Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
File:                     7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft (raw, json)
Hash identifier:          VJbXLKEIvGVAFetCD0eb4FbJJc1ozTgYwDA4skdpCPI=
Subject key identifier:   C6:A4:56:ED:28:F9:79:78:D6:12:44:D0:2D:B6:2E:9F:61:A2:43:9D
Authority key identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA
Certificate issuer:       /CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
Certificate serial:       2C41DE51831B18D099966046CF9E160B67E36850
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
Manifest number:          CD
Signing time:             Wed 29 Jul 2026 12:09:19 +0000
Manifest this update:     Wed 29 Jul 2026 12:04:19 +0000
Manifest next update:     Thu 30 Jul 2026 13:06:19 +0000
Files and hashes:         1: 7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl (hash: pbvH+eNx2XkiGjJVpyFZU66ayp0R11JrAIC5rRM4xgY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 13:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:41:de:51:83:1b:18:d0:99:96:60:46:cf:9e:16:0b:67:e3:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
        Validity
            Not Before: Jul 29 12:04:19 2026 GMT
            Not After : Jul 30 13:06:19 2026 GMT
        Subject: CN=C6A456ED28F97978D61244D02DB62E9F61A2439D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:70:e3:76:f8:1e:39:c2:95:58:07:8a:0e:
                    ba:0a:56:5b:2c:3f:68:2f:f6:c6:d5:49:90:eb:68:
                    6a:39:d7:3c:9a:18:9a:e4:1c:f1:26:25:04:88:45:
                    80:ae:40:34:86:03:82:49:8c:39:25:31:47:ba:6b:
                    2f:df:09:0d:0b:ba:38:ff:e0:ae:21:42:09:5d:cc:
                    b9:b9:fd:ba:bb:d7:3a:80:69:df:da:10:e3:31:77:
                    e4:73:55:6e:94:d6:85:0c:63:88:e6:62:5d:88:8e:
                    98:fe:90:56:a7:62:c8:c1:46:5a:82:03:b6:5b:c0:
                    a3:95:b1:90:ff:52:5b:65:f2:e9:03:68:31:0f:24:
                    06:c8:d9:8b:35:f2:4b:55:3f:13:b2:c5:91:22:98:
                    38:1c:3b:41:82:cd:c6:23:d5:07:22:bb:eb:a1:ec:
                    c5:81:9d:f0:e5:10:1a:ce:de:13:75:b3:1b:05:3b:
                    0b:4a:79:8d:cf:8e:1a:ee:b7:93:b3:86:20:a6:a7:
                    5f:d8:ea:75:9d:48:9e:4d:1f:df:41:5d:31:76:94:
                    33:7d:a5:64:86:db:38:7b:4c:fe:a3:83:91:02:de:
                    69:e6:ee:77:0a:c1:0b:02:26:0b:b4:25:fa:76:43:
                    0d:14:8b:3e:32:ed:65:6d:09:ff:6c:f8:cc:e3:aa:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:56:ED:28:F9:79:78:D6:12:44:D0:2D:B6:2E:9F:61:A2:43:9D
            X509v3 Authority Key Identifier:
                keyid:77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9b:6b:78:94:16:d7:48:4b:51:50:a4:80:02:6b:b4:e0:66:
         ac:d2:16:ba:1b:02:52:8d:50:d7:18:47:35:fc:59:46:6c:21:
         ea:d7:40:9e:63:94:a9:88:78:6b:3d:aa:5d:38:01:83:63:34:
         6a:54:2b:af:8c:4a:a2:11:6f:d7:d1:4f:b5:fb:23:ae:4b:a6:
         1a:51:1b:d7:a8:52:ff:08:00:9d:4d:fa:9c:88:0a:51:e9:1a:
         83:e5:79:2c:0d:68:16:ed:e0:c8:1f:77:f2:71:8f:51:6b:9a:
         55:e0:d9:69:51:d3:16:91:7f:ef:34:f4:32:fc:61:75:d4:7c:
         d3:dd:1e:06:da:bf:df:b8:74:bd:93:29:7c:a1:c9:b4:51:d3:
         ed:27:f4:89:02:2e:2c:3e:25:d0:1c:41:57:19:60:b7:d2:67:
         92:4a:b3:59:64:e6:ae:81:82:ad:42:25:93:d7:14:00:c4:48:
         49:ac:42:dd:f0:76:df:a3:4b:80:62:50:3e:02:36:6e:a8:36:
         d0:67:57:72:30:8d:ed:42:47:1f:34:94:38:9f:b3:03:e2:a4:
         6c:aa:61:7a:b1:97:26:a1:e6:7c:c1:77:b2:0a:c7:2c:cd:56:
         c0:ba:4f:08:26:3e:7c:e4:f1:cf:45:a1:20:64:ae:0e:73:33:
         8c:06:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:12:58 2026 by rpki-client