Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File:                     F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier:          dd/jJFhMyoAKq8hRml76t+LPRKOI3U1k52AaPa5Z9CQ=
Subject key identifier:   0B:6D:89:16:BF:A0:81:AA:6F:9A:9F:4E:C1:E1:29:77:BC:79:45:CC
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer:       /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial:       733D846BE0395ECB83186C9C39E1FCB47828FFAA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number:          F3
Signing time:             Wed 29 Jul 2026 16:49:48 +0000
Manifest this update:     Wed 29 Jul 2026 16:44:48 +0000
Manifest next update:     Thu 30 Jul 2026 17:22:48 +0000
Files and hashes:         1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: ECdA7puTl0nZift5zs2+YNW4g/Jx011ms03lDSVwvys=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 17:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:84:6b:e0:39:5e:cb:83:18:6c:9c:39:e1:fc:b4:78:28:ff:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
        Validity
            Not Before: Jul 29 16:44:48 2026 GMT
            Not After : Jul 30 17:22:48 2026 GMT
        Subject: CN=0B6D8916BFA081AA6F9A9F4EC1E12977BC7945CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:a6:b9:f2:0f:3c:08:87:ae:ae:ab:50:f9:
                    32:d9:39:55:e3:d3:5b:ac:87:ca:21:3c:f2:c6:4e:
                    40:a1:7c:0d:5b:8b:3b:83:67:f2:d5:d7:b9:aa:63:
                    fc:77:e1:b5:6d:ca:44:f4:64:c6:9f:cb:0f:46:9d:
                    34:2a:53:f2:64:70:93:d8:4e:bd:99:0c:3b:1a:c4:
                    50:09:73:2d:ce:fd:e0:27:3b:89:f6:de:70:6f:3a:
                    46:fa:e8:9d:e3:1e:28:92:ad:fd:12:19:ad:f5:88:
                    59:4b:4c:08:64:33:3b:5f:df:d1:ef:9c:82:c5:6d:
                    f3:c8:c4:35:e3:15:4a:cd:14:1c:74:72:32:02:fa:
                    08:22:a4:c6:d5:d4:94:7a:2c:91:99:c9:7b:1d:29:
                    e1:9e:d0:31:fb:c1:f3:8d:a4:4c:f5:0f:10:3d:e5:
                    ff:a0:57:97:04:91:14:23:2c:19:7c:62:04:ac:38:
                    a1:a3:16:b2:3a:32:53:ed:d2:a6:6f:f6:04:5f:0c:
                    6d:2f:bb:20:74:3c:cc:e6:0c:b0:e5:eb:49:5d:0d:
                    ed:1e:ab:41:ed:ba:30:5e:aa:b5:c0:be:c5:28:f5:
                    28:a2:14:4f:bb:8e:22:03:02:18:93:88:7a:04:19:
                    22:a4:0f:2d:5e:13:1c:47:5a:03:97:04:81:18:47:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:89:16:BF:A0:81:AA:6F:9A:9F:4E:C1:E1:29:77:BC:79:45:CC
            X509v3 Authority Key Identifier:
                keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:43:f8:11:0b:12:da:61:e5:51:85:98:a3:ba:54:91:e6:
         be:98:34:41:b7:a5:66:f0:8c:52:d4:b8:74:01:e4:a8:fb:2f:
         9e:95:e8:c0:49:ec:9b:c4:fb:d0:20:92:05:93:5c:c2:7d:43:
         25:8b:76:a2:64:5e:63:23:f7:5a:ae:a4:6a:ac:51:31:e0:08:
         b9:e5:b0:9e:38:cf:ef:b1:04:01:55:69:e8:58:35:6c:fb:0e:
         4a:cb:86:7d:b6:31:54:03:fd:2e:34:a5:10:20:0c:a6:3c:11:
         58:91:b6:31:36:ef:a3:6b:6e:41:ab:75:fb:f4:3c:63:a7:08:
         75:91:2f:01:a3:04:9c:47:ce:ba:b3:d4:43:60:ac:97:9a:ac:
         5f:85:a8:1c:37:be:6a:3f:e6:dd:2e:2a:0a:c8:26:7f:45:a3:
         ea:27:31:0e:69:fd:a7:1b:82:ae:23:ab:f1:87:65:86:3f:84:
         b4:69:30:5c:32:a6:50:76:05:42:53:47:4e:16:9c:87:30:2f:
         d8:05:53:dd:2c:04:32:64:b9:72:db:16:fe:46:6a:15:1e:24:
         6b:fb:53:41:b3:a7:eb:96:e3:e3:ab:fa:80:e0:e2:80:8a:68:
         53:0a:3a:61:54:cf:e1:bc:58:0e:2d:9c:cf:1d:44:fc:69:df:
         4c:70:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:39 2026 by rpki-client