:3d:99:cc:39:3b:1e:d0:8b:d7:e2:f3:
         f3:a7:e4:ca:33:d7:db:f3:2b:54:4e:cf:61:f8:f7:2f:56:cb:
         6f:d3:e7:f1:ab:42:3a:9d:b9:ce:38:04:3f:53:fe:11:69:47:
         89:e0:a8:94:d3:3d:fc:fc:47:ec:87:2a:6b:b9:91:55:84:f9:
         31:b1:5a:78:33:1d:68:2d:2a:a0:04:99:c9:8b:79:1e:d1:d2:
         d7:b6:0d:e1:4e:95:55:04:10:59:f4:65:80:fb:bc:b9:b4:85:
         d9:f2:3f:3c:96:64:dc:85:0a:13:e5:2b:23:d3:d4:b1:4d:ea:
         b8:0d:80:67:e8:44:a8:67:35:f6:dc:2c:72:3b:88:08:99:9a:
         23:a6:1e:a0:d8:27:be:e3:68:f7:03:20:f4:59:5c:63:2a:bf:
         d5:07:38:8d:19:8e:f1:e8:a8:b7:d9:c9:98:04:45:71:8a:2b:
         21:5e:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:52:10 2026 by rpki-client