Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File:                     8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier:          1FLT3zJJi6vxQWo3gH4lm+HqgITcAkNejuDIEvmuidQ=
Subject key identifier:   96:02:BD:32:E2:31:28:47:DC:5C:A9:08:1E:AE:8F:2C:EC:98:BD:F7
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer:       /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial:       70FC3CA988A09EB38CFD2AD689A63113353D6BC9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number:          90
Signing time:             Sat 13 Jun 2026 13:46:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:41:49 +0000
Manifest next update:     Sun 14 Jun 2026 15:58:49 +0000
Files and hashes:         1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: QXePT/UIusDPgKsOzdnTPr3QL0r1t4W3WmDj1W0FGmk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fc:3c:a9:88:a0:9e:b3:8c:fd:2a:d6:89:a6:31:13:35:3d:6b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
        Validity
            Not Before: Jun 13 13:41:49 2026 GMT
            Not After : Jun 14 15:58:49 2026 GMT
        Subject: CN=9602BD32E2312847DC5CA9081EAE8F2CEC98BDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:fa:e0:9a:3e:b8:7b:bb:ad:c3:e9:a0:d3:
                    d9:9f:c9:a7:e8:fd:a6:ac:60:2d:18:6b:d5:37:d5:
                    88:10:90:92:16:49:37:ac:53:65:ea:53:c0:e6:15:
                    9c:ad:5f:c6:78:0d:65:0f:33:f8:7c:24:21:5a:43:
                    be:6c:4e:4c:2a:fd:37:e2:54:a6:37:7e:a3:ad:17:
                    02:58:43:4c:d9:e9:3d:5f:13:82:ee:8e:52:7f:28:
                    84:b6:71:bc:30:c8:db:63:25:04:3a:8b:22:31:7c:
                    bc:01:cc:33:48:21:40:d8:7b:69:7c:67:8b:e2:80:
                    e2:95:4e:47:f9:f4:59:04:87:6e:f2:50:05:4b:71:
                    14:94:15:31:a3:5a:c4:4f:c0:ad:58:0c:65:73:2a:
                    b4:69:97:7d:cb:bf:82:01:bf:c1:3e:5e:86:cd:d0:
                    df:3e:8b:ae:71:05:e0:5f:ff:87:84:fd:e1:d5:db:
                    d0:fd:d5:49:14:85:18:12:9c:38:d6:5d:c1:ed:b9:
                    6c:c3:db:94:6a:c3:82:5b:ac:58:76:57:2c:37:28:
                    40:18:1c:00:66:6f:42:7c:45:32:39:f8:60:68:6b:
                    86:ee:85:17:07:39:50:ce:ce:39:3a:60:61:c5:5d:
                    73:ae:fa:5a:f5:7d:12:86:60:f1:fb:51:60:1f:df:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:02:BD:32:E2:31:28:47:DC:5C:A9:08:1E:AE:8F:2C:EC:98:BD:F7
            X509v3 Authority Key Identifier:
                keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:bc:c4:1a:53:7a:de:f3:a2:8b:ed:33:c8:63:69:3f:9d:
         4c:5c:e5:b5:b1:0e:77:74:7b:05:1f:09:f8:c9:cd:ea:2d:cd:
         52:c9:e4:bf:a4:52:ce:b3:68:d8:2a:76:cd:8f:4b:91:53:5e:
         18:3c:9e:ee:14:86:0a:e7:e8:0f:f2:8e:d6:aa:4d:4c:9f:80:
         07:a9:b6:7f:5d:6b:01:42:f3:0b:8f:e9:71:03:19:2a:48:e6:
         f8:07:1d:c7:37:8c:bc:05:72:10:db:fa:fc:74:2c:e4:29:fe:
         b8:5a:88:bc:6e:d7:09:07:d6:ac:8e:06:38:24:8a:fb:70:2f:
         46:07:df:ed:0b:4f:9e:65:23:9b:6a:01:b5:45:2d:31:7a:42:
         84:95:cb:1e:ed:89:5a:d5:91:14:07:b2:aa:30:eb:5c:ff:5b:
         ab:b9:b6:9f:3a:4a:38:30:6a:22:7a:71:7e:74:ea:e6:44:1c:
         f0:ba:61:03:9c:5e:1c:3b:ca:0e:bd:3a:e1:0b:2a:b9:14:b2:
         0b:b5:21:1a:fd:14:e4:3e:5a:39:e4:6a:52:ea:5d:8b:b8:b8:
         8c:ab:01:69:36:7f:19:b2:20:c3:73:44:2f:05:eb:95:a1:c3:
         0d:6f:2e:4a:10:22:0e:50:9b:b4:49:4a:e1:b0:80:ef:bd:8f:
         f3:67:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:15 2026 by rpki-client