Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
File:                     F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json)
Hash identifier:          ZBKnibHhvVrjB5XWPrWRDiPxePloatx1uwDUJ9HNITQ=
Subject key identifier:   D3:30:9B:81:27:F7:DB:D3:10:77:6B:BE:E2:92:7F:44:97:BC:3A:77
Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A
Certificate issuer:       /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
Certificate serial:       334697D1615B7D7C2A1F3254455CEA8C5E675873
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
Manifest number:          AE
Signing time:             Sun 14 Jun 2026 01:02:31 +0000
Manifest this update:     Sun 14 Jun 2026 00:57:31 +0000
Manifest next update:     Mon 15 Jun 2026 03:34:31 +0000
Files and hashes:         1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: iK5SqaXyx0jVKGOp7F2XkIwwzAEizBAnxTTI2N4VNvU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:97:d1:61:5b:7d:7c:2a:1f:32:54:45:5c:ea:8c:5e:67:58:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
        Validity
            Not Before: Jun 14 00:57:31 2026 GMT
            Not After : Jun 15 03:34:31 2026 GMT
        Subject: CN=D3309B8127F7DBD310776BBEE2927F4497BC3A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:5f:a4:78:1a:ad:d1:f9:87:1d:f7:3e:af:
                    45:51:e0:5f:38:ff:f1:b6:c9:97:2d:3c:23:a0:cc:
                    c1:bf:b6:c4:38:24:73:24:98:65:18:7b:21:c9:65:
                    1c:4d:cb:b9:96:47:b2:b1:87:22:17:97:bd:b8:98:
                    dd:d0:42:8a:ae:c0:11:7b:48:73:d0:4a:47:eb:27:
                    3b:3e:b3:d6:d3:b7:c7:6a:c8:63:e6:1b:d3:ab:6e:
                    69:d1:46:69:1b:e9:54:8b:d3:9c:06:20:da:90:ed:
                    20:07:13:b5:53:37:81:57:29:aa:b4:e9:c2:f3:02:
                    a7:27:75:9c:32:05:7d:18:63:0c:e7:cf:85:f7:3c:
                    66:98:e9:65:d4:29:4d:01:3d:fa:43:5e:38:a6:13:
                    02:57:ab:cb:d5:a5:7c:9b:40:27:f5:f6:d0:71:5b:
                    ac:7e:75:e6:e1:b1:25:b5:59:7f:98:7c:c2:99:ad:
                    bb:84:80:de:d9:cb:ca:de:80:fb:4c:4c:78:b5:ab:
                    86:f8:0f:0a:f6:1e:30:08:f3:55:03:2b:53:c4:37:
                    7d:2f:f1:2b:a2:9a:d4:43:0c:c9:ef:23:bf:89:47:
                    41:80:cf:2e:d5:76:fe:70:d7:70:aa:21:5e:b6:92:
                    c7:f9:7f:cf:c9:37:ec:b2:25:79:9d:76:d1:18:83:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:9B:81:27:F7:DB:D3:10:77:6B:BE:E2:92:7F:44:97:BC:3A:77
            X509v3 Authority Key Identifier:
                keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:17:79:64:ae:9c:4a:9c:7e:42:c2:a2:26:fc:3c:9e:7e:
         12:c4:96:2a:19:aa:17:e9:97:2d:3c:5b:97:1e:a6:d3:5a:fa:
         ab:6a:47:ec:56:b3:30:ee:b4:27:47:9d:80:68:25:f5:6c:b8:
         37:e1:37:24:7a:b6:40:4f:56:7c:4e:9c:3a:09:5d:7f:85:f9:
         92:43:65:78:9c:40:6f:6b:49:e3:85:e5:5b:10:56:66:c7:a0:
         ad:70:7a:e8:eb:82:1e:1d:7b:1a:03:c9:d5:36:8e:6c:35:91:
         73:75:50:6a:70:c2:6b:41:6c:75:ec:1a:8a:e1:42:5d:6e:e3:
         43:fd:f6:f0:7f:f8:54:cd:cb:d7:03:75:d7:60:30:c8:81:c0:
         04:aa:6e:c2:24:98:10:bb:67:2f:82:0a:2b:63:5a:bf:bb:8f:
         e8:f2:f5:ab:21:e1:50:75:cd:57:91:79:cb:12:b7:f9:7a:f3:
         de:35:07:01:9d:1c:8b:35:a7:6d:2b:37:8a:2e:b8:3e:77:9f:
         72:70:f1:f0:10:ab:bc:46:21:e1:c8:ba:1b:93:06:7e:26:0a:
         1b:b5:5b:0b:cc:e2:de:06:5b:7d:25:f7:f4:f9:0a:07:31:3f:
         7a:01:92:d9:64:d1:a9:23:0a:35:7e:96:ca:f3:1f:02:a1:a4:
         1e:33:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:42 2026 by rpki-client