Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          GnMErZIk090sXbOl5nWwl2lE5TrSSJpXDABUAmYdVts=
Subject key identifier:   22:18:28:6F:86:19:0B:7C:65:B0:FA:D6:2B:6F:AF:40:F1:5E:85:58
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       5845D70A9DE1A22C2B74B1F11D0FD9C5B5A1043E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          0511
Signing time:             Sat 13 Jun 2026 04:08:58 +0000
Manifest this update:     Sat 13 Jun 2026 04:03:58 +0000
Manifest next update:     Sun 14 Jun 2026 06:03:58 +0000
Files and hashes:         1: AS38019.roa (hash: 2NS8knOyQ78NpZOiapNsrsoBmfIkQMd9mlL43BwK3/A=)
                          2: AS132525.roa (hash: zl9WYCDlgUTa9fMjO7zm7BFq9OVVc7tAQMGjweNJUcI=)
                          3: AS138407.roa (hash: mdEstKPY1PmZmoFkGYyReJHsModWrzGLYeFCK9C526M=)
                          4: AS56042.roa (hash: z9TStiekLoa7fY+MO+3yQ+3Og8DvJUQ1AEnp2yMH0+s=)
                          5: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          6: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: 6hdb1wMklSE+OWdP8fT6jMQOA8UgT+3g9RRSgy/zzfA=)
                          7: AS56046.roa (hash: yrWT0HJ0Vfrogiiw8HH2/qu+KR9JN7BzsygcLAuHmUU=)
                          8: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          9: AS56048.roa (hash: /eVXArxx9FA3X4G8hYtoQ4efSLB4gKF8+QxTH0mzc7E=)
                          10: AS141425.roa (hash: DuI4NyyOopphpbCDUBgyruWxlUMMDJeTAHfnCIru5pk=)
                          11: AS56040.roa (hash: dJ9HM1dAWWWC57rwTsP8xN6NJ0pCo/xRO7RDbw3x1b4=)
                          12: AS24445.roa (hash: VTo6xcTSSE3oUK4HB/f1lePPcS4FDmKglbui/S5KX90=)
                          13: AS56047.roa (hash: kIzfMqHIlX2Kmr0ckFJY5KFVqRcvoGuCOQF33e3sifk=)
                          14: AS139080.roa (hash: IMcFKG359CYR3TSbkMhRlSTtua3koBKcmZZzX8ZsOLs=)
                          15: AS9808.roa (hash: cp58cgRENJ9CuxwGJW+z02Y/PoE7U5FDuRE21EUjRP8=)
                          16: AS56045.roa (hash: Wwb+nB+fowKnrevSTnsSDQfbwjUQCfGjJvuhRCTSIX8=)
                          17: AS134810.roa (hash: uCuc09kuT519jIA089mWGybf0KXQ2DLpvazGC1o2/oo=)
                          18: AS24444.roa (hash: ubS3coUMsbvsXyRaOkFIqf8MnC56Me+IBE6GW5CHFFo=)
                          19: AS56044.roa (hash: fySgsNdI0VaQG5w+0a74pK5zuMORl7lQYZqkRHUEzWI=)
                          20: AS56041.roa (hash: WTCXz+L8Vjl05Ro0PH6S2WaIjF0w/e6iRsqp4Wh4R5I=)
                          21: AS24547.roa (hash: +AhfFMBV1gLRl28WNUcILv9YHlg5sVfk5a44OAGyeRI=)
                          22: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          23: AS24400.roa (hash: NtfGPnNY1oqiSBtngBAqW0dUFU75OSvAiNm0k48oZqk=)
                          24: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 06:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:d7:0a:9d:e1:a2:2c:2b:74:b1:f1:1d:0f:d9:c5:b5:a1:04:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Jun 13 04:03:58 2026 GMT
            Not After : Jun 14 06:03:58 2026 GMT
        Subject: CN=2218286F86190B7C65B0FAD62B6FAF40F15E8558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:c9:dc:2d:45:a9:d0:17:6e:46:8d:ff:89:
                    8f:12:35:d0:64:1d:ff:7f:4b:7e:3e:98:94:4a:01:
                    fc:21:c8:a9:65:56:4c:c7:4b:d9:c5:25:01:ee:4a:
                    ec:04:ad:08:93:09:5c:5f:dd:de:21:2f:77:b7:cf:
                    b8:90:c0:52:33:98:d3:15:b4:d9:0c:ef:7f:04:55:
