Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft
File:                     0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json)
Hash identifier:          OO51QQ94Zqs1w5aoQJV0L6JHFo85dGhNDfCYYK4WODY=
Subject key identifier:   52:7A:EA:3F:7C:45:76:65:A5:8A:34:60:D3:27:9D:4D:5F:A7:02:EC
Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E
Certificate issuer:       /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E
Certificate serial:       3FCAA865C56673F4A1FC76DDCBA5A4F956004072
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft
Manifest number:          58
Signing time:             Sat 13 Jun 2026 22:27:20 +0000
Manifest this update:     Sat 13 Jun 2026 22:22:20 +0000
Manifest next update:     Mon 15 Jun 2026 00:44:20 +0000
Files and hashes:         1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: msH/NaDQVoF6TMxRQevkVEbqejIV6Ajvcpaex+wdwQ8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ca:a8:65:c5:66:73:f4:a1:fc:76:dd:cb:a5:a4:f9:56:00:40:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E
        Validity
            Not Before: Jun 13 22:22:20 2026 GMT
            Not After : Jun 15 00:44:20 2026 GMT
        Subject: CN=527AEA3F7C457665A58A3460D3279D4D5FA702EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:35:58:41:36:02:c9:27:9b:5d:c5:91:37:
                    c4:a2:d2:02:75:ae:91:57:02:2e:08:ad:84:c7:88:
                    fd:54:5c:99:8e:33:98:fb:3b:18:c8:70:ae:9a:45:
                    af:1a:e1:68:25:93:4d:07:4f:82:20:c8:7a:0c:ec:
                    d8:30:be:65:a6:ab:8b:99:f1:5a:68:30:6f:9e:5e:
                    44:64:b7:6d:f3:64:9f:92:b7:5e:27:d2:1a:3d:6e:
                    1b:9a:e0:c2:7b:8c:e9:af:a4:77:5e:4d:3d:42:c6:
                    93:c7:54:64:65:d7:e5:e1:62:a5:da:39:6c:72:35:
                    5d:dd:28:98:20:4f:16:8d:58:7e:65:97:86:16:58:
                    85:45:88:76:25:ec:9b:60:fd:ec:82:7a:3a:e6:a7:
                    61:06:85:1f:e7:a6:9a:43:e9:1c:60:1b:5f:ff:c0:
                    b7:22:ca:dc:83:71:47:08:fd:6a:1f:03:e6:5f:44:
                    24:14:39:f5:bf:16:8c:3d:fe:be:57:4c:82:3d:0a:
                    16:94:e2:27:3e:9f:c8:32:4c:02:93:a7:e5:7e:b6:
                    b2:df:85:f4:ef:af:f0:a1:e0:53:0d:fe:49:32:6a:
                    ef:5e:66:07:bf:0a:e5:20:df:c0:20:22:ac:3c:11:
                    17:3c:6b:d7:56:84:ed:fe:7f:42:92:79:88:04:6c:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:EA:3F:7C:45:76:65:A5:8A:34:60:D3:27:9D:4D:5F:A7:02:EC
            X509v3 Authority Key Identifier:
                keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8b:49:9a:a4:87:94:3f:53:8a:f7:63:42:0a:96:bc:79:65:
         ad:bc:ec:a9:1b:9d:db:c4:03:d0:fb:42:10:3e:47:77:30:b0:
         c5:13:6b:1e:03:a9:92:35:a5:96:bb:1a:64:46:18:a3:6d:ab:
         d4:1d:58:d2:4b:64:95:1f:d9:40:4e:da:a0:47:28:7e:29:3f:
         62:09:3f:5f:0a:7b:ec:79:0f:3f:0c:c5:b8:01:72:e9:db:34:
         64:d9:1f:b8:ee:75:a5:98:00:5f:c3:b5:b3:3b:5d:32:6a:16:
         29:fe:d1:1d:df:2f:f0:6c:dc:f0:40:c8:bb:01:5d:0b:b7:c7:
         41:9b:0e:d4:c5:81:03:3e:4a:c1:cb:e5:eb:98:6c:d9:55:32:
         f0:3f:e6:a3:83:8e:0b:11:4b:92:7c:e1:a2:95:84:d1:7d:5a:
         ab:1c:99:89:43:69:fc:c8:98:d9:e0:d4:c6:9c:6b:af:2f:67:
         b4:28:a1:5f:4d:a6:f1:e7:c5:bc:b9:a7:e4:8b:58:14:d0:17:
         8d:95:fe:74:54:f2:a3:08:ec:45:c7:82:33:01:d7:6f:ea:bd:
         20:1e:a0:5a:80:2a:7f:35:62:8b:8d:be:50:f3:73:5e:fb:11:
         a8:a0:4d:55:53:a5:a3:68:f5:9c:bd:7b:22:b7:40:ed:e0:bf:
         8e:40:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:55 2026 by rpki-client