Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
File:                     6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json)
Hash identifier:          2ckr/yfvKIXBKHdP/mQj5cUTW9zhYlGn1oDqOdnNYFA=
Subject key identifier:   7E:3C:CF:36:30:D3:AF:7E:96:74:E3:F2:76:CB:A7:20:87:85:E5:E9
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       1336B5EEC69B34895006EBCDACE58AB7EFBDBE59
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 09:46:41 +0000
Manifest this update:     Sat 13 Jun 2026 09:41:41 +0000
Manifest next update:     Sun 14 Jun 2026 13:29:41 +0000
Files and hashes:         1: 3132312e34362e3233322e302f32332d3233203d3e2034383131.roa (hash: ya78O7sAuJyhGsU6/IknufRy2nAzwBu9UN31pB+KKU4=)
                          2: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: XdDGFdEBUWG0AaMBeKE0dFqtrmcm+cTMv4YTnU0WgME=)
                          3: 32372e3130392e3132342e302f32322d3232203d3e2034383131.roa (hash: rYu/eBQM4h8/XihKL8IwRwGboqy1k9QH6j6PxhBjm+I=)
                          4: 3132312e34362e3234392e302f32342d3234203d3e2034383131.roa (hash: cmvIW4sXtGEpVBV8idr95fS3oeQBOCkjgxn412lwIng=)
                          5: 3132312e34362e3233362e302f32342d3234203d3e2034383131.roa (hash: aOL2twD5oXm+ZXFKGnkUGShNfSgPt+QKt3iWK0pV7Ro=)
                          6: 3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (hash: /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=)
                          7: 3130332e32382e3231322e302f32322d3232203d3e2034383131.roa (hash: qc620Oxlzt7dIVpTjlxhUtMjAuP4sggvYYhOIp/BQvg=)
                          8: 3132312e34362e3233382e302f32342d3234203d3e2034383131.roa (hash: lreg6XU0+Tzz4w970jTicRygNZq0vFs5IE++gRHl1AU=)
                          9: 3132312e34362e3235302e302f32342d3234203d3e2034383131.roa (hash: 3NXFOW+JxLSqSLZN+FPKsUDOS5JMhZ+sra5cXJvMIzU=)
                          10: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=)
                          11: 3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (hash: TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=)
                          12: 3132312e34362e3235342e302f32342d3234203d3e2034383131.roa (hash: 3pXA4qKU3vp45gTirzMkKrU8Zk4wL0OLas0e2KqoDHA=)
                          13: 3132312e34362e3235312e302f32342d3234203d3e2034383131.roa (hash: wRj2VcGqF83HOgkXpso91G8BmGLTATNaFM8r75p6m9c=)
                          14: 3132312e34362e3235322e302f32342d3234203d3e2034383131.roa (hash: cxwtN8rgMwMkJebqJNIyJvCO710JkpyekZUx7VMA6FU=)
                          15: 3132312e34362e3235332e302f32342d3234203d3e2034383131.roa (hash: h5S/8OMiNh1ekmL5NK6fWlNsK0E9t/53SO5cpRd3yug=)
                          16: 34352e3132342e3132342e302f32322d3232203d3e2034383132.roa (hash: CXEpAmsvqUr2yoEBoF7EcLtMxD3Q11yE8kM6MZ+Yois=)
                          17: 3132312e34362e3234342e302f32342d3234203d3e2034383131.roa (hash: WKUTb3+nU8Q8MVc6zgKN74/b/hNERmvdsnThxBvo2+0=)
                          18: 3132312e34362e3233372e302f32342d3234203d3e2034383131.roa (hash: 5Ea7CEt1wZxAZnI6KN8ov4WmZLGvDEjxqq46jr+KFXY=)
                          19: 3132312e34362e3232342e302f32322d3232203d3e2034383132.roa (hash: yKAHVIn3NJVUHJeWRyBNQvW/+Ho4lCgMnLH+ppAs5Js=)
                          20: 3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (hash: EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=)
                          21: 3132312e34362e3234362e302f32342d3234203d3e2034383131.roa (hash: UdhPDpYX1v0Mwbch7R6+oi4dEsD74pACn2DpgqSxhjs=)
                          22: 3132312e34362e3233392e302f32342d3234203d3e2034383131.roa (hash: caHxbqdTaK/FENayyJGGA0UrdY4LzN4IKHKwr6s7HqI=)
                          23: 3132312e34362e3234352e302f32342d3234203d3e2034383131.roa (hash: K2+E96TOB123eDmds7ch4nsFIxsPGZkKGQ6NOjteGKo=)
                          24: 3132312e34362e3233352e302f32342d3234203d3e2034383131.roa (hash: mJAl+LwwvXOwdBQoGHrfrqfj6m3rDD+aqn7fMRg2QmI=)
                          25: 3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (hash: rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=)