                    68:b9:92:4e:b4:08:16:4f:b6:7b:77:87:7a:4c:64:
                    9b:5c:a8:a2:6a:b2:0c:e0:c9:60:28:13:61:90:db:
                    f0:da:29:17:b0:58:f4:53:eb:e5:d5:9c:9d:fd:4b:
                    b1:53:5f:89:bb:8e:09:c7:67:21:3c:6a:bb:31:92:
                    a7:51:48:bf:8d:4c:fc:1b:37:20:49:9b:d2:42:07:
                    94:09:45:15:b7:8b:e3:66:14:b3:87:74:cd:a4:21:
                    64:0c:bb:38:60:d4:80:d5:fd:a0:cb:17:2c:0a:b3:
                    83:48:31:23:e5:6c:b5:e6:6c:1f:28:88:a5:90:dc:
                    be:cf:2d:c2:3d:d2:2f:3c:e8:9d:43:d1:be:04:87:
                    7a:87:97:db:ec:51:71:60:40:76:6b:58:07:51:eb:
                    ae:4a:a4:a6:28:f4:aa:43:68:66:bd:5c:a3:43:83:
                    fa:b6:f5:e1:5a:eb:88:9d:c3:d1:df:c3:4e:35:e0:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:28:6F:86:19:0B:7C:65:B0:FA:D6:2B:6F:AF:40:F1:5E:85:58
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:20:42:51:5f:41:43:39:d5:f8:c7:12:2f:79:25:a3:03:
         73:fa:db:f3:d1:49:be:3c:17:7e:dc:94:5d:ba:48:77:ae:f3:
         c8:c0:1d:4d:df:bf:4b:fd:60:49:0e:6e:62:10:36:d2:a8:80:
         c6:4a:87:e3:8f:8e:e7:a2:ce:89:df:b3:60:0b:a2:15:05:b7:
         c7:5a:d8:ea:45:b6:6d:51:b0:aa:83:f0:e9:48:fe:6a:a0:d9:
         24:1e:58:84:00:91:d5:68:d0:31:7f:fe:da:b8:78:6f:ba:dc:
         7e:cd:e6:7f:6d:48:32:3b:b8:7f:cd:ff:3e:76:ff:e4:d3:47:
         dd:e0:38:b0:6a:58:b9:af:bd:8e:4d:17:44:cc:b7:dd:3f:72:
         12:74:29:2e:1d:72:70:2b:ab:33:5d:82:36:d6:78:c8:53:a1:
         c2:85:a8:06:45:3b:2e:69:c7:9d:5b:5a:52:c8:b0:f0:3d:d9:
         72:0a:52:15:79:af:02:0d:cb:63:b0:38:c2:60:f9:45:ed:56:
         3c:5f:8b:33:9a:9d:f6:9a:a0:42:ea:f1:59:23:7f:67:96:5d:
         f8:b8:cd:db:ca:c8:9a:b3:82:ef:f0:1d:f8:5a:87:64:4f:43:
         56:cc:95:e3:ad:4b:e4:a2:cd:7d:3c:66:e0:87:01:0b:a6:2a:
         6e:67:08:13
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWEXXCp3hoiwrdLHxHQ/ZxbWhBD4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0
OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDYxMzA0MDM1OFoX
DTI2MDYxNDA2MDM1OFowMzExMC8GA1UEAxMoMjIxODI4NkY4NjE5MEI3QzY1QjBG
QUQ2MkI2RkFGNDBGMTVFODU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtJydwtRanQF25Gjf+JjxI10GQd/39Lfj6YlEoB/CHIqWVWTMdL2cUlAe5K
7AStCJMJXF/d3iEvd7fPuJDAUjOY0xW02QzvfwRVaLmSTrQIFk+2e3eHekxkm1yo
omqyDODJYCgTYZDb8NopF7BY9FPr5dWcnf1LsVNfibuOCcdnITxquzGSp1FIv41M
/Bs3IEmb0kIHlAlFFbeL42YUs4d0zaQhZAy7OGDUgNX9oMsXLAqzg0gxI+VsteZs
HyiIpZDcvs8twj3SLzzonUPRvgSHeoeX2+xRcWBAdmtYB1Hrrkqkpij0qkNoZr1c
o0OD+rb14VrriJ3D0d/DTjXgKucCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQiGChv
hhkLfGWw+tYrb69A8V6FWDAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs
1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND
N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ
UzZvV0xlT0hHYV9JcGpsck5RLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5
NTc3NTc0Ny8wL0RCQjIzQzdFRTQ5MjIxMkVBODU4Qjc4RTFDNjZCRjIyOThFNUFD
RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQCNcyBCUV9BQznV+McSL3klowNz+tvz0Um+PBd+3JRdukh3
rvPIwB1N379L/WBJDm5iEDbSqIDGSofjj47nos6J37NgC6IVBbfHWtjqRbZtUbCq
g/DpSP5qoNkkHliEAJHVaNAxf/7auHhvutx+zeZ/bUgyO7h/zf8+dv/k00fd4Diw
ali5r72OTRdEzLfdP3ISdCkuHXJwK6szXYI21njIU6HChagGRTsuacedW1pSyLDw
PdlyClIVea8CDctjsDjCYPlF7VY8X4szmp32mqBC6vFZI39nll34uM3bysias4Lv
8B34WodkT0NWzJXjrUvkos19PGbghwELpipuZwgT
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:04:10 2026 by rpki-client