Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
File:                     C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json)
Hash identifier:          N6Lk5kVxGfS+3hYhacdjNJZIcGmHQC1nqpTFmM+WtvI=
Subject key identifier:   18:EF:A8:08:3F:68:F1:A9:9F:27:AE:6C:0F:4B:17:63:D9:EB:FA:76
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Certificate issuer:       /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial:       1C6A90F31BC72CAF2DFDDB5BA6DE02AB541E1D60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 17:26:59 +0000
Manifest this update:     Sat 13 Jun 2026 17:21:59 +0000
Manifest next update:     Sun 14 Jun 2026 21:18:59 +0000
Files and hashes:         1: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=)
                          2: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: J58dZlfRdJUgRTjm0SqvrJBfWWqA/Le3q3VEA023YZ8=)
                          3: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=)
                          4: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=)
                          5: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=)
                          6: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6a:90:f3:1b:c7:2c:af:2d:fd:db:5b:a6:de:02:ab:54:1e:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
        Validity
            Not Before: Jun 13 17:21:59 2026 GMT
            Not After : Jun 14 21:18:59 2026 GMT
        Subject: CN=18EFA8083F68F1A99F27AE6C0F4B1763D9EBFA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:0d:7a:a2:c1:45:6f:d1:6a:18:d9:a2:56:
                    2b:c4:eb:44:cb:69:a3:92:a7:4c:20:76:cb:c0:b3:
                    3d:7c:ec:63:3d:69:0c:94:d5:18:ba:ba:69:6b:0d:
                    65:43:1a:38:d9:f0:6a:11:5c:ea:a2:b8:f7:63:80:
                    e9:ed:9f:b3:28:b8:14:d8:cf:99:3f:c1:76:ae:15:
                    56:9e:3f:9f:21:ce:b4:f8:91:73:2f:db:2f:94:dc:
                    5f:85:0e:51:56:e2:1c:54:f5:4e:0c:2e:db:4b:63:
                    14:19:e6:b1:ca:f3:2a:ce:33:e8:d1:d4:06:39:5f:
                    df:6f:eb:3a:37:c0:a1:ea:d7:13:a8:43:e0:35:21:
                    42:a0:0f:70:83:0d:a0:4d:5b:04:7d:07:4b:98:94:
                    ec:dc:c5:1b:dc:da:af:3c:27:c4:66:ae:0a:82:31:
                    33:82:d0:f3:02:0b:6c:fc:ec:87:7b:60:cb:15:a4:
                    da:9f:8e:b5:79:e3:35:b0:fa:4d:04:7d:1e:da:13:
                    11:79:66:b5:16:9e:b4:93:25:4f:2e:06:54:38:54:
                    30:02:99:71:88:0d:af:2a:95:36:f0:a7:9a:24:c2:
                    ea:e9:c6:4c:cf:e3:af:53:a4:14:c1:67:f4:74:b3:
                    44:73:63:c9:c9:4b:97:8a:84:cb:6c:9a:2c:bc:9c:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:A8:08:3F:68:F1:A9:9F:27:AE:6C:0F:4B:17:63:D9:EB:FA:76
            X509v3 Authority Key Identifier:
                keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:9a:22:cd:23:29:15:f1:2b:ea:cb:cc:d3:43:a8:5c:5c:
         9f:fb:fb:c7:21:88:7f:53:b1:07:4e:de:a8:db:c3:42:fc:42:
         17:ef:16:7a:35:15:41:c8:e6:cb:88:78:e7:da:73:98:18:22:
         61:97:0e:de:8d:53:f6:06:e8:92:92:31:a1:0b:b5:5e:38:33:
         1e:ce:fa:31:bc:5c:b9:b2:e8:f8:fa:22:93:a2:e4:b2:ed:33:
         6e:57:65:26:1f:6a:5e:9a:b3:9f:75:00:3e:a6:70:ea:8f:e1:
         49:6c:5a:4e:14:03:1f:54:28:b0:70:57:e7:a0:6c:6f:c2:84:
         b7:c7:00:07:14:90:14:e4:06:eb:4d:91:40:af:e2:34:44:96:
         56:ac:cb:0c:26:e7:f9:e1:67:7f:ea:07:68:46:e6:0f:c3:9e:
         63:98:31:31:c3:32:76:fa:58:67:79:fa:52:b2:6f:16:fd:c6:
         4c:f4:d1:b1:97:f0:05:44:c3:34:6d:c5:e5:7f:c0:ab:17:51:
         59:30:53:e2:01:86:a2:b1:b8:ad:b5:f3:78:56:02:37:2c:c1:
         3f:76:45:06:a9:6c:80:0d:f4:3d:af:b6:ab:db:f2:5a:69:cb:
         a2:d2:ed:60:c1:93:6b:94:3f:da:25:9d:7f:53:f7:ee:55:d4:
         b5:a1:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:34 2026 by rpki-client