Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          fmO+M9x4xwseU03ma286lqp8QMbqxEt5sDMhxkC2TtY=
Subject key identifier:   9A:B4:9B:3C:3F:0B:A3:32:4C:9B:4B:51:34:DB:22:28:0C:B2:61:46
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       692199A8CE2AFE6D7644E958DA61E2307B95311B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          9E
Signing time:             Wed 29 Jul 2026 03:08:16 +0000
Manifest this update:     Wed 29 Jul 2026 03:03:16 +0000
Manifest next update:     Thu 30 Jul 2026 06:59:16 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: P7/jh2SO8UseBqwt+V/rULUaLViqfyTcjGoB2BOTJ0E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:21:99:a8:ce:2a:fe:6d:76:44:e9:58:da:61:e2:30:7b:95:31:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Jul 29 03:03:16 2026 GMT
            Not After : Jul 30 06:59:16 2026 GMT
        Subject: CN=9AB49B3C3F0BA3324C9B4B5134DB22280CB26146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:36:f9:1c:c8:9c:16:ac:91:93:0b:c1:ff:
                    78:8e:fc:e4:bd:de:e0:94:fd:08:92:42:c1:61:d5:
                    5e:e1:22:75:c5:b2:02:38:28:f9:0a:97:63:aa:9b:
                    ef:f6:54:57:4c:c2:b1:70:7f:36:be:ea:6c:4e:a0:
                    d6:eb:94:b4:0e:96:36:0b:fa:46:a0:73:b2:dc:0d:
                    d9:e8:cb:b2:2a:9b:f6:d1:1c:ba:6b:74:13:0c:13:
                    1e:7a:4a:2e:7c:87:e5:10:84:5b:b2:9b:eb:f4:25:
                    9b:12:27:4f:93:b2:13:cf:7c:f1:a2:ee:28:1c:4b:
                    2b:98:2d:2c:d1:f5:3f:90:84:d5:e2:6c:69:99:03:
                    45:ea:33:a5:0c:c5:f1:7b:49:7a:b6:a8:f3:e0:f9:
                    17:71:63:d0:7a:0c:6b:f0:70:f3:4e:a9:6f:63:08:
                    d8:34:8a:47:ba:12:65:8e:a8:cb:39:de:9e:39:54:
                    34:4f:da:bd:af:c0:68:31:12:33:fd:64:a3:33:24:
                    a5:75:ad:91:b9:5b:14:97:e8:64:c9:10:96:7e:7f:
                    45:b7:2b:67:f2:2b:f5:2d:c8:48:bc:0b:f3:29:a4:
                    3e:bf:da:54:45:c2:4b:84:17:64:10:3b:4a:30:8c:
                    02:6f:ed:fd:44:d6:38:2d:eb:c8:85:db:1f:d1:fa:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:9B:3C:3F:0B:A3:32:4C:9B:4B:51:34:DB:22:28:0C:B2:61:46
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:b3:c0:d6:9e:de:64:22:37:25:80:26:85:78:11:23:d4:
         bd:58:c2:cc:18:39:aa:b5:d9:1e:3e:ba:d0:65:26:36:9d:83:
         a0:3d:a8:68:10:52:cd:41:fe:ae:36:70:a1:f9:33:a3:89:ed:
         e0:35:da:01:4a:a6:f6:ce:f2:31:a8:c0:a0:dc:05:3f:51:c4:
         f4:e8:fd:a4:4d:c2:c9:48:d2:08:2e:c4:c5:50:63:c0:eb:29:
         74:66:ca:13:bf:fa:24:75:6b:66:22:28:77:5f:c4:8e:2a:f8:
         4f:69:30:f9:c7:d8:f4:70:32:fe:2c:7d:1f:df:17:f0:92:9d:
         35:35:b6:17:9f:9f:f8:29:c6:c6:51:f6:f1:ee:6a:eb:01:75:
         2a:fb:68:8a:d4:44:77:5a:9e:03:b0:b4:3c:a7:19:86:1f:04:
         51:90:0e:7d:b3:bc:ed:00:51:3d:73:54:b7:b6:64:2d:4e:af:
         f7:2a:d6:cc:96:7b:78:93:e6:a6:ec:70:ca:8c:2b:42:c6:c7:
         c5:f9:0c:a8:6f:cc:64:3f:3d:fa:e2:89:03:7f:26:b4:ab:41:
         0d:af:19:de:4e:04:57:c0:2f:dc:22:47:8b:b8:24:22:6b:1d:
         ae:be:6b:c4:a8:bf:4b:70:48:94:a2:ca:80:f8:cd:d7:58:9c:
         af:7e:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:13:43 2026 by rpki-client