Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File:                     718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier:          NLtxudVeg8gL8I/V5rcp+IaLijrFPtMDD6Vp0EXFTMw=
Subject key identifier:   EE:A8:62:57:98:61:CE:E9:1F:7C:60:7E:8A:E3:19:5A:32:FD:F9:C4
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       7F69FAD1219BC93D9B8FBD8FBDD8F03ECB6599CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number:          17
Signing time:             Sat 13 Jun 2026 19:52:13 +0000
Manifest this update:     Sat 13 Jun 2026 19:47:13 +0000
Manifest next update:     Sun 14 Jun 2026 20:30:13 +0000
Files and hashes:         1: 3231392e38332e3136382e302f32342d3234203d3e20313430323933.roa (hash: MmDbQB2VRSfiaD9xAvUAY28vAVaMoO2ogK6dCHUf/Ok=)
                          2: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: jzOBv3e+jguQKBeayh+BrHWSz2VyEHsmCJMf+E/9jxQ=)
                          3: 3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa (hash: 1YX+Iyv65ITm5/5IT22wrDzCHtuFcomRyNDxfKqdzx4=)
                          4: 3231392e38332e3138392e302f32342d3234203d3e20313430323933.roa (hash: uUXxe2oubP/XIqFRtOFAD2eSzNFzbuk/E3yzZzNqEF4=)
                          5: 3231392e38332e3137322e302f32342d3234203d3e20313430323933.roa (hash: f7n/uTJ1F+r1X4JAogOTJzYfN44+M+FFMOy6g9Zroto=)
                          6: 3231392e38332e3138382e302f32342d3234203d3e20313430323933.roa (hash: UARyymAfIDpy1ZPBQsVU1R3OSEyjaA0vvn5sxjgro1g=)
                          7: 3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa (hash: jr7jZ0peykfNX1djP7lYR6B63OpsiY99wvS1Gas/a7o=)
                          8: 3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa (hash: K+/yFwMvpUQXTRJBHOyhdN+YxG9U4N0OdNDEOURyx8U=)
                          9: 3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa (hash: distAruWwJV8Z6b4BmZuBNQpPxsHf8vOHF4Agw+jkIQ=)
                          10: 3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa (hash: sGrrcIk3afJ9E7DLvszkTbNTabO8r22Dvgg+QO5PoTY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:fa:d1:21:9b:c9:3d:9b:8f:bd:8f:bd:d8:f0:3e:cb:65:99:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun 13 19:47:13 2026 GMT
            Not After : Jun 14 20:30:13 2026 GMT
        Subject: CN=EEA862579861CEE91F7C607E8AE3195A32FDF9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:eb:78:0c:25:f2:d0:b7:39:19:cf:c8:e3:c0:
                    d3:a5:2f:3b:4c:1f:80:38:d2:e9:7f:d3:13:94:dc:
                    30:cd:97:d5:e3:bb:e2:d0:5e:45:a4:44:86:da:6d:
                    36:0f:44:ec:9b:99:02:43:53:65:07:8b:5b:ba:c2:
                    4b:d7:0f:24:f6:b5:ad:a3:d9:9b:52:4a:49:7a:6f:
                    5b:a2:ec:13:21:c1:36:e9:c5:c9:e9:db:dd:77:20:
                    47:4c:eb:09:f4:ad:96:ac:6f:93:99:f4:a1:47:8b:
                    b2:61:88:04:66:dd:b4:6b:ff:1c:f9:2c:0e:02:13:
                    f2:08:7a:1d:b1:f8:8a:71:37:83:a6:8e:a0:2e:14:
                    f8:68:01:ff:c4:32:73:a1:bf:7b:8d:63:48:86:05:
                    10:11:7d:4d:8e:5e:e0:47:d0:fe:c7:66:7a:39:9f:
                    b2:ee:de:6a:ba:da:b7:74:ef:cb:36:fa:8f:a9:6b:
                    89:80:14:77:71:56:36:dd:47:a7:e8:a4:9b:1f:21:
                    3f:b1:88:6c:7d:e5:ac:7f:1c:0e:2f:cd:b9:d2:ff:
                    15:8c:79:85:34:9e:80:7c:58:63:52:18:e8:79:42:
                    28:82:a2:df:d0:17:d2:f8:5d:9e:fb:71:4f:6a:11:
                    98:bd:79:46:fb:a6:9a:79:24:54:8c:d2:ae:fd:c0:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A8:62:57:98:61:CE:E9:1F:7C:60:7E:8A:E3:19:5A:32:FD:F9:C4
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:37:13:ca:09:e4:0c:20:47:c6:b9:e3:e6:43:10:a3:de:
         97:df:5e:b9:37:7b:54:d5:2f:33:27:1f:cf:6a:fb:75:2d:83:
         a2:b1:da:3f:b4:bc:ea:68:9d:27:50:7e:bd:8c:97:ec:19:20:
         6b:e3:ef:51:c4:d4:20:64:7f:50:ae:fa:97:f5:be:16:08:2b:
         85:ea:fa:aa:35:64:1e:24:f3:de:13:ea:6f:e6:ad:8b:c5:bd:
         0f:ca:51:c0:72:1c:a0:fc:90:79:57:2c:32:60:d0:0f:39:5a:
         f0:ac:e5:fa:3c:f8:a2:78:59:c1:67:85:07:a2:df:82:b4:cd:
         4c:6f:97:a1:a7:1d:da:3c:0a:b4:ae:04:86:77:5d:35:d4:32:
         9e:d1:e0:5e:7a:45:df:6c:2c:e5:78:51:04:9e:a8:fa:57:dc:
         93:0e:e6:bb:78:ca:6b:9d:b0:9c:ad:6b:c9:bf:bb:49:71:a9:
         82:4e:a2:d2:f7:47:3a:0c:69:09:e6:e2:b3:2c:11:e9:18:3f:
         d0:3a:57:ca:ba:55:f7:03:24:43:11:8a:25:e6:6d:69:57:94:
         bb:fb:d0:1a:ff:ed:89:4a:92:75:b3:f1:eb:4e:f3:51:c4:87:
         2d:b7:f5:2d:cb:fc:33:98:ee:c7:29:e3:c3:6a:f0:75:cb:45:
         73:54:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:16 2026 by rpki-client