Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
File:                     6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json)
Hash identifier:          cz4Dlug2vufzaR09tCTC/SWU9tNqOggv+zwzlg3/h1k=
Subject key identifier:   9D:A1:71:3F:6B:DF:95:97:EE:79:CD:80:76:AC:5A:C3:C8:3C:54:40
Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
Certificate issuer:       /CN=6F998E710C20D2A9D256034668026243E86F9239
Certificate serial:       1357647CCE46D6C7466BB37DDF1A8ACB258B33C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
Manifest number:          59
Signing time:             Sat 13 Jun 2026 18:22:05 +0000
Manifest this update:     Sat 13 Jun 2026 18:17:05 +0000
Manifest next update:     Sun 14 Jun 2026 20:54:05 +0000
Files and hashes:         1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: mJNoGn0Di5mzcHjk385y78jDBONIKLZrIuOu7SR0xSs=)
                          2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:57:64:7c:ce:46:d6:c7:46:6b:b3:7d:df:1a:8a:cb:25:8b:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239
        Validity
            Not Before: Jun 13 18:17:05 2026 GMT
            Not After : Jun 14 20:54:05 2026 GMT
        Subject: CN=9DA1713F6BDF9597EE79CD8076AC5AC3C83C5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:d7:21:49:71:a2:37:54:09:47:86:08:2a:
                    a2:37:a6:00:58:0d:90:29:ff:b1:cd:86:4f:eb:66:
                    04:64:8b:09:cd:db:7e:50:da:fb:15:f0:a6:1b:84:
                    69:13:92:b2:14:9e:7a:33:f5:b1:ab:2a:3b:d3:e8:
                    20:31:5d:75:42:81:43:a2:8f:75:4e:fe:b3:8d:67:
                    02:f8:eb:09:b2:16:00:0b:96:7b:0c:98:d5:c3:c7:
                    ec:bc:81:fb:a4:eb:59:62:27:0b:3e:67:dd:7b:61:
                    37:5c:c0:28:e0:a4:7b:26:e8:48:5c:93:86:11:3d:
                    2d:a7:cd:4f:e0:31:08:06:47:bf:de:8a:38:90:bb:
                    48:25:90:32:98:fd:07:ca:c2:e7:85:3a:a0:d0:28:
                    2d:94:ff:23:e9:bb:c0:80:ee:ae:df:05:41:d5:ef:
                    e4:90:64:5e:6d:a4:f9:54:37:74:67:9e:d5:d5:8f:
                    32:7b:04:4e:c6:7b:26:21:6b:3e:c7:15:a1:bd:7e:
                    e1:78:28:9d:d2:9d:d8:a1:d5:4a:6a:d3:80:94:fc:
                    17:60:8e:9d:7b:b2:ab:5a:3f:b0:18:96:12:0d:26:
                    cb:20:74:bc:ea:e7:95:81:d3:b8:e7:32:8f:88:c9:
                    6e:6b:62:ad:61:4c:d7:13:b0:fd:fd:b9:fc:79:17:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A1:71:3F:6B:DF:95:97:EE:79:CD:80:76:AC:5A:C3:C8:3C:54:40
            X509v3 Authority Key Identifier:
                keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:70:e5:78:ea:d7:b5:27:3a:b3:3d:93:64:07:95:81:98:d5:
         cc:2e:a3:b1:aa:d1:31:e4:d4:90:9a:db:81:c1:f4:fc:bb:93:
         44:f1:5b:91:cd:32:17:72:47:15:1b:3f:fb:bd:89:fe:32:5b:
         89:d4:56:19:2d:35:10:2b:a8:36:cf:2f:f1:c4:ad:3c:9e:c8:
         91:a4:e1:61:ed:01:bf:ce:a1:0e:d6:28:4f:fa:8b:f9:78:3e:
         63:c9:c7:a2:49:9c:4d:1b:1d:a7:16:87:17:f6:00:e3:c5:36:
         52:32:8d:25:ec:f4:b2:9c:8b:56:5c:89:cc:f2:f6:2d:31:56:
         31:ad:1b:ff:bd:95:fd:91:78:ed:ae:6c:96:66:05:c0:f5:60:
         f2:c6:12:01:25:22:b4:65:22:e9:7d:1a:4a:e7:54:bb:e6:1e:
         ad:7a:f4:02:e1:67:34:f2:e0:8a:85:2b:72:fc:e1:12:dc:4e:
         89:b7:d7:bb:62:8c:ef:e3:2c:57:2c:82:9f:e9:2b:0c:99:1c:
         f6:cd:54:75:cf:ac:cf:76:b7:41:50:41:28:3a:e4:9d:97:59:
         12:3d:be:ca:46:cb:69:52:ab:9f:e9:fa:e3:11:08:19:db:55:
         33:56:ab:02:60:af:e6:07:94:39:2d:56:12:65:0e:05:fd:44:
         ca:bb:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:09 2026 by rpki-client