Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          9nRBOLV5RwJ44YjvbioGtivEAB0JD8ivlbPHK4bl+sU=
Subject key identifier:   90:04:CA:2C:2D:FB:D5:C0:BA:05:A3:07:6A:0C:9F:0F:E0:0C:41:50
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       48BCDCB6525738B51E944EAE941B21A03CA00F42
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          91
Signing time:             Sat 13 Jun 2026 16:21:56 +0000
Manifest this update:     Sat 13 Jun 2026 16:16:56 +0000
Manifest next update:     Sun 14 Jun 2026 18:17:56 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: iYcSe3OOm56DDmPTaNIeSCw+rBLGpxL02598OPyY66g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bc:dc:b6:52:57:38:b5:1e:94:4e:ae:94:1b:21:a0:3c:a0:0f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: Jun 13 16:16:56 2026 GMT
            Not After : Jun 14 18:17:56 2026 GMT
        Subject: CN=9004CA2C2DFBD5C0BA05A3076A0C9F0FE00C4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:ef:19:72:3c:79:24:2a:4b:75:89:57:0e:
                    65:63:c1:54:e9:4e:ae:4e:b6:2a:67:8d:48:79:9e:
                    8e:78:23:12:d2:21:9c:1d:0c:b6:2b:53:c4:06:ef:
                    f3:c9:0f:32:99:86:4d:53:82:17:eb:84:f0:8d:12:
                    21:85:75:0a:08:f9:95:41:44:a6:37:b8:69:64:55:
                    48:a6:82:20:48:40:13:30:66:6a:34:46:9a:11:58:
                    45:a6:e5:bd:76:3b:ca:30:cf:12:5d:09:33:d2:ce:
                    72:fa:ce:74:5a:4f:11:48:cd:ac:b3:b7:e5:a0:4b:
                    c8:b1:d9:00:25:04:e4:9f:48:d3:cb:6d:4a:82:c6:
                    6d:44:55:d4:a8:9e:86:33:4f:90:bc:30:82:8b:66:
                    9c:22:f2:da:4b:95:46:47:2e:aa:80:dd:7f:7e:1b:
                    8f:7d:90:b7:2f:3b:2d:7c:7f:01:2f:96:72:83:90:
                    fe:5e:8d:f3:b4:71:47:5e:fb:bb:19:c4:61:e7:dd:
                    3a:89:dd:be:ac:6f:98:e5:84:c0:42:3e:cd:cf:0d:
                    f2:a3:69:91:24:be:31:0c:fe:6c:ee:08:89:a5:0d:
                    09:bb:eb:12:88:0c:d3:e8:8f:58:78:52:ff:3e:82:
                    ad:72:8e:5c:33:0d:cd:4a:f1:66:b0:39:c5:7a:85:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:CA:2C:2D:FB:D5:C0:BA:05:A3:07:6A:0C:9F:0F:E0:0C:41:50
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:d5:b1:66:4c:95:ef:a2:45:94:03:8a:c9:52:47:0b:2d:
         90:00:b2:9d:16:69:a5:bf:8c:63:84:ed:b8:dd:3c:82:02:bf:
         8c:f3:69:ef:e5:fa:7a:2f:42:03:de:09:41:4e:6f:f1:73:ff:
         ed:fd:8a:1a:d5:64:13:74:1d:54:5f:3e:1b:64:de:f6:f3:3e:
         0b:f1:f1:1a:91:7b:92:7a:b0:6b:de:4f:d7:ae:63:8c:71:47:
         34:ab:03:d7:e4:7b:1a:50:e7:d2:c6:e0:04:ff:35:47:f6:dd:
         9b:52:9b:a7:57:00:a7:ba:e6:03:de:12:87:7e:04:b6:3f:6e:
         94:8b:28:52:a8:6c:26:da:b0:de:e6:5c:ca:29:ad:41:ba:9d:
         c8:ed:5b:29:46:a4:16:9c:11:13:68:e4:c6:ae:b9:e4:68:64:
         74:2f:d9:ec:2b:d7:8b:6c:d9:90:a9:c1:fd:d0:5b:72:7d:d2:
         53:50:f6:41:a9:12:ab:26:ce:e6:03:9d:ad:82:e4:1e:65:39:
         ba:fd:0d:0a:bf:f6:c5:a4:e1:27:d5:9b:cd:2d:74:7e:c6:48:
         82:3e:23:76:63:01:0e:19:2b:1e:4e:67:7c:99:a4:86:8e:e5:
         8a:07:b7:9d:ad:74:24:be:a6:9c:7a:04:5b:c5:d5:14:97:57:
         c7:e0:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:26 2026 by rpki-client