Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
File:                     6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json)
Hash identifier:          QZyffhs2pcupLaz0IcRyIngcJ8ibYZIFz2vXve0Py3I=
Subject key identifier:   EB:3B:2C:DA:43:5E:9A:74:58:B7:EB:A9:19:C8:90:ED:F5:7B:33:AE
Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
Certificate issuer:       /CN=6F998E710C20D2A9D256034668026243E86F9239
Certificate serial:       469B7EA37674EC58B0EC4F93A50396164FC91F6E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
Manifest number:          0C
Signing time:             Thu 16 Apr 2026 10:24:32 +0000
Manifest this update:     Thu 16 Apr 2026 10:19:32 +0000
Manifest next update:     Fri 17 Apr 2026 14:11:32 +0000
Files and hashes:         1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: NpVOmhyruZm9uo8onHvevqAVoxW6IrRvfDMdvn+EkoI=)
                          2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 14:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9b:7e:a3:76:74:ec:58:b0:ec:4f:93:a5:03:96:16:4f:c9:1f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239
        Validity
            Not Before: Apr 16 10:19:32 2026 GMT
            Not After : Apr 17 14:11:32 2026 GMT
        Subject: CN=EB3B2CDA435E9A7458B7EBA919C890EDF57B33AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:37:79:6a:c5:a2:99:8b:df:bb:a8:75:b1:
                    99:bd:92:41:a0:9c:38:2a:62:9d:d7:37:6c:38:cd:
                    61:b1:60:8e:8b:41:3e:64:e6:28:49:2a:c7:c5:9c:
                    e2:5e:51:6a:cf:0b:c6:5a:4d:c4:4f:42:a4:64:5f:
                    fa:8d:0b:68:69:77:b5:bd:39:29:f8:12:38:63:60:
                    e6:ca:6d:e9:21:9d:8c:f8:1a:bd:ac:3b:c9:83:03:
                    2e:65:2f:16:d7:92:db:47:10:41:05:6a:9d:51:6d:
                    1e:a9:c7:f0:54:cc:6f:52:ff:eb:71:c3:42:45:87:
                    19:28:ed:eb:59:ec:c3:a6:85:b3:0e:c6:fb:78:0c:
                    77:1d:8f:27:8f:c2:3b:e6:7d:3b:4b:22:4c:46:6a:
                    06:32:12:89:3f:52:85:5e:4a:09:4f:48:28:ca:f2:
                    7e:d5:91:c8:9e:d3:56:ac:e5:7f:34:32:66:9d:08:
                    51:1a:f6:35:b1:99:1e:68:c7:ad:47:9c:48:fe:16:
                    23:01:46:8d:6b:1d:ca:f3:0b:e2:35:b3:37:55:a5:
                    71:3f:30:14:86:47:df:39:6b:34:02:80:64:46:4b:
                    b1:b5:c5:2f:e6:07:c0:38:5e:b7:96:b4:f5:a0:7b:
                    19:e5:98:53:0e:8c:89:00:1d:37:14:78:b9:6c:62:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:2C:DA:43:5E:9A:74:58:B7:EB:A9:19:C8:90:ED:F5:7B:33:AE
            X509v3 Authority Key Identifier:
                keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:b3:cb:34:44:b0:77:7f:16:76:12:ad:6b:de:fd:68:db:
         04:0d:a4:44:c1:1c:40:3b:db:50:ee:31:5b:90:fc:e2:51:3e:
         12:35:3d:78:03:29:1d:8a:b0:af:f2:be:88:7e:56:7d:5a:4b:
         e2:ca:cc:4f:d5:5b:24:c7:3b:99:73:c1:92:ac:c7:9d:ea:2c:
         72:33:83:54:eb:83:09:9a:96:57:36:f4:f7:8b:75:53:6b:38:
         53:2b:99:4a:e5:3e:2f:e1:24:83:13:05:fd:4c:76:56:bc:4a:
         b1:6d:58:36:73:3e:6b:a5:06:57:14:d6:d5:2e:99:8b:91:79:
         2e:c4:80:a2:7b:e4:80:34:f9:d6:8e:4b:4f:26:b4:2c:f7:b7:
         a1:e8:f4:3a:28:2a:34:96:ef:ce:92:13:31:d9:aa:95:96:c5:
         b0:78:29:10:d6:1c:c2:a7:f7:ad:20:08:3f:8d:0a:61:76:63:
         19:61:e6:ba:08:77:68:07:8a:fb:5b:eb:cc:6f:6e:6a:49:a6:
         f6:81:19:f2:98:ae:87:43:50:4a:ef:92:90:f1:99:9b:e7:8e:
         7c:46:0f:4e:84:24:6a:92:99:2d:43:e7:33:fa:c1:ba:c3:97:
         04:8d:a2:53:55:21:9c:11:0e:8d:65:9b:cd:a9:e0:eb:b8:69:
         7f:3e:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:54:04 2026 by rpki-client