Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
File:                     8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json)
Hash identifier:          q8xuzh7Vsj6i3rwhDngmZx0U/MvEHbYObS+DaeVo5u0=
Subject key identifier:   9A:EA:AB:79:CE:4E:27:B4:5D:2F:F5:86:73:64:07:C3:95:13:75:D0
Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6
Certificate issuer:       /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
Certificate serial:       417FB786CB4DCCD8E7E73E8607C951DD8BD4D139
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
Manifest number:          C3
Signing time:             Sun 14 Jun 2026 01:42:35 +0000
Manifest this update:     Sun 14 Jun 2026 01:37:35 +0000
Manifest next update:     Mon 15 Jun 2026 04:35:35 +0000
Files and hashes:         1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: FAD3lWrDpN4bR67CfcOVUWfa7ij8chTI2SC+5X3pO0I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7f:b7:86:cb:4d:cc:d8:e7:e7:3e:86:07:c9:51:dd:8b:d4:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
        Validity
            Not Before: Jun 14 01:37:35 2026 GMT
            Not After : Jun 15 04:35:35 2026 GMT
        Subject: CN=9AEAAB79CE4E27B45D2FF586736407C3951375D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:30:92:e4:cf:fe:fc:1c:2b:fe:8a:f3:a8:
                    f8:21:de:ca:97:a3:ee:7e:f9:1f:6c:6c:11:95:c1:
                    37:b0:d0:70:03:b9:35:db:90:7b:54:8e:64:7f:00:
                    5f:1e:2a:bc:00:ab:33:0b:22:29:d0:40:8c:5b:69:
                    cf:cd:e4:74:65:16:e6:85:cf:66:62:05:ce:16:e4:
                    8a:0c:3e:c6:ae:66:02:11:d9:f9:14:18:cb:06:5e:
                    4f:90:04:3d:9f:46:f3:4f:f6:69:82:be:85:69:7b:
                    38:ed:24:85:6a:b7:0c:ba:56:ad:96:7b:41:3d:09:
                    61:c2:ea:34:a6:13:53:f9:a7:b2:33:f1:c2:0e:23:
                    22:2d:a6:f0:8c:e7:13:be:6b:32:f1:f9:35:f2:c7:
                    23:e7:22:ec:71:2c:3e:25:ab:bb:f9:5e:d4:39:27:
                    f1:f8:13:e1:63:9f:20:25:ae:35:9e:c7:df:de:60:
                    5c:04:42:78:56:6e:9d:f1:d0:9e:6f:61:34:a5:0e:
                    fa:a5:41:1f:fd:8b:36:e2:17:67:af:88:63:4b:38:
                    c5:07:fc:ef:d3:ca:d8:2b:9a:87:fa:10:d8:aa:8b:
                    94:8e:d3:18:59:14:18:95:65:c0:ab:24:b9:fe:84:
                    20:7a:d2:5b:63:a6:64:5c:26:9b:bb:fb:8e:a4:0d:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:AB:79:CE:4E:27:B4:5D:2F:F5:86:73:64:07:C3:95:13:75:D0
            X509v3 Authority Key Identifier:
                keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:1c:bf:e7:f9:65:29:d5:bf:a3:89:47:84:22:3e:c6:93:
         6a:ee:70:b9:c2:83:b3:b6:b8:0b:0a:82:b2:02:0c:f9:20:a5:
         fe:e8:7f:0f:8b:13:95:bc:ff:e7:1c:c5:70:90:61:2f:cf:66:
         48:ed:11:7a:09:fd:e8:13:ec:31:f3:e1:e4:06:12:be:78:cb:
         bd:de:8b:9b:90:ca:d3:16:aa:1a:6b:e1:4b:2d:c5:9b:a8:20:
         2f:b5:83:5a:71:62:46:b0:bb:4c:de:8a:92:4b:01:1b:00:e9:
         a2:4d:07:19:ec:ae:45:27:ce:9a:37:bf:42:00:86:22:8a:f3:
         6a:7d:ea:13:80:8d:9d:17:68:56:11:e5:01:1c:35:2a:b2:ab:
         90:cb:03:23:6c:a9:2d:df:b6:cb:88:90:01:cb:61:52:c1:6c:
         c2:ad:20:0a:b7:ac:29:24:70:c5:a4:62:54:54:a6:d3:03:fd:
         29:e6:f3:f7:9f:85:5c:94:cb:e5:58:b0:4e:52:64:49:38:7f:
         39:9c:e3:ea:58:32:b4:53:76:a1:ee:ac:76:21:c7:c4:a8:d6:
         00:d6:6f:55:c3:ef:3a:57:03:d7:cc:40:05:20:af:f9:98:6e:
         9f:15:70:be:0d:ba:f9:ba:c9:6a:38:d9:87:48:3f:d8:9c:10:
         1a:75:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:58:21 2026 by rpki-client