Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File:                     7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier:          sfgCLwNu1CuwbAz1T3NyPHw2krnPCsny/wwEn4VmxMw=
Subject key identifier:   D0:E3:10:96:CC:0B:3F:F9:D8:4A:2D:71:D9:7A:CB:3F:8E:CB:6A:09
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer:       /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial:       4ED7B2B14935802BCC4B13563AA14E038CADADEC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number:          34
Signing time:             Mon 02 Mar 2026 06:23:16 +0000
Manifest this update:     Mon 02 Mar 2026 06:18:16 +0000
Manifest next update:     Tue 03 Mar 2026 06:53:16 +0000
Files and hashes:         1: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: elpnDPjC0fw98fbPBVkciHwi04fc1x9GXTh+OUNAEHg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:b2:b1:49:35:80:2b:cc:4b:13:56:3a:a1:4e:03:8c:ad:ad:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Validity
            Not Before: Mar  2 06:18:16 2026 GMT
            Not After : Mar  3 06:53:16 2026 GMT
        Subject: CN=D0E31096CC0B3FF9D84A2D71D97ACB3F8ECB6A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:b4:88:8c:ca:79:1d:c6:41:2c:f7:a8:ba:
                    d7:d4:70:46:e4:8c:a3:c5:4f:66:9c:63:94:28:52:
                    47:e7:b1:fa:b6:39:a2:16:64:46:c6:f9:72:a8:eb:
                    55:9d:78:9c:74:93:c4:1f:74:04:5d:9f:4d:0a:49:
                    9b:16:5d:83:8e:94:99:56:7a:26:bf:62:1d:2c:43:
                    27:e5:77:42:2c:01:99:74:01:67:c2:e9:13:c0:9b:
                    21:d6:ee:32:34:58:50:3a:bb:62:49:8f:39:f8:25:
                    48:b4:60:bf:61:68:86:75:17:aa:1a:39:59:5c:df:
                    15:a6:a0:b7:af:c4:ee:59:8b:52:dd:c6:00:97:0a:
                    02:eb:9e:b2:9e:1c:33:7d:5d:5e:23:89:48:ee:79:
                    42:4e:b5:f9:91:1f:c6:06:03:2e:da:94:48:50:6f:
                    05:73:e1:69:c2:86:38:9b:e8:7f:e6:ef:f3:db:f5:
                    f5:52:cf:a3:a5:7d:04:7e:9e:0b:44:00:58:d6:9f:
                    2c:7b:34:84:dc:94:23:ef:37:72:40:c8:fc:b8:55:
                    10:cc:c9:19:5b:98:d1:ea:c9:e0:91:a4:ac:b3:28:
                    6b:6f:59:bf:51:88:f5:16:86:d9:c0:b4:81:a7:b8:
                    07:9d:a1:d1:64:cc:a0:b8:39:e2:59:a1:e9:5d:48:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:10:96:CC:0B:3F:F9:D8:4A:2D:71:D9:7A:CB:3F:8E:CB:6A:09
            X509v3 Authority Key Identifier:
                keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:80:3f:b5:57:41:8e:de:86:a9:fe:43:d6:66:25:55:f7:
         a6:f1:b5:07:c9:0d:a2:bc:27:e9:a6:b9:c8:06:f1:eb:24:7b:
         a9:11:18:af:86:93:02:a6:00:01:de:47:90:14:9e:a9:ea:d0:
         8b:dd:35:cc:8f:9a:d3:39:ad:4d:c3:e9:3b:9d:84:87:fe:a7:
         ee:bd:1d:7d:9e:78:99:c0:19:4f:e2:3e:a7:3d:a8:9a:ff:8c:
         04:4c:a3:d6:6c:ba:59:22:e9:3d:2d:d0:fd:10:c6:68:44:3c:
         64:4a:2d:61:b7:ef:a8:4e:e4:23:da:ca:8f:b6:05:8f:33:6d:
         19:e3:46:67:04:91:57:62:b4:90:99:4f:2e:e1:b7:6b:9b:0a:
         ea:fe:5f:60:9e:81:1f:4c:bd:98:8e:43:01:6c:34:6a:d7:7b:
         6f:95:f5:e3:c8:d3:c9:aa:01:6b:44:9b:63:fd:a0:42:af:3e:
         2d:4d:f4:af:d4:72:61:d0:85:a2:cc:f6:3a:97:46:dd:14:24:
         6f:b4:20:eb:d2:12:cb:6f:4f:b8:6a:17:eb:ce:4e:e0:cd:ca:
         fb:fe:a3:6e:6b:4d:ab:e6:2f:2d:4f:13:8d:74:fb:98:bf:4e:
         e3:df:eb:cb:09:13:6d:44:2c:ff:3d:80:6b:2b:04:d4:4e:89:
         48:d7:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:36 2026 by rpki-client