Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
File:                     AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json)
Hash identifier:          ZXEjirQoJJKNtuDwpMkPWHxpKLzVpz070FNEZYXOqdM=
Subject key identifier:   CB:CD:9F:A6:C7:14:AF:C4:F7:34:17:2E:4B:E5:5B:4F:94:DE:3E:35
Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26
Certificate issuer:       /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
Certificate serial:       41D98EC54742634F0A8AF23F2BD14C212076082D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
Manifest number:          FF
Signing time:             Wed 29 Jul 2026 15:44:44 +0000
Manifest this update:     Wed 29 Jul 2026 15:39:44 +0000
Manifest next update:     Thu 30 Jul 2026 16:09:44 +0000
Files and hashes:         1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: TVvVs72IUhw2tCgJgDad9jxJdtSWVIQTyRK8/CY+nBE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:8e:c5:47:42:63:4f:0a:8a:f2:3f:2b:d1:4c:21:20:76:08:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
        Validity
            Not Before: Jul 29 15:39:44 2026 GMT
            Not After : Jul 30 16:09:44 2026 GMT
        Subject: CN=CBCD9FA6C714AFC4F734172E4BE55B4F94DE3E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:38:8f:9e:6e:27:2d:80:40:0d:0f:e7:11:
                    ea:6d:04:ac:0b:a5:27:db:9b:b5:b6:9b:f8:8a:e1:
                    f7:85:38:fe:b5:83:02:65:02:18:4f:4d:57:7d:7c:
                    b9:c4:73:b7:fb:4a:89:dd:7f:d1:35:30:4a:e2:9b:
                    a8:19:07:a2:5d:2f:23:9c:4e:78:3a:83:ba:2a:c6:
                    16:c0:5e:bf:1f:82:3f:15:65:f6:30:8e:b9:82:a7:
                    d5:41:58:fb:0d:17:49:59:53:6d:f1:0b:f4:e4:b2:
                    3c:7c:39:70:2e:7b:16:08:9d:ef:c5:0b:d5:ed:14:
                    59:bc:b9:33:a1:de:61:dd:c8:49:8a:52:e2:b1:5b:
                    cd:38:2d:e4:18:a6:4e:9c:f5:3d:a9:99:17:68:1b:
                    c0:db:bb:e9:6a:fe:87:fd:a1:e9:b1:9c:d1:b3:9b:
                    73:4d:09:72:1a:79:1c:87:42:07:f8:83:a6:d8:83:
                    f9:e8:62:32:ac:6a:a4:c7:46:3f:7f:07:f6:2c:7d:
                    43:09:f6:76:33:41:f1:3a:54:87:22:28:70:48:0b:
                    55:82:c8:d7:41:f6:39:17:d6:f6:90:66:36:7e:47:
                    ac:ed:63:a9:c4:c2:a2:7b:97:76:04:95:57:49:6c:
                    89:f3:44:7d:b7:ab:82:27:cd:79:eb:a2:cf:e3:71:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:9F:A6:C7:14:AF:C4:F7:34:17:2E:4B:E5:5B:4F:94:DE:3E:35
            X509v3 Authority Key Identifier:
                keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:79:22:d0:8e:eb:ed:4b:a7:20:ea:2a:fa:9b:0a:74:32:74:
         0e:51:58:db:db:73:66:8a:3c:f2:55:b2:8b:d0:4f:80:1c:95:
         a1:21:b4:e0:de:db:68:4d:23:09:2e:fc:06:85:ae:c5:1e:12:
         57:ad:db:f8:e6:d5:32:da:7d:7f:ea:a2:1a:9f:a6:00:7b:f7:
         09:09:14:93:07:a9:fa:87:1a:27:48:ef:8a:5b:b0:28:b4:0a:
         08:1a:a3:72:16:48:62:88:3e:7a:fc:23:03:40:61:fc:88:0d:
         44:2d:36:03:f2:50:58:e8:51:5c:bd:43:f7:7a:fa:3a:87:bb:
         fb:c8:1e:bc:1a:a6:42:a8:c3:4f:d7:1b:88:98:62:ee:5e:8d:
         40:66:57:12:2d:ba:83:2c:00:9a:0e:b2:59:35:ed:6a:4a:45:
         ca:5a:f0:78:76:ed:92:f9:80:74:b4:e7:fc:52:95:ab:fa:d2:
         39:83:53:cd:ae:72:d7:d3:0d:8b:b1:9d:8a:0c:69:f2:d0:e0:
         c5:3f:be:65:41:76:8f:78:0c:a7:ea:d7:b8:c5:f1:ec:02:e2:
         ab:34:7c:6b:db:29:ce:93:48:6f:cc:fc:9f:4c:c9:51:7a:2c:
         e8:81:53:20:52:2d:d9:91:6f:f5:d5:43:b5:23:85:a9:c1:f3:
         a0:f0:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:02 2026 by rpki-client