Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
File:                     0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json)
Hash identifier:          7a6PE1mskm7b4r9rirzfEh7XDKOiCh4JrSJXRdfj7ag=
Subject key identifier:   4D:57:7E:5E:6B:AE:9C:19:36:1B:8A:38:B8:E7:4F:CD:BB:96:2B:33
Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94
Certificate issuer:       /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94
Certificate serial:       10730393167B92099BB3178ACE299BE66838ED1F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
Manifest number:          