Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File:                     D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier:          +RMpSsE1c04mxKeBZPM4PBnwnDL/g+8+5sULS8MaLck=
Subject key identifier:   C9:5F:41:C2:4E:FE:01:F4:5E:AC:ED:B0:D6:E4:20:60:9F:24:A9:0D
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer:       /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial:       7A78A60860DB365470FE8B686DF29F148A4E9B88
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number:          E4
Signing time:             Sat 13 Jun 2026 11:56:47 +0000
Manifest this update:     Sat 13 Jun 2026 11:51:47 +0000
Manifest next update:     Sun 14 Jun 2026 15:42:47 +0000
Files and hashes:         1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: TII3WTeRqyj4KnK2kx+oH3HyrkrfqpF7+cu6F59HGB0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:a6:08:60:db:36:54:70:fe:8b:68:6d:f2:9f:14:8a:4e:9b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
        Validity
            Not Before: Jun 13 11:51:47 2026 GMT
            Not After : Jun 14 15:42:47 2026 GMT
        Subject: CN=C95F41C24EFE01F45EACEDB0D6E420609F24A90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:2b:10:4f:11:de:c8:6c:73:d2:27:69:cf:
                    3e:8f:12:6f:dc:d3:46:e4:8f:bd:35:17:11:0d:5c:
                    c9:1e:43:0e:e5:65:37:0b:14:52:39:2a:84:a3:e1:
                    31:72:87:01:5a:5a:a9:f7:83:54:56:bc:80:34:7d:
                    87:e9:e5:e6:d5:f8:4b:3c:af:48:58:7a:4e:88:d4:
                    2b:04:71:ec:4d:41:4f:0d:d3:c3:eb:13:86:a2:19:
                    8f:2c:b5:51:f6:8e:e1:0a:24:7a:93:56:cc:63:61:
                    1d:2a:56:f1:66:33:3e:e9:d3:a2:2e:69:da:eb:ac:
                    ce:d4:8b:18:5b:a9:35:eb:ec:bd:d7:2e:ac:44:24:
                    f9:ab:3e:30:7e:4e:8b:f3:28:c2:f4:58:b7:62:77:
                    76:8c:95:e4:2f:2a:62:30:8e:c6:43:8c:57:04:0a:
                    1f:4f:7c:da:d6:3b:4f:cf:11:af:17:20:7c:b7:c1:
                    2c:b0:5e:31:59:4c:10:ee:be:8c:44:c7:a2:55:37:
                    65:2a:9f:e7:82:82:0c:a3:1d:1a:56:e1:2a:47:de:
                    88:19:28:08:81:2e:62:6a:79:84:c0:07:27:30:75:
                    88:e4:ca:14:00:cf:70:2a:a8:76:10:02:1f:da:f9:
                    5d:d6:e5:cb:fe:07:c1:cc:1d:9e:68:fe:48:5a:37:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5F:41:C2:4E:FE:01:F4:5E:AC:ED:B0:D6:E4:20:60:9F:24:A9:0D
            X509v3 Authority Key Identifier:
                keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:6f:95:f6:59:cd:93:da:45:6a:9f:32:34:21:80:75:cf:
         0e:f3:33:bc:bc:fa:97:ab:ef:9a:c6:b5:c3:9a:05:d0:cd:44:
         2c:9e:cc:de:95:0b:38:de:9e:e9:28:eb:69:73:9d:81:75:32:
         31:09:a6:c8:ba:ec:64:cd:aa:95:09:da:49:ea:1f:d5:76:04:
         42:17:b5:b5:cf:10:14:4b:63:d1:b3:98:63:01:15:b4:91:a1:
         1b:61:aa:96:11:32:6a:2c:14:cf:e6:ab:a6:aa:09:f1:dc:11:
         cc:a7:93:a1:49:90:58:7e:19:16:80:fe:51:84:da:17:aa:ec:
         78:3a:c6:0e:d6:5e:0b:b3:5e:bb:e4:8f:69:c9:9a:d9:07:d8:
         67:69:cd:d7:70:b6:25:f4:c5:4b:af:8a:3b:18:17:03:d1:cb:
         e7:6b:ec:b8:ab:cd:c0:f4:e0:ff:44:84:56:e4:f8:2d:74:17:
         7a:7d:89:ec:48:25:c6:2f:7e:27:77:00:ee:3e:df:92:41:a5:
         d6:bd:19:21:2d:3d:53:65:14:f5:9c:91:f5:b0:7a:aa:f9:98:
         b9:5d:9e:83:c6:05:f5:ac:fd:eb:1e:ba:0f:42:79:e6:e9:c3:
         59:8d:49:f5:20:65:c3:29:8e:5a:72:f1:c7:3a:eb:b1:1c:a7:
         a0:d8:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:07 2026 by rpki-client