Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File:                     97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier:          iHDX7VKiyGE0hUomnDD1PtzU+DfwU+hTNAonzKJyIvQ=
Subject key identifier:   C7:88:B0:95:01:73:E6:51:E9:BA:26:AC:86:3E:E2:02:FA:2F:AB:C4
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer:       /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial:       4176093D4B6B87848070558A91064464F652031B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number:          38
Signing time:             Mon 02 Mar 2026 00:43:16 +0000
Manifest this update:     Mon 02 Mar 2026 00:38:16 +0000
Manifest next update:     Tue 03 Mar 2026 04:36:16 +0000
Files and hashes:         1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: gyVcLN94RAm/rF6/pf/4SXIjmvKkg0fjXDCMtEmUhfI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:76:09:3d:4b:6b:87:84:80:70:55:8a:91:06:44:64:f6:52:03:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
        Validity
            Not Before: Mar  2 00:38:16 2026 GMT
            Not After : Mar  3 04:36:16 2026 GMT
        Subject: CN=C788B0950173E651E9BA26AC863EE202FA2FABC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:b2:eb:f5:fe:d4:58:33:45:30:09:3f:af:
                    cb:5c:55:e6:8a:ed:5b:53:c2:98:a0:49:52:ba:eb:
                    54:b4:2f:5b:15:39:79:be:7d:5b:1d:31:6b:c8:53:
                    5c:29:6c:c2:69:d4:4c:32:41:1e:2d:97:24:04:0f:
                    58:84:a7:15:69:9d:83:07:4e:98:f2:f9:6b:f6:4e:
                    9b:01:b4:7f:56:80:66:ef:df:3f:ff:e2:8f:23:78:
                    7e:2a:3e:c1:77:c0:0f:6a:dc:cb:e0:ae:43:c7:a1:
                    92:d8:83:a1:9f:d0:4c:77:b2:39:e7:48:3d:2e:d7:
                    2d:0d:6f:a5:24:7e:b2:68:3d:5a:69:6b:9f:5e:4a:
                    96:fc:c0:8b:c5:7c:64:08:56:b9:c6:4a:8b:e3:d4:
                    0f:a8:15:ad:7f:4d:6d:7f:d8:e4:1e:c7:7d:68:9c:
                    5c:f2:ce:24:8f:46:e1:a4:20:48:5f:0b:44:c1:f8:
                    59:97:85:55:d6:12:4d:35:18:fa:ae:09:e2:47:6c:
                    b2:d9:ee:d2:5c:f4:00:8e:b4:0e:c8:9b:78:0e:cd:
                    2e:c7:d7:ff:74:4e:aa:ec:d0:72:70:e0:e7:ba:c4:
                    ef:8f:6a:5e:4b:51:47:fc:9c:a8:5b:e0:09:c7:c4:
                    8f:48:5b:50:45:fd:76:eb:aa:cc:b6:50:3d:ab:4c:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:88:B0:95:01:73:E6:51:E9:BA:26:AC:86:3E:E2:02:FA:2F:AB:C4
            X509v3 Authority Key Identifier:
                keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:4f:1a:19:94:c1:fd:ac:db:ad:e0:93:e3:45:df:27:0c:
         30:9c:d0:8e:dc:9c:92:58:42:d3:a9:94:9b:e1:34:37:0e:6d:
         bd:ed:c1:46:63:ea:79:62:95:5a:e9:13:e1:88:8d:22:7c:f3:
         61:8e:cb:db:d5:58:ca:ca:1e:e2:0b:06:69:12:0a:f9:2d:b5:
         b9:da:d3:a2:e9:66:db:fb:ed:61:e6:48:ff:38:a5:0f:da:bd:
         c3:a2:13:d2:96:8a:da:48:02:ec:2a:fa:d8:8a:98:40:0a:f2:
         54:cd:0a:21:e4:3b:a3:3d:b4:e9:8d:bb:f5:d8:61:6a:c0:24:
         fa:3c:40:96:e8:07:d8:c8:5b:57:28:62:28:c0:64:3d:a5:1d:
         f8:17:2a:59:84:b5:2f:7e:d2:9a:bd:08:c6:ae:47:db:44:15:
         86:14:07:f9:f0:05:ca:e3:82:7d:ca:91:2b:90:fe:4d:eb:92:
         b0:5b:45:34:5f:b0:8b:38:5d:df:3d:df:b1:e4:a5:9b:fa:f2:
         f9:55:b1:fd:d1:68:75:35:b3:30:9d:1b:ab:e2:4d:e0:bc:a3:
         6f:6a:89:1b:2d:80:60:5c:04:0c:fe:44:cc:ca:e2:8b:2f:66:
         2c:92:ce:c1:1a:3d:56:34:f1:91:5b:91:ce:44:ce:81:85:62:
         ea:b9:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:28:38 2026 by rpki-client