Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
File:                     6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft (raw, json)
Hash identifier:          pV6oAuclJHn9B1I3Qnt07dz59zAQgzhNAYlCYrSboq8=
Subject key identifier:   F0:E8:04:34:79:BA:12:A6:6C:08:0D:71:7C:1E:00:D3:D5:58:E3:EA
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       22696CB0F28A68E265E618F1B25C475134243FD6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
Manifest number:          CB
Signing time:             Wed 07 Oct 2026 20:56:49 +0000
Manifest this update:     Wed 07 Oct 2026 20:51:49 +0000
Manifest next update:     Sat 10 Oct 2026 22:43:49 +0000
Files and hashes:         1: 34322e36322e38352e302f32342d3234203d3e2034383038.roa (hash: d6s6STG5xAhM+Q03cuASnNG/lEicPG7doEKUy6uuw0A=)
                          2: 34322e36322e302e302f32312d3231203d3e2039383038.roa (hash: EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=)
                          3: 3132352e3235342e3137362e302f32312d3231203d3e203233373234.roa (hash: ZSgRpA/5spQ7+nn24xwWT1dkpORgmEl9Tobd39U1oL4=)
                          4: 3132352e3235342e3137362e302f32312d3231203d3e2039383038.roa (hash: lUeK8xpVipC5mFV8styuczLSL00UPEUPbJqAx4qGge8=)
                          5: 6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl (hash: R2clMlc4YIwUfcFC+4CPmncpy1DAsMkJYk/kAO6RnCA=)
                          6: 34322e36322e302e302f32312d3231203d3e203233373234.roa (hash: lBGsBAewsxptaODp2y7ZM47gOj5BjTjZx+tz5uMV0yY=)
                          7: 34322e36322e38322e302f32342d3234203d3e2034383038.roa (hash: yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=)
                          8: 3132352e3235342e3136382e302f32312d3231203d3e2034383038.roa (hash: FFsVQX7YMz+Uh7zFfyThQ8wwzvkbi+7ZqBOYGNl3RHc=)
                          9: 34322e36322e39332e302f32342d3234203d3e2034383038.roa (hash: uxBI9K/066b15ycUoFdjxRmXfDk6KJQDbm8b5kUa/e0=)
                          10: 34322e36322e332e302f32342d3234203d3e2034383038.roa (hash: jEyZcujH1QL1hLT4TmAdROjtQhT4W+m9Sxd5UgGb68s=)
                          11: 3132352e3235342e3136382e302f32312d3231203d3e203233373234.roa (hash: gj+UmcoP7t9OxmOHfB+/nZrnXWANKJKXP2VI5gBrjmM=)
                          12: 3132352e3235342e3136382e302f32312d3231203d3e2039383038.roa (hash: jIBaOQf/G7rNS/DVWjE6H4dhEL1mXI4wvD13/gtpmAU=)
                          13: 34322e36322e33322e302f32312d3231203d3e203233373234.roa (hash: 5fV6EvkK9HY5cJ6QMdi44kgDLBAOMwIObTFqRz2Ou6U=)
                          14: 34322e36322e34382e302f32302d3230203d3e2039383038.roa (hash: 6QDbx2KjRpz8KPX6rRbAHTFqhAQbtXxyfAjUQWLilWE=)
                          15: 34322e36322e34382e302f32302d3230203d3e203233373234.roa (hash: T5P+TWlJuodb3Cv9T3YIhLPy23PjFvvDhtdwPZHDWrw=)
                          16: 34322e36322e33322e302f32312d3231203d3e2039383038.roa (hash: yQx/mYuVkSoCaiWuA20eaqop82i+JViDE/hLHSp2Frk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 22:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:69:6c:b0:f2:8a:68:e2:65:e6:18:f1:b2:5c:47:51:34:24:3f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: Oct  7 20:51:49 2026 GMT
            Not After : Oct 10 22:43:49 2026 GMT
        Subject: CN=F0E8043479BA12A66C080D717C1E00D3D558E3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:17:50:67:ee:13:78:35:96:d8:6c:f8:65:
                    e8:8b:f2:a1:41:97:dc:a9:66:bd:b7:d0:47:db:fb:
                    d4:df:d1:42:b4:6c:85:fb:a9:b1:84:2d:0a:c7:e7:
                    85:a8:c8:28:dd:db:16:f8:12:2c:e2:87:ac:53:6f:
                    de:c3:e7:89:28:36:e5:ca:27:ef:90:0a:85:0f:21:
                    47:67:e2:00:df:58:86:74:bb:c9:b9:24:e0:35:88:
                    ce:82:69:65:d3:ea:f0:86:53:6d:92:17:d2:2b:b8:
                    e1:16:bb:04:dc:94:85:3f:8a:33:2a:31:70:36:d3:
                    72:7f:b7:32:1e:c6:38:99:f8:4f:3e:91:a5:4d:a7:
                    81:5a:79:f3:67:e8:6f:d6:5e:12:0e:46:75:36:79:
                    f7:e3:0d:73:20:c4:ba:95:06:53:d6:33:07:60:cd:
                    37:fb:f2:dc:da:68:87:a3:a6:0a:8a:51:98:6b:f0:
                    27:9a:b2:2f:1b:21:1a:41:b4:e7:7d:95:93:9b:ea:
                    b2:39:fb:f1:7f:4b:fe:8f:18:48:b7:30:84:bb:72:
                    bc:15:6d:5e:fe:85:14:bc:38:07:61:62:74:66:f4:
                    93:c6:9f:11:0c:15:6a:45:01:a0:d7:e8:76:e6:c4:
                    37:8a:a2:43:d9:b8:c0:63:b0:ac:06:26:3d:00:3e:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:04:34:79:BA:12:A6:6C:08:0D:71:7C:1E:00:D3:D5:58:E3:EA
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e8:2c:b7:cb:c2:b0:ca:99:72:df:e5:e7:ba:f6:33:3d:73:
         06:de:21:6b:72:e3:73:07:66:36:c9:53:50:e1:41:11:47:98:
         6a:14:c1:17:e2:9e:d2:62:90:4d:78:5d:a7:f1:80:77:e4:55:
         dd:a1:de:19:c8:17:88:1e:50:c4:8d:5b:97:e9:65:74:a1:31:
         52:69:35:36:d8:5e:59:ba:2a:d9:80:6e:e5:e8:c0:23:65:dc:
         35:1f:f9:b7:33:6c:eb:00:5d:ad:f3:80:f2:b4:57:e7:4e:82:
         34:f7:31:39:50:ae:fc:b6:97:82:77:0e:67:44:a9:57:8a:e9:
         6a:93:5b:b2:d3:8a:a8:96:b7:df:13:cb:9c:aa:10:4d:1d:1c:
         c0:16:ac:57:04:b2:a5:a5:f8:b1:e7:c3:b0:74:f8:4f:2f:46:
         74:72:02:7c:00:fb:1d:34:79:e7:30:89:76:38:df:0f:d6:0b:
         24:60:2e:8f:2c:07:68:7f:0b:2d:bb:f3:6b:6a:9c:dc:20:75:
         a4:94:35:0f:af:e7:5f:28:f4:5d:6c:99:a2:be:f5:05:79:c0:
         1b:8d:df:e0:f8:d7:88:21:14:b3:fb:14:89:d4:ad:05:0f:dc:
         71:f5:1e:65:a2:71:e6:f3:b2:05:11:7b:6d:d9:67:e9:d8:28:
         b6:2d:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:27:50 2026 by rpki-client