Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
File:                     FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json)
Hash identifier:          762yzMfr6YHQJPt11z6VJoB5pXCuH8GNa/bS7wNfqss=
Subject key identifier:   C5:9B:FD:A7:38:3B:62:47:2E:93:54:A7:D7:A3:E3:D2:41:26:BE:83
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Certificate issuer:       /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial:       69C1C6E64E38D69D7AED4DBFF9A7B922165853CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
Manifest number:          3C
Signing time:             Sun 14 Jun 2026 02:42:37 +0000
Manifest this update:     Sun 14 Jun 2026 02:37:37 +0000
Manifest next update:     Mon 15 Jun 2026 03:54:37 +0000
Files and hashes:         1: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: j8lbBEHjW6gEOkeRBhdaqNQ8tG9IbTwcJiwurukdYSg=)
                          2: AS24139.roa (hash: GmhrZ2KWgXpjk9Glz+bNwq3OxfjlVOq5wGnSrVgbbDM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c1:c6:e6:4e:38:d6:9d:7a:ed:4d:bf:f9:a7:b9:22:16:58:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
        Validity
            Not Before: Jun 14 02:37:37 2026 GMT
            Not After : Jun 15 03:54:37 2026 GMT
        Subject: CN=C59BFDA7383B62472E9354A7D7A3E3D24126BE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:c3:96:7a:08:5e:1e:76:dd:a8:72:ad:22:
                    2c:e0:6a:f1:79:93:f0:29:83:f9:e2:76:b7:ad:b2:
                    f1:67:14:41:c9:63:92:1f:a4:ee:6d:fc:80:5a:09:
                    54:3b:f9:3c:bd:48:10:f4:3e:5f:f5:5d:03:87:08:
                    93:4f:a3:dc:b8:84:a5:88:76:4f:b3:3e:45:3f:d3:
                    c1:78:39:df:c1:24:6f:50:e5:86:47:e5:a8:16:a7:
                    bf:a5:5c:07:0d:3a:c7:0a:53:ce:8d:d4:c5:af:d9:
                    95:af:b0:d9:1f:b7:eb:2a:7c:27:cf:ef:5f:88:15:
                    31:af:38:5a:b2:cb:42:13:51:ab:ee:0e:53:b6:98:
                    a8:5f:d5:99:6b:2e:99:2c:52:70:6e:38:9d:3a:96:
                    2a:61:7d:a2:c7:e3:93:45:7d:58:8b:2a:31:ec:0a:
                    45:93:ec:e1:c8:9c:9a:19:ff:6f:cf:3f:d0:4a:ff:
                    33:fd:59:aa:c2:c2:06:c6:8d:cc:4e:25:e0:6a:86:
                    b0:44:33:d3:36:47:58:da:f2:3e:6f:7e:e7:8c:b6:
                    c5:c1:c4:51:1f:7b:62:05:56:c6:58:df:25:a8:17:
                    01:2c:0b:6f:73:2f:18:3b:74:ab:9f:fd:84:56:e6:
                    1d:14:f3:c5:55:24:62:b6:42:e1:a8:2a:92:3d:d0:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:FD:A7:38:3B:62:47:2E:93:54:A7:D7:A3:E3:D2:41:26:BE:83
            X509v3 Authority Key Identifier:
                keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:55:dc:4a:23:6a:e2:ab:d6:05:72:65:da:22:6f:2f:39:
         63:0c:26:a2:00:d3:24:a0:50:ee:e8:95:d3:f8:0b:64:e8:a1:
         52:76:79:4e:a0:76:09:5c:09:92:92:93:3d:24:ed:d9:c2:86:
         43:41:f8:3b:f4:d5:75:cc:f2:7a:2e:10:96:69:a6:d6:68:22:
         5a:89:3a:5f:62:64:a0:46:e4:68:bd:8c:71:7c:4f:38:ab:8c:
         78:22:79:0a:69:d1:06:4d:f1:76:e0:ef:98:bd:9e:73:e8:90:
         5f:e8:94:0a:96:61:b1:7e:67:85:b2:32:91:82:fb:4d:12:54:
         34:4d:2f:0a:b4:90:fd:7b:cb:86:00:60:ef:a4:65:fd:60:5a:
         b4:76:99:49:82:6b:92:8b:32:ef:f7:06:6e:3e:76:c1:23:04:
         d9:b9:bc:6d:84:5e:22:6e:32:dd:b5:5c:d4:ed:f5:c8:70:20:
         70:2d:02:18:e8:92:0e:f4:ef:2d:45:3a:07:9c:48:fd:f7:a9:
         d2:3c:c0:71:c3:dc:b5:e1:82:96:1f:56:ba:35:7c:2f:76:8c:
         6a:ca:f0:06:7a:73:f9:51:6c:b1:d4:70:b1:51:86:4e:5f:27:
         d6:f3:3a:d0:fe:90:cb:43:99:3b:d2:f7:60:41:cc:51:ae:eb:
         91:14:45:93
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUacHG5k441p167U2/+ae5IhZYU8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0
MjIzRTZBOTAeFw0yNjA2MTQwMjM3MzdaFw0yNjA2MTUwMzU0MzdaMDMxMTAvBgNV
BAMTKEM1OUJGREE3MzgzQjYyNDcyRTkzNTRBN0Q3QTNFM0QyNDEyNkJFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCro8OWegheHnbdqHKtIizgavF5
k/Apg/nidretsvFnFEHJY5IfpO5t/IBaCVQ7+Ty9SBD0Pl/1XQOHCJNPo9y4hKWI
dk+zPkU/08F4Od/BJG9Q5YZH5agWp7+lXAcNOscKU86N1MWv2ZWvsNkft+sqfCfP
71+IFTGvOFqyy0ITUavuDlO2mKhf1ZlrLpksUnBuOJ06liphfaLH45NFfViLKjHs
CkWT7OHInJoZ/2/PP9BK/zP9WarCwgbGjcxOJeBqhrBEM9M2R1ja8j5vfueMtsXB
xFEfe2IFVsZY3yWoFwEsC29zLxg7dKuf/YRW5h0U88VVJGK2QuGoKpI90G1rAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUxZv9pzg7Ykcuk1Sn16Pj0kEmvoMwHwYDVR0j
BBgwFoAU/oEx19uhZPjfLRlRrBKZiEIj5qkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ1ODEzMjE3Mjc2NzI1MS8wL0ZFODEzMUQ3REJBMTY0RjhERjJEMTk1MUFDMTI5
OTg4NDIyM0U2QTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY0NTgxMzIxNzI3NjcyNTEvMC9GRTgxMzFEN0RCQTE2
NEY4REYyRDE5NTFBQzEyOTk4ODQyMjNFNkE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTtV3EojauKr
1gVyZdoiby85YwwmogDTJKBQ7uiV0/gLZOihUnZ5TqB2CVwJkpKTPSTt2cKGQ0H4
O/TVdczyei4Qlmmm1mgiWok6X2JkoEbkaL2McXxPOKuMeCJ5CmnRBk3xduDvmL2e
c+iQX+iUCpZhsX5nhbIykYL7TRJUNE0vCrSQ/XvLhgBg76Rl/WBatHaZSYJrkosy
7/cGbj52wSME2bm8bYReIm4y3bVc1O31yHAgcC0CGOiSDvTvLUU6B5xI/fep0jzA
ccPcteGClh9WujV8L3aMasrwBnpz+VFssdRwsVGGTl8n1vM60P6Qy0OZO9L3YEHM
Ua7rkRRFkw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:06 2026 by rpki-client