Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          zx1KyQj3hhx1OdASq6NHVdvhZhbedcvyMtlaHHi2760=
Subject key identifier:   66:00:00:65:C6:B3:A4:90:B9:CF:A0:AE:BE:75:1E:7D:EC:99:0D:B7
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       63F3B4678E0228A0B0EAE14C11A9C7FB7F88CE10
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          62
Signing time:             Sun 14 Jun 2026 02:22:37 +0000
Manifest this update:     Sun 14 Jun 2026 02:17:37 +0000
Manifest next update:     Mon 15 Jun 2026 05:35:37 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: xD973GkKoOdGwguwMLUVHKLdxh5Dw/SuXsDysv5OamA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f3:b4:67:8e:02:28:a0:b0:ea:e1:4c:11:a9:c7:fb:7f:88:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Jun 14 02:17:37 2026 GMT
            Not After : Jun 15 05:35:37 2026 GMT
        Subject: CN=66000065C6B3A490B9CFA0AEBE751E7DEC990DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:02:c3:dd:46:38:ec:be:58:97:45:ba:0a:
                    78:89:3a:52:9f:45:0d:c5:3c:b4:a7:7c:ea:0c:57:
                    8d:15:1b:b4:a8:5b:95:02:64:d6:ee:24:b8:51:34:
                    82:3d:b8:4e:36:61:63:50:78:9c:32:29:48:43:56:
                    43:89:ac:94:93:49:67:5b:e3:26:46:53:71:5b:32:
                    03:f4:8e:4b:5c:f0:05:19:79:f8:d8:ae:ce:3c:d8:
                    dd:29:7b:24:34:22:e3:b9:5d:0c:15:30:6e:80:af:
                    ac:21:fe:67:bb:e2:cc:1c:28:a3:f0:0a:01:3f:f1:
                    2d:1e:12:36:7e:99:ae:6b:cb:88:46:68:97:41:f3:
                    2d:fb:37:f9:44:6c:63:ff:47:5f:4a:25:3d:13:37:
                    cb:c5:a8:84:db:d2:f5:b5:d3:96:ac:a5:07:55:37:
                    8f:08:81:dc:05:7c:b1:3f:52:6a:99:99:1c:b7:19:
                    19:88:ec:f4:73:23:ed:ea:24:46:2c:7a:51:7f:03:
                    67:68:44:6d:24:25:1a:ea:e6:e6:6c:81:de:78:ac:
                    22:9a:fe:5a:00:c8:5f:da:e4:37:31:a5:2c:c1:b2:
                    1b:ae:5f:ef:5f:20:4f:40:95:5e:8d:44:b3:2e:66:
                    4e:68:f0:7f:b0:23:ce:dc:3a:6f:74:dc:b6:ac:6e:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:00:65:C6:B3:A4:90:B9:CF:A0:AE:BE:75:1E:7D:EC:99:0D:B7
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:b5:bd:29:be:5c:90:6e:6d:a3:c4:fe:20:a4:9d:ee:4f:
         53:5f:45:6d:b1:2a:fe:fa:c1:5c:ba:cc:2c:20:48:38:40:38:
         b3:8c:ff:44:aa:b7:b2:5e:bd:8d:49:df:5b:f8:4c:49:3e:f4:
         9d:45:bd:4f:46:04:62:4c:4c:f6:82:36:4e:75:a1:20:da:a6:
         4b:87:a9:7f:38:af:a9:7d:4f:83:30:8b:c7:1e:7f:58:7d:ac:
         f5:f2:21:b6:f0:f2:c1:c7:a7:e1:90:ad:f8:49:1c:8d:46:b5:
         32:04:be:51:d5:0d:fd:e5:48:e6:97:09:77:36:f0:e5:f6:a8:
         92:7e:c9:cf:ea:f8:b0:e3:ba:59:73:0f:5c:ca:b9:25:ba:5d:
         fc:e0:80:8c:e1:95:9b:db:86:fb:1d:a5:c7:1b:b9:c2:4a:6d:
         62:b4:1a:79:d6:fc:bd:b9:7c:98:64:d5:16:e9:94:4f:61:3e:
         2f:8e:53:a3:73:5b:d6:b6:c2:00:62:d7:4b:59:94:c0:d4:2e:
         f5:dc:f6:e0:45:fd:da:39:bf:06:fa:99:93:e9:43:7b:93:8d:
         45:08:c5:ab:4d:4f:47:17:c2:bb:0d:06:a0:56:ea:e1:db:11:
         93:5e:0e:8e:c8:38:d3:7c:f8:91:98:9a:fc:44:9a:c3:8f:e3:
         20:64:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:42 2026 by rpki-client