Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
File:                     946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json)
Hash identifier:          wjqymffAhG/1kU44N1xQ5OUjOh1y1XFqdyC/1LLzM8c=
Subject key identifier:   7E:B6:3C:13:73:6E:DA:27:75:DD:80:DD:7A:89:09:89:13:B2:20:BD
Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
Certificate issuer:       /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Certificate serial:       1AD7664A1518B898F57F710362AF59A394B581DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
Manifest number:          41
Signing time:             Sat 13 Jun 2026 18:17:04 +0000
Manifest this update:     Sat 13 Jun 2026 18:12:04 +0000
Manifest next update:     Sun 14 Jun 2026 21:11:04 +0000
Files and hashes:         1: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=)
                          2: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: mI5x0j9FBR25VjrMnNxfwCI8TMkFExS0QaUQGSXHXAM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d7:66:4a:15:18:b8:98:f5:7f:71:03:62:af:59:a3:94:b5:81:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
        Validity
            Not Before: Jun 13 18:12:04 2026 GMT
            Not After : Jun 14 21:11:04 2026 GMT
        Subject: CN=7EB63C13736EDA2775DD80DD7A89098913B220BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:a8:c9:cd:fc:7b:40:51:89:cb:68:ab:5b:
                    2d:37:1f:49:13:40:90:f6:bc:a7:8a:d6:2e:61:5e:
                    49:ed:5a:99:58:a0:a4:f8:8b:d2:96:55:9b:2a:0a:
                    10:58:9d:6c:51:ed:84:20:15:37:0f:4e:f3:5b:03:
                    1b:1d:93:a9:5d:b2:f9:13:15:f9:09:cf:d3:2d:f1:
                    9f:66:32:9a:1e:5d:f4:7a:02:3f:8d:1c:63:99:e7:
                    13:24:23:4e:c5:0b:76:fd:eb:06:4e:34:16:8e:6f:
                    cb:1c:5f:2d:66:3a:8d:d9:dc:6b:24:e0:f3:65:8d:
                    77:35:8e:68:ad:73:3e:58:73:10:59:94:c0:d0:c3:
                    29:f8:7d:40:fe:51:c1:7c:bb:20:7b:c3:26:39:b2:
                    0c:be:9c:9f:db:51:b0:62:2b:f0:0f:67:77:28:01:
                    7a:17:d3:58:83:a3:5d:af:63:40:99:45:d0:49:de:
                    91:8d:62:8b:e9:3c:34:6a:9c:54:44:d5:99:18:7a:
                    4c:5f:2f:95:f8:3b:d8:0e:a8:17:03:5d:d9:a6:87:
                    d0:5a:a5:d3:2a:77:42:d2:5f:7b:8c:65:a6:4b:fc:
                    2e:8d:d2:d4:1d:f1:35:98:f6:66:f7:b2:8c:0b:66:
                    0e:a5:66:92:5d:75:d6:f4:eb:aa:07:1b:e2:6b:9f:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:3C:13:73:6E:DA:27:75:DD:80:DD:7A:89:09:89:13:B2:20:BD
            X509v3 Authority Key Identifier:
                keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:61:05:2f:9d:c7:95:72:9d:41:b8:34:5e:2e:b5:c4:5e:
         e6:66:48:e8:e6:b9:c7:e1:90:26:ee:39:cd:4e:61:9e:2c:fa:
         34:5a:f4:6e:15:62:64:12:89:df:5c:1e:c7:bb:ba:6f:85:5a:
         cd:b9:28:97:3c:73:bc:2a:58:f2:9b:43:db:7c:78:d5:61:9f:
         35:fb:9f:69:c2:22:2b:a3:b8:e6:cb:f0:23:03:7d:3e:02:84:
         60:ae:d1:26:d3:d9:56:1b:a8:3a:17:13:b3:bc:65:57:16:39:
         39:eb:66:c8:b4:d1:27:35:ed:ba:33:de:c9:ad:fc:55:4e:9c:
         8a:35:03:c3:9d:9e:aa:bc:ba:b0:31:7a:b4:45:20:b6:8a:a9:
         15:c8:eb:35:9f:74:de:49:65:4a:b7:fb:98:58:09:ed:a8:70:
         0d:04:ac:d8:81:c5:3b:a8:b4:03:52:41:a9:9e:e0:b7:3c:ab:
         94:7c:e1:35:39:4b:06:74:be:a1:f4:9e:a6:ac:e6:20:32:1d:
         9f:09:50:2d:04:f2:20:d2:e2:ea:51:5e:75:b6:97:c8:90:1e:
         42:2b:40:05:4e:f1:72:98:5a:0c:0e:96:40:2b:0a:9f:8e:2e:
         34:2b:37:6e:13:3a:d8:0f:73:b8:69:85:eb:6d:80:e9:c0:07:
         d9:e4:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:59 2026 by rpki-client