Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft
File:                     4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft (raw, json)
Hash identifier:          TDNokL5oL2F3VuTfprvwNcQC7OqFiaS8jb9JS38A51U=
Subject key identifier:   FA:02:43:31:52:C0:DA:F7:F1:6A:7E:D3:42:4B:FE:AB:4D:6E:60:91
Authority key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5
Certificate issuer:       /CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5
Certificate serial:       05C0E6E414D944D55AD59C844A061E1EB9D53432
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 17:31:59 +0000
Manifest this update:     Sat 13 Jun 2026 17:26:59 +0000
Manifest next update:     Sun 14 Jun 2026 20:42:59 +0000
Files and hashes:         1: 35382e31342e302e302f31352d3135203d3e2030.roa (hash: QzZWfHoN7zuTjnIJpX2UJU1Nqs7Y+u6+xPeTFrfpu1E=)
                          2: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl (hash: oqc86RszfPS2akKBxDSZJisTvyi4i9vGkeKQ0CgDubo=)
                          3: 3231302e37372e3139322e302f31392d3139203d3e2030.roa (hash: 9CpgCoiGBTJZKi7Tpd53aWXhxxl+6oh1duyDzktIE30=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c0:e6:e4:14:d9:44:d5:5a:d5:9c:84:4a:06:1e:1e:b9:d5:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5
        Validity
            Not Before: Jun 13 17:26:59 2026 GMT
            Not After : Jun 14 20:42:59 2026 GMT
        Subject: CN=FA02433152C0DAF7F16A7ED3424BFEAB4D6E6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:dc:f5:87:ce:53:15:4f:d8:a0:b8:aa:9a:
                    d2:a4:50:3b:74:50:ed:df:e4:21:1f:27:ad:93:bf:
                    b7:34:14:19:ce:3d:03:22:ac:19:81:a7:ff:bc:0b:
                    5e:4c:c0:79:82:9b:fd:7b:de:4f:1b:53:5c:1a:fb:
                    72:8a:79:dd:be:10:57:3e:5e:e8:64:2e:5b:17:b9:
                    29:be:c0:ea:25:b0:a0:7f:41:98:25:74:10:de:9d:
                    37:5d:c4:cf:10:ef:2f:bf:66:be:81:0a:68:27:b1:
                    da:3b:b7:da:c3:5d:0c:9f:e3:58:3a:3b:e7:45:18:
                    05:d6:02:b5:2f:d7:20:aa:42:3c:55:26:be:26:b5:
                    de:0b:13:b8:b6:fa:41:9b:53:c7:30:2a:08:ac:3d:
                    ee:a4:94:76:32:bd:f9:6e:a6:ac:02:80:8d:d1:d2:
                    e0:3b:e2:88:42:69:49:2b:75:15:de:10:74:1a:6b:
                    90:31:64:7f:97:7b:d9:66:85:07:c4:bf:e3:f2:64:
                    22:ec:16:2c:37:94:9d:fc:db:e4:be:58:1b:07:e0:
                    32:15:b0:87:24:36:50:4d:67:09:3f:f4:46:51:3d:
                    58:fe:6a:f2:09:f9:13:f7:84:1a:2d:b6:44:0d:7f:
                    ee:c2:5a:8f:44:3d:c0:78:85:fa:db:a2:41:d8:00:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:02:43:31:52:C0:DA:F7:F1:6A:7E:D3:42:4B:FE:AB:4D:6E:60:91
            X509v3 Authority Key Identifier:
                keyid:4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:d0:33:1f:91:5f:14:47:cb:a2:d1:9b:47:2b:4c:e9:72:
         4a:c2:29:a9:b9:9b:5d:97:db:ee:24:a4:5a:77:60:55:f1:89:
         8a:bd:8c:84:76:00:c2:cc:25:1e:e8:67:19:d1:4d:ce:fb:40:
         1d:7c:5a:b9:b8:24:25:3c:60:68:7d:e5:11:77:a2:89:ad:f8:
         46:3c:aa:75:b0:7d:f3:e6:8c:84:9d:91:7d:f1:de:4b:9c:9e:
         6d:3c:39:cf:5a:62:8c:ee:83:35:4c:31:c9:61:07:f7:16:4e:
         98:32:7f:ce:5a:2a:25:74:9f:5d:58:f6:e6:b6:40:c5:ba:eb:
         2d:83:a1:f1:87:f6:5f:1a:50:5f:21:89:98:e7:4a:97:49:47:
         ed:05:36:c5:60:e0:6c:49:1b:1f:b6:c2:bb:02:ab:01:bd:22:
         77:47:31:02:c4:b2:5d:3f:03:ac:a4:64:1a:53:b0:16:19:25:
         a5:dd:f6:4f:05:40:c0:1e:76:0c:53:28:60:fe:05:f5:1b:66:
         ff:0e:6f:91:e0:49:80:a5:34:58:6d:9e:75:87:48:df:69:27:
         78:e2:77:aa:fc:89:c2:4d:d3:b3:f7:4e:01:43:10:0f:cc:a8:
         7f:52:46:17:a0:1d:6c:67:b2:a2:07:80:44:7d:ff:3c:db:d9:
         83:65:2c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:29 2026 by rpki-client