Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File:                     F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier:          sod7pqZcitXYkEeRy1ocQTVxkwbJ47EivF/BPxO7/9k=
Subject key identifier:   07:09:64:24:AE:1B:48:4B:76:F2:A0:C9:A7:64:7E:E2:D1:E8:8D:8F
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer:       /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial:       58D3487D81F074E8A919C8D4686D201EEC15F0F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number:          6B
Signing time:             Fri 17 Apr 2026 21:04:48 +0000
Manifest this update:     Fri 17 Apr 2026 20:59:48 +0000
Manifest next update:     Sat 18 Apr 2026 21:19:48 +0000
Files and hashes:         1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: vVf9R6ursTWsmIscc+hsx2jywGY1yu3TLgJXD8Edaf0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d3:48:7d:81:f0:74:e8:a9:19:c8:d4:68:6d:20:1e:ec:15:f0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
        Validity
            Not Before: Apr 17 20:59:48 2026 GMT
            Not After : Apr 18 21:19:48 2026 GMT
        Subject: CN=07096424AE1B484B76F2A0C9A7647EE2D1E88D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:de:7e:aa:d9:86:cb:ba:8b:7f:a4:ac:6c:
                    6c:25:d7:43:c9:ad:b5:2b:15:80:ae:87:4f:11:67:
                    8e:82:77:9b:db:0b:e0:64:8c:4a:a3:7a:aa:04:eb:
                    f2:ec:43:1f:aa:33:9d:54:2c:79:3f:a5:2a:f0:21:
                    35:8c:12:e9:e6:89:59:b6:e2:b8:6d:c5:09:86:c0:
                    52:09:34:c9:f0:63:52:c3:a6:8a:cd:84:cb:67:e4:
                    05:3d:d9:c0:98:4d:f6:7a:c3:65:6e:cc:05:a1:b1:
                    27:17:6b:3d:b4:48:9c:92:43:20:7e:80:c1:18:d1:
                    e2:fa:19:4e:8a:8e:5c:a6:cb:bf:6e:bc:48:a7:92:
                    d8:e1:11:28:99:fa:25:43:99:43:d8:a6:b7:2a:7a:
                    4f:d7:a5:44:04:05:db:43:a1:41:dd:70:b6:28:e3:
                    ed:1d:d7:d8:a7:4e:64:7d:3a:2b:1e:7b:a2:2f:7b:
                    0a:72:54:0a:ce:f2:82:05:ae:12:f7:13:21:de:b3:
                    7a:bf:9d:c0:21:e3:97:a4:5e:3a:c3:e2:23:ee:00:
                    f5:9e:13:07:a7:7d:13:0c:03:eb:1e:29:52:dc:c3:
                    06:c8:5b:47:32:8e:6b:3b:73:b4:10:2b:db:bb:b7:
                    0c:19:33:c2:ec:92:79:ae:ac:e1:65:cf:88:3e:82:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:64:24:AE:1B:48:4B:76:F2:A0:C9:A7:64:7E:E2:D1:E8:8D:8F
            X509v3 Authority Key Identifier:
                keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:b3:f7:b5:14:3f:e7:d7:4f:01:e8:d9:06:98:f8:cb:5b:
         ee:02:c5:0d:61:bb:7d:0a:35:4c:20:1d:6a:99:64:1c:22:9a:
         4f:6b:60:78:da:98:b0:b7:0a:db:58:cc:82:37:25:5c:6f:cb:
         b4:72:7d:ba:a7:09:6c:a4:a1:21:b3:a2:ef:d7:c5:59:14:ab:
         26:9c:2c:60:75:46:b0:fc:2b:15:23:c8:ec:1d:2e:11:8f:71:
         98:58:28:7b:a5:89:c7:0f:1c:42:eb:1a:d7:70:95:94:58:18:
         d5:a1:da:46:b0:57:71:9d:3f:2e:9d:60:54:f4:cb:32:55:81:
         a0:85:ed:f4:99:84:3a:0f:ce:a8:75:a8:7c:14:61:b0:6b:7c:
         c3:5a:93:8f:34:f4:9e:1e:d3:44:81:0d:54:a1:d9:65:4f:f7:
         c8:4b:2b:5d:0b:aa:ac:38:ac:85:82:49:24:37:49:22:ba:f8:
         63:36:ca:bc:85:ba:35:80:00:d8:d9:11:1d:f7:6c:21:f8:c8:
         c8:84:d4:db:cc:79:00:ab:74:39:fb:da:19:6e:04:68:b3:5e:
         b6:c6:d6:45:a7:f6:cb:82:2f:d3:bc:3c:b2:73:44:bc:77:ea:
         f3:e5:a0:81:18:c7:34:cb:70:5c:4b:83:e2:d0:f3:83:2b:7e:
         72:09:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:31 2026 by rpki-client