Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
File:                     AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft (raw, json)
Hash identifier:          uHZJev9lNdo5XCZtHyNqsomlexOxX1g/2xxXSmM98aY=
Subject key identifier:   5D:47:0E:E5:FB:17:B6:1D:9F:6E:CA:B5:FB:21:3F:DC:60:B3:75:FA
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       1757AE710686AE847C50F2003C7B91001039DFC6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
Manifest number:          47
Signing time:             Fri 12 Jun 2026 22:55:53 +0000
Manifest this update:     Fri 12 Jun 2026 22:50:53 +0000
Manifest next update:     Sun 14 Jun 2026 00:02:53 +0000
Files and hashes:         1: 3232312e3133332e3232382e302f32332d3233203d3e2034383132.roa (hash: Y1HiM+KumJNDeDYPLakmSQoLeW7lH5fsmPDT4ZzwnTw=)
                          2: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (hash: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=)
                          3: 3131362e36362e36342e302f31392d3139203d3e2030.roa (hash: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=)
                          4: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (hash: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY=)
                          5: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (hash: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI=)
                          6: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl (hash: Kkd11AD3UDIi4xof8onW/OSYxDxirx95B5T79psavko=)
                          7: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (hash: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM=)
                          8: 3131362e36362e33322e302f32302d3230203d3e2030.roa (hash: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=)
                          9: 3232312e3133332e3234352e302f32342d3234203d3e2034383132.roa (hash: E8J6ehCAVQBTTL4nluJ8TryKPdaQtCV6x7AzifZmEoU=)
                          10: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (hash: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=)
                          11: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (hash: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4=)
                          12: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (hash: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=)
                          13: 3131362e36362e302e302f31392d3139203d3e2030.roa (hash: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=)
                          14: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (hash: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=)
                          15: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (hash: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=)
                          16: 3232312e3133332e3232342e302f32302d3230203d3e2030.roa (hash: nHvu/7uCsbClyS8g05j2ZhgLdmx83hkxQxwIo964IPY=)
                          17: 3131362e36362e39362e302f32302d3230203d3e2030.roa (hash: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:ae:71:06:86:ae:84:7c:50:f2:00:3c:7b:91:00:10:39:df:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: Jun 12 22:50:53 2026 GMT
            Not After : Jun 14 00:02:53 2026 GMT
        Subject: CN=5D470EE5FB17B61D9F6ECAB5FB213FDC60B375FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:fa:7f:a8:83:a0:cd:f9:be:af:3e:69:28:
                    a3:e8:bb:aa:df:14:14:b0:17:e9:a0:b7:38:7f:e6:
                    92:14:08:77:93:22:46:13:e4:ed:68:a9:af:1c:7b:
                    55:4b:5d:d3:84:7a:66:69:a6:fe:ff:ea:b0:3a:68:
                    f3:7c:a6:f1:15:91:46:b9:59:38:4b:f4:53:b8:f7:
                    90:35:cc:9b:7c:76:a3:dc:f2:55:7a:21:73:89:48:
                    fa:5d:58:92:42:41:89:c9:80:4b:6f:f3:11:b4:f5:
                    eb:76:56:1f:12:3b:d3:e8:1b:99:c1:c1:78:3c:06:
                    75:7c:18:f0:a0:62:c7:8b:8c:6f:14:1d:9c:b0:ee:
                    ab:f7:c0:5d:cf:90:6d:8e:10:3a:7d:4b:ca:2a:2a:
                    96:ed:74:53:6b:1a:6d:57:13:c1:24:1e:9a:e2:19:
                    da:1e:11:13:3d:f0:25:5a:a1:37:f2:e7:a4:cb:7c:
                    1a:f6:c3:16:61:f0:aa:10:45:60:6d:b4:4d:3a:d5:
                    54:b0:aa:99:b2:4e:77:ef:d5:9d:07:f4:72:2e:f9:
                    a8:89:a7:28:b9:5c:7e:ad:a7:67:8e:06:dd:43:e8:
                    b9:8d:56:9e:d1:ff:e8:0f:12:8d:6c:a1:90:00:44:
                    d7:86:f8:7f:db:07:60:e9:0e:ae:ad:b4:58:4b:59:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:47:0E:E5:FB:17:B6:1D:9F:6E:CA:B5:FB:21:3F:DC:60:B3:75:FA
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:23:e3:02:f4:b6:9d:34:de:9a:c5:31:82:26:a2:7a:40:11:
         b8:ef:b0:95:3f:e7:5d:b0:c2:e0:5d:6c:ed:fc:88:53:b6:a5:
         45:e1:97:56:35:9b:3c:a9:f5:1c:78:15:8e:48:92:06:59:86:
         bc:78:06:e1:5a:ec:4d:cf:d4:8e:5b:50:3b:5a:ed:07:42:27:
         9c:61:8f:b8:7c:4a:c9:08:18:6b:49:a6:38:51:c9:03:97:f9:
         50:f8:d8:6f:b8:b5:9e:b3:4d:42:0d:e1:ca:3c:2b:62:86:42:
         dc:9f:5d:84:3b:a9:ba:4f:f5:17:3c:86:83:7c:86:b5:74:4a:
         3a:28:df:ab:0d:42:32:11:bb:de:30:d5:38:ae:f0:f9:b5:99:
         33:1b:c0:6c:d1:24:ab:87:3d:dd:10:c3:c5:d5:73:bb:7b:84:
         4d:16:ed:53:48:61:5c:f6:76:9b:1d:02:1f:8f:f7:e8:f5:26:
         10:99:80:9e:d0:75:89:c1:87:b4:2e:01:5e:2f:89:1c:27:63:
         53:b4:19:e2:2b:05:18:10:51:40:7c:29:b6:ac:91:32:75:16:
         19:4e:1f:64:97:51:c4:a5:59:f6:91:c3:9a:52:35:6f:b8:6c:
         3f:3e:3b:e7:c0:e0:8c:9e:5a:43:96:0d:00:68:15:30:cb:2d:
         19:67:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:18 2026 by rpki-client