Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
File:                     9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json)
Hash identifier:          IcUgsGFWDKUJ6BjoznSzRX5fuWZ/ZYRWgBFAxSpqgOQ=
Subject key identifier:   FD:88:48:B1:ED:AE:FE:23:1C:10:89:67:B2:BF:CE:6E:D0:9B:3F:41
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Certificate issuer:       /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial:       47162B8315E5CB681CDCA2468CEADCB848C14FAF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
Manifest number:          58
Signing time:             Sat 13 Jun 2026 03:46:07 +0000
Manifest this update:     Sat 13 Jun 2026 03:41:07 +0000
Manifest next update:     Sun 14 Jun 2026 06:33:07 +0000
Files and hashes:         1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=)
                          2: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: IQ4KWxhApeEzndI1C6LxFUpYoa2p/c3Kqh8CTw62J5I=)
                          3: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 06:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:16:2b:83:15:e5:cb:68:1c:dc:a2:46:8c:ea:dc:b8:48:c1:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
        Validity
            Not Before: Jun 13 03:41:07 2026 GMT
            Not After : Jun 14 06:33:07 2026 GMT
        Subject: CN=FD8848B1EDAEFE231C108967B2BFCE6ED09B3F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:d9:42:34:64:c2:55:6f:b2:42:37:63:7a:
                    af:95:bd:bf:84:09:5e:08:f5:2a:cb:b3:0b:3e:d9:
                    35:1f:45:80:47:79:44:fd:10:b4:28:c4:c7:7f:1a:
                    b2:54:08:a7:45:fd:aa:48:bc:55:74:32:b5:e7:91:
                    bc:59:2b:05:87:25:e7:c1:b8:77:27:98:5a:b6:e0:
                    68:14:f5:b0:cb:45:63:5a:67:be:99:32:d9:d5:e5:
                    65:28:39:5d:bd:f5:67:7b:5c:c1:f6:5e:30:64:ff:
                    d4:95:f9:c5:c4:30:33:2c:29:5e:f0:8b:e5:47:46:
                    4a:5a:f1:d3:7b:97:c2:c0:61:65:19:f5:80:2f:b6:
                    fb:95:11:ce:c1:9a:92:bc:79:68:fd:43:0d:56:f5:
                    a9:df:8d:f6:24:42:84:9a:1b:ff:cc:2b:79:ba:0e:
                    af:35:71:f4:a6:9f:81:d2:4d:f7:56:97:fa:60:71:
                    59:bd:d7:e6:7b:31:87:98:ca:f2:1f:24:57:80:4c:
                    08:d9:54:53:d5:b4:90:87:cf:43:4c:22:2c:41:f8:
                    50:6b:24:76:c9:c6:87:57:db:f4:33:09:7b:f6:76:
                    47:a7:b1:33:58:b1:5f:c3:67:16:37:1c:8b:59:4a:
                    d2:b7:cf:33:12:2e:f4:db:c4:35:1f:48:53:ff:77:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:48:B1:ED:AE:FE:23:1C:10:89:67:B2:BF:CE:6E:D0:9B:3F:41
            X509v3 Authority Key Identifier:
                keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:22:7e:bf:57:25:11:8b:f9:eb:d7:f0:d0:a0:01:00:ea:
         c2:02:d8:79:db:e3:f6:a5:b8:63:86:27:54:e1:74:a7:d5:a7:
         19:ca:c6:fd:01:24:a4:1c:61:39:8d:6e:aa:96:5a:8a:fe:ad:
         88:72:34:40:cb:04:80:0a:e1:16:f2:e3:ae:42:ad:fd:8a:a2:
         9d:4a:48:66:a8:93:72:da:7f:be:52:3a:3e:78:2e:16:ac:fb:
         a6:b0:15:af:91:73:6a:6d:13:f3:a5:ea:3a:ca:f6:0e:56:51:
         3f:d1:5c:57:89:2c:52:b7:de:cc:fc:70:6f:1f:4d:5b:5b:71:
         f8:5f:5c:5e:7c:f4:ca:36:71:78:21:14:db:24:41:3e:5a:9c:
         8a:1f:c7:f7:3c:93:07:9b:bf:0f:3b:94:2a:fa:75:e3:c0:54:
         14:77:05:3b:e9:bb:fe:ee:9e:17:d4:d5:a1:df:63:bc:75:eb:
         f3:b8:25:39:50:00:7b:e2:0a:6b:20:2e:bf:04:68:fe:3b:bc:
         03:15:c4:c6:d5:39:b4:c2:b2:30:d8:61:47:28:a0:09:f0:a0:
         60:16:e1:75:32:9a:bb:3c:7f:f1:d8:f2:36:7d:ae:17:3c:b5:
         92:42:9e:57:0b:c0:a9:1c:e6:41:fa:16:cc:98:ab:bf:5e:ec:
         ca:34:67:97
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIURxYrgxXly2gc3KJGjOrcuEjBT68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2
QTQyNTFEOTAeFw0yNjA2MTMwMzQxMDdaFw0yNjA2MTQwNjMzMDdaMDMxMTAvBgNV
BAMTKEZEODg0OEIxRURBRUZFMjMxQzEwODk2N0IyQkZDRTZFRDA5QjNGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4tlCNGTCVW+yQjdjeq+Vvb+E
CV4I9SrLsws+2TUfRYBHeUT9ELQoxMd/GrJUCKdF/apIvFV0MrXnkbxZKwWHJefB
uHcnmFq24GgU9bDLRWNaZ76ZMtnV5WUoOV299Wd7XMH2XjBk/9SV+cXEMDMsKV7w
i+VHRkpa8dN7l8LAYWUZ9YAvtvuVEc7BmpK8eWj9Qw1W9anfjfYkQoSaG//MK3m6
Dq81cfSmn4HSTfdWl/pgcVm91+Z7MYeYyvIfJFeATAjZVFPVtJCHz0NMIixB+FBr
JHbJxodX2/QzCXv2dkensTNYsV/DZxY3HItZStK3zzMSLvTbxDUfSFP/d3IJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/YhIse2u/iMcEIlnsr/ObtCbP0EwHwYDVR0j
BBgwFoAUkAbz7XfIVRpyudIkEJ94L2pCUdkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4NzA1MzY2Njk3NTc0Ny8wLzkwMDZGM0VENzdDODU1MUE3MkI5RDIyNDEwOUY3
ODJGNkE0MjUxRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwODcwNTM2NjY5NzU3NDcvMC85MDA2RjNFRDc3Qzg1
NTFBNzJCOUQyMjQxMDlGNzgyRjZBNDI1MUQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd4ifr9XJRGL
+evX8NCgAQDqwgLYedvj9qW4Y4YnVOF0p9WnGcrG/QEkpBxhOY1uqpZaiv6tiHI0
QMsEgArhFvLjrkKt/YqinUpIZqiTctp/vlI6PnguFqz7prAVr5Fzam0T86XqOsr2
DlZRP9FcV4ksUrfezPxwbx9NW1tx+F9cXnz0yjZxeCEU2yRBPlqcih/H9zyTB5u/
DzuUKvp148BUFHcFO+m7/u6eF9TVod9jvHXr87glOVAAe+IKayAuvwRo/ju8AxXE
xtU5tMKyMNhhRyigCfCgYBbhdTKauzx/8djyNn2uFzy1kkKeVwvAqRzmQfoWzJir
v17syjRnlw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:49 2026 by rpki-client