Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          N7cZMgJ2O2FV3k0rsS8RCUiUuopB4e/kpsyRURLY2p8=
Subject key identifier:   7B:EC:D3:BD:3F:64:97:AE:D8:70:E1:2A:70:11:EE:A4:2F:9E:53:CE
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       6ED690238B6C6DCC3982680032E0E6F11DB47E3A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          44
Signing time:             Fri 17 Apr 2026 02:54:39 +0000
Manifest this update:     Fri 17 Apr 2026 02:49:39 +0000
Manifest next update:     Sat 18 Apr 2026 03:41:39 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: l7Lb7E7bDgTmNjeM5tTHoOL3jnZKXFURVqNdB8Q5ls8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d6:90:23:8b:6c:6d:cc:39:82:68:00:32:e0:e6:f1:1d:b4:7e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: Apr 17 02:49:39 2026 GMT
            Not After : Apr 18 03:41:39 2026 GMT
        Subject: CN=7BECD3BD3F6497AED870E12A7011EEA42F9E53CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:e8:ae:ba:5a:6c:e4:bd:b9:a5:f2:f0:22:
                    22:ab:95:51:4a:41:94:d0:2a:77:c4:12:14:fa:6e:
                    57:e3:cd:85:49:8d:f6:6b:c1:d3:e9:14:3f:ee:c4:
                    44:d7:5b:a9:be:ba:9b:70:4b:0d:7a:4f:08:fc:4b:
                    7e:29:b3:a3:12:81:00:9c:7f:34:26:bb:d9:c6:2c:
                    40:dc:9e:a7:90:ff:4c:53:23:34:0b:5e:2f:c1:98:
                    a4:c7:aa:2e:49:d0:2a:70:62:69:01:cc:1e:d6:2b:
                    fe:fa:1c:1a:fa:08:6f:15:71:eb:5a:12:bf:88:de:
                    5c:73:e0:20:82:e8:a1:fd:d2:fc:38:58:f7:99:dd:
                    6f:c1:17:a0:45:1a:f8:17:3d:79:a9:9c:cf:92:c5:
                    f1:91:80:26:bd:db:ce:a3:f0:11:00:3f:7f:ff:7c:
                    28:83:50:60:af:cb:64:52:aa:86:0e:aa:a8:a5:15:
                    c4:5e:7f:5d:4a:f3:6e:c2:b4:67:63:d8:c8:9e:ae:
                    7a:4f:d4:ba:1e:6d:c9:37:cb:36:cd:e9:e4:f7:15:
                    b3:9d:64:da:d6:48:ac:88:89:fe:90:6e:c0:ae:84:
                    bb:4a:ea:88:b1:15:73:be:c0:5b:a3:23:94:b5:5e:
                    1d:28:d4:33:d3:d9:b9:8a:82:94:01:6b:6b:71:e2:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:D3:BD:3F:64:97:AE:D8:70:E1:2A:70:11:EE:A4:2F:9E:53:CE
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:35:2f:21:a7:61:0c:19:7b:d3:95:f1:54:43:bc:fb:93:8b:
         cd:4b:fc:84:81:c2:60:e0:7b:ac:32:94:4b:3f:15:e3:10:a8:
         b3:b2:c1:cd:26:25:2b:40:7b:b7:35:d6:e4:ea:4d:ec:46:67:
         38:66:89:10:68:0c:7d:23:05:22:58:ff:ef:19:71:41:21:30:
         ca:01:f9:50:de:9f:4d:f7:94:17:5f:a2:51:ea:c9:81:8c:ca:
         84:f8:d8:48:ad:97:a0:c9:51:d0:e1:74:fa:64:3a:e6:3d:b2:
         b2:2c:02:73:04:ae:a9:37:43:0f:da:58:d3:aa:88:bb:8e:9f:
         94:b7:b5:73:89:43:48:d5:ad:e5:98:a8:60:ac:6b:6f:a8:2c:
         3c:74:85:53:5a:35:99:e9:e8:b6:b9:b8:5a:72:5e:7c:9a:38:
         0e:34:30:5c:79:23:1c:60:4d:23:8a:38:76:01:7b:70:0d:63:
         e8:e0:31:39:da:1a:a3:a8:97:04:bc:c4:6b:7f:c1:e4:a7:6c:
         67:49:fc:cd:2e:27:16:56:76:c6:bc:f5:32:b2:06:65:62:d7:
         5e:f5:85:fd:1d:46:7a:0e:48:84:6d:48:49:61:eb:32:98:8a:
         0b:f3:e0:8a:ff:ea:7b:13:12:ff:5b:37:e3:97:ff:b1:e9:45:
         bb:0d:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:25 2026 by rpki-client