Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File:                     320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier:          oMCiEwxjYusBmCRR3ZcY53xTRrjjdE933hWFMNbdOXg=
Subject key identifier:   DB:7B:0A:0A:03:27:1E:11:8C:AA:90:AA:B2:EB:8A:EC:1E:C2:E6:92
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       2F74E142C01B83E6833E728D9CFCA4CF5D7B53C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number:          18
Signing time:             Sat 13 Jun 2026 13:16:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:11:49 +0000
Manifest next update:     Sun 14 Jun 2026 16:27:49 +0000
Files and hashes:         1: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
                          2: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
                          3: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: Cobu5ZW496XKkBTWEl9I1/cWI+kypB35LlqMyT0+7kU=)
                          4: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
                          5: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
                          6: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
                          7: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
                          8: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
                          9: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
                          10: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
                          11: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
                          12: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:74:e1:42:c0:1b:83:e6:83:3e:72:8d:9c:fc:a4:cf:5d:7b:53:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: Jun 13 13:11:49 2026 GMT
            Not After : Jun 14 16:27:49 2026 GMT
        Subject: CN=DB7B0A0A03271E118CAA90AAB2EB8AEC1EC2E692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:7e:52:c0:af:a3:d6:fa:86:5b:b2:cd:32:
                    62:1b:67:9d:3d:04:f3:50:7d:05:26:89:07:b6:0f:
                    f0:d2:b4:1e:6b:db:4a:f9:cd:c2:c9:e3:f5:6a:da:
                    8f:d0:96:91:ce:9d:c2:01:57:e8:b4:69:37:30:bf:
                    38:d9:0c:ee:61:2a:27:49:3f:f9:06:7e:17:27:8c:
                    21:e0:c2:ff:1f:a1:4c:f3:84:bf:5c:cc:7f:e3:84:
                    94:80:05:05:94:d3:53:40:7d:79:76:5d:31:de:08:
                    3f:f8:d0:37:9e:f2:9b:78:93:4f:11:74:b3:80:ad:
                    e1:50:aa:b2:19:fe:8d:0a:a9:9f:20:a8:dc:98:d0:
                    ae:f4:59:4d:77:81:4a:8d:01:7b:5f:0a:2a:9f:84:
                    6c:a1:10:68:07:e2:fe:9e:bb:bc:d8:fb:d5:db:af:
                    f9:5a:6c:54:db:3f:83:dc:c9:64:05:e9:1a:d3:cb:
                    ba:95:ff:7f:75:36:7c:5a:0d:e1:be:d1:84:55:c0:
                    f7:8e:84:7e:13:a2:9b:06:d0:45:ef:5a:ec:0e:fd:
                    30:c2:8e:fd:e6:db:01:b9:bb:9e:b8:5c:ff:ca:8f:
                    60:40:60:43:f2:5d:0d:9b:4a:21:3f:14:d5:6d:bc:
                    da:c2:3d:a9:6a:4e:92:54:11:c4:dc:d4:f3:c7:2b:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7B:0A:0A:03:27:1E:11:8C:AA:90:AA:B2:EB:8A:EC:1E:C2:E6:92
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:dc:bd:89:e1:85:2f:d4:bb:d9:42:a1:f6:e2:63:0e:eb:
         88:4e:6b:27:15:35:8f:18:d1:6d:26:8b:b2:69:ed:59:dc:a7:
         a6:ce:8a:19:68:e7:0c:68:99:af:b9:8b:1e:46:11:d1:03:95:
         ca:0f:c5:49:b6:01:1d:52:36:3f:63:da:36:9e:7c:49:c7:e1:
         2e:3e:8f:61:55:26:5d:48:7a:0a:08:6d:b6:fa:aa:a7:6c:28:
         9e:ef:fe:d4:bd:33:d6:66:ad:fa:15:af:5f:2c:61:26:ad:54:
         11:4f:7c:22:b9:b0:f2:16:7b:8c:e8:91:9b:d1:cf:b9:2b:ab:
         e3:71:ab:22:13:49:b3:cd:bd:7b:3c:95:86:7e:44:aa:ec:73:
         c6:3b:d7:26:2e:5d:13:a2:f1:75:6f:3c:17:86:2e:b6:68:9e:
         7c:54:31:d8:b4:d7:03:46:a3:10:4f:c8:ac:cd:46:e6:4d:44:
         3f:f1:f1:6f:1f:4f:cb:05:2a:1c:61:14:97:09:50:fa:6c:81:
         af:d3:09:fe:bd:5f:1e:48:8b:e0:f2:27:5a:13:83:84:dd:ab:
         c9:c7:b9:97:d4:82:07:b8:cb:6f:c3:e7:0a:4c:2f:39:27:43:
         a7:4b:1a:20:27:c3:2e:53:75:dd:4e:d2:ff:6c:b0:3e:64:4f:
         91:f2:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:07 2026 by rpki-client