                          26: 3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (hash: BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:36:b5:ee:c6:9b:34:89:50:06:eb:cd:ac:e5:8a:b7:ef:bd:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Jun 13 09:41:41 2026 GMT
            Not After : Jun 14 13:29:41 2026 GMT
        Subject: CN=7E3CCF3630D3AF7E9674E3F276CBA7208785E5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:9f:59:d5:b9:87:92:41:e0:d8:d5:31:2e:
                    39:d4:37:0a:c2:f2:5e:b2:ae:d5:a6:4a:da:6e:40:
                    b8:97:d2:ff:d1:73:5c:84:0e:13:9c:9b:31:d2:a5:
                    d9:0d:ca:f4:6b:89:8d:17:4b:5b:b2:33:fe:a5:f4:
                    4b:f3:a9:8f:dc:f6:e3:6e:15:11:54:cd:36:44:c3:
                    fc:15:03:38:a6:e2:17:42:58:89:5c:11:78:78:28:
                    4d:b4:8a:b3:e9:29:94:13:d7:d9:e7:0d:ff:b5:c2:
                    cc:26:fa:c8:83:d0:d8:9c:87:9c:94:16:75:e1:86:
                    fa:46:42:da:7d:6e:e6:9b:6a:63:5d:84:67:93:37:
                    da:fa:30:fc:ce:17:fe:73:76:e7:fc:7a:0b:e3:3f:
                    fc:a4:53:6a:ea:09:e4:43:ba:58:ca:99:9f:06:3a:
                    7f:9f:51:37:f1:e9:2b:5a:8b:fc:13:99:5e:17:3e:
                    ae:57:c2:83:17:2b:4f:19:3e:21:92:bf:49:a0:19:
                    35:18:0e:9e:81:1e:be:7b:74:88:22:34:ed:02:6a:
                    6e:73:26:59:65:e0:9f:89:d0:e9:d5:a9:f4:15:e6:
                    26:83:82:90:29:cf:cb:d5:11:b4:f6:17:02:3a:79:
                    2e:c8:0e:fb:15:da:c0:a9:ca:f2:fe:db:51:56:29:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:CF:36:30:D3:AF:7E:96:74:E3:F2:76:CB:A7:20:87:85:E5:E9
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:d1:70:28:de:83:63:ba:3e:fc:f8:3b:ef:71:22:65:7e:
         72:0c:ba:49:3e:87:f9:73:e9:f2:75:25:c7:aa:ca:af:c4:92:
         fb:e3:b0:dc:c6:9d:4f:c0:ef:bc:71:39:13:c0:25:5c:99:33:
         51:de:b7:8d:39:b6:a5:17:b3:a4:17:d3:35:da:15:0e:f2:ea:
         95:4a:56:e4:6f:ad:d1:d7:3f:3f:6a:4b:91:83:2d:78:6a:cf:
         66:cd:8b:6f:0c:ba:b9:e0:e9:67:c5:27:8a:5a:df:f3:99:61:
         2e:14:ee:2f:8f:e2:76:e0:a2:91:4c:3d:9a:30:5d:6b:ee:76:
         2e:e4:9d:e9:96:53:81:b8:21:1f:2c:54:65:3c:3b:28:a3:36:
         9e:f1:18:c0:2a:b9:21:54:d3:1c:a6:8e:52:77:f2:79:b8:35:
         8d:45:4a:93:fe:3f:65:30:8e:51:83:5f:69:54:41:cd:aa:ab:
         df:81:42:d5:96:9f:d2:e9:48:b0:16:6c:55:1f:ae:00:19:9d:
         41:7b:5f:c8:45:9f:51:d6:1f:8a:eb:76:32:be:f5:03:08:27:
         bd:a0:33:e0:26:dc:ed:08:13:04:b1:8b:48:d9:cd:8f:11:ee:
         08:0a:7e:5d:0a:16:a6:24:a4:86:f9:3d:72:ef:1d:91:4c:f8:
         c8:0d:e9:d7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEza17sabNIlQBuvNrOWKt++9vlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA2MTMwOTQxNDFaFw0yNjA2MTQxMzI5NDFaMDMxMTAvBgNV
BAMTKDdFM0NDRjM2MzBEM0FGN0U5Njc0RTNGMjc2Q0JBNzIwODc4NUU1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnJ9Z1bmHkkHg2NUxLjnUNwrC
8l6yrtWmStpuQLiX0v/Rc1yEDhOcmzHSpdkNyvRriY0XS1uyM/6l9EvzqY/c9uNu
FRFUzTZEw/wVAzim4hdCWIlcEXh4KE20irPpKZQT19nnDf+1wswm+siD0Nich5yU
FnXhhvpGQtp9buabamNdhGeTN9r6MPzOF/5zduf8egvjP/ykU2rqCeRDuljKmZ8G
On+fUTfx6Stai/wTmV4XPq5XwoMXK08ZPiGSv0mgGTUYDp6BHr57dIgiNO0Cam5z
Jlll4J+J0OnVqfQV5iaDgpApz8vVEbT2FwI6eS7IDvsV2sCpyvL+21FWKUABAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfjzPNjDTr36WdOPydsunIIeF5ekwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTc0MDUxMTUyNjgwNzE0MjcvMC82QTg5OEIzRTRFQkI0
QzU3N0Y3NkJCRDdGMEQ3NTFGODUwNUFERDk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUzRcCjeg2O6
Pvz4O+9xImV+cgy6ST6H+XPp8nUlx6rKr8SS++Ow3MadT8DvvHE5E8AlXJkzUd63
jTm2pRezpBfTNdoVDvLqlUpW5G+t0dc/P2pLkYMteGrPZs2Lbwy6ueDpZ8Unilrf
85lhLhTuL4/iduCikUw9mjBda+52LuSd6ZZTgbghHyxUZTw7KKM2nvEYwCq5IVTT
HKaOUnfyebg1jUVKk/4/ZTCOUYNfaVRBzaqr34FC1Zaf0ulIsBZsVR+uABmdQXtf
yEWfUdYfiut2Mr71AwgnvaAz4Cbc7QgTBLGLSNnNjxHuCAp+XQoWpiSkhvk9cu8d
kUz4yA3p1w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:45:06 2026 by rpki-client