Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft
File:                     E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft (raw, json)
Hash identifier:          5MqHbEcbxCCd/8vKtzVsBBvMicW8I0JE6bIiV8JkIlU=
Subject key identifier:   51:8D:56:7C:05:4A:F3:35:29:AE:53:0A:96:82:DD:5A:CE:F8:1C:FA
Authority key identifier: E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54
Certificate issuer:       /CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254
Certificate serial:       7345BB5DE73B7EE06A72C22C26F38A4E285F7B2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft
Manifest number:          65
Signing time:             Sat 13 Jun 2026 18:27:06 +0000
Manifest this update:     Sat 13 Jun 2026 18:22:06 +0000
Manifest next update:     Sun 14 Jun 2026 20:23:06 +0000
Files and hashes:         1: E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl (hash: GZ21V16BMaZGtO4cCcHlZidsOwCZ5r3ET4jGTB4bylM=)
                          2: 34332e3235342e382e302f32322d3234203d3e2034383337.roa (hash: 4VOL+FHU5oMndMfPy+9vcSEIegfTuNgRB1Pd44NTIFE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 20:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:45:bb:5d:e7:3b:7e:e0:6a:72:c2:2c:26:f3:8a:4e:28:5f:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9C413C596FB166D0625FAF7B4A9D7CA2401C254
        Validity
            Not Before: Jun 13 18:22:06 2026 GMT
            Not After : Jun 14 20:23:06 2026 GMT
        Subject: CN=518D567C054AF33529AE530A9682DD5ACEF81CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:70:ab:b5:50:46:89:1d:ba:44:58:65:62:
                    c3:5f:77:c0:b9:7b:07:48:04:a2:b7:f3:38:30:f7:
                    9b:67:46:78:d5:5a:87:83:5f:45:41:12:60:16:65:
                    c2:d6:8b:7e:4c:3f:2f:dc:a6:ca:bb:d4:28:35:17:
                    9b:23:46:f4:c1:a9:f5:d3:2f:09:2e:ab:98:ed:38:
                    08:ce:95:67:fb:05:52:8c:97:e4:11:d2:a6:eb:53:
                    eb:3f:89:84:8a:36:5d:53:c2:61:14:74:0e:79:79:
                    7c:c3:25:e9:b4:e4:32:fd:8e:08:20:ef:0c:82:dc:
                    11:d5:f3:09:72:e7:1f:0a:55:33:e0:98:44:80:29:
                    b4:a3:08:4e:94:d0:07:b1:c1:11:4d:82:42:d1:bd:
                    ed:23:c9:96:69:82:9e:97:3c:07:36:16:99:9f:bb:
                    97:e6:8e:0f:35:3f:f2:4d:ac:64:b9:02:2b:65:1d:
                    be:62:8f:53:87:ff:90:75:fc:c0:9e:78:0d:7f:7d:
                    94:2d:46:54:08:18:1d:87:97:4c:c8:f2:f6:b5:b0:
                    8e:e8:c9:7e:fd:ef:b3:80:a3:d8:d8:8e:94:2f:5a:
                    f8:8d:a0:53:af:83:6f:0b:10:aa:57:99:4a:96:5b:
                    9a:af:dd:a8:c3:b0:9b:22:d3:84:9c:af:e6:b2:e4:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8D:56:7C:05:4A:F3:35:29:AE:53:0A:96:82:DD:5A:CE:F8:1C:FA
            X509v3 Authority Key Identifier:
                keyid:E9:C4:13:C5:96:FB:16:6D:06:25:FA:F7:B4:A9:D7:CA:24:01:C2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096256463749251074/0/E9C413C596FB166D0625FAF7B4A9D7CA2401C254.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:24:06:7c:06:43:8f:f7:5c:37:1d:91:01:8b:68:ec:f9:
         52:5f:d8:7f:4e:52:4c:8f:be:3f:59:8a:12:6d:ac:da:c3:b1:
         f4:e2:3c:95:5f:5a:5a:d4:97:28:ef:4f:23:f2:42:95:53:2a:
         89:2c:19:25:1d:d2:1d:ba:24:07:ff:ab:31:63:65:18:14:b3:
         d8:71:45:27:11:93:6d:ae:1a:bc:4a:fc:04:f0:87:a4:39:00:
         e8:0a:b8:10:88:88:c4:3a:65:4e:54:49:22:85:16:fd:93:3a:
         70:d2:5a:35:57:2a:d3:a3:cc:a3:17:3c:d1:be:ea:8e:f4:08:
         53:68:78:68:a0:72:87:e6:32:1c:03:40:fa:1a:2f:e1:66:27:
         ad:ee:13:4b:14:c6:b5:e7:c5:01:ef:d3:ff:93:dd:28:6c:d2:
         50:be:7c:bf:79:f1:30:6f:66:c9:51:01:1b:7c:ab:1c:ce:72:
         c0:c1:68:2a:85:63:32:d8:85:02:14:f5:af:dc:a3:d1:b3:fc:
         90:8d:e2:ec:0b:33:d9:06:9c:89:19:de:d2:5f:5b:27:ec:ae:
         4b:3a:8e:44:f0:0e:4c:97:ae:54:3b:b1:f8:17:49:2b:79:eb:
         f0:29:0e:86:c6:44:fb:58:95:e6:b3:d6:d2:d1:06:10:f0:2e:
         42:f0:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:44:49 2026 by rpki-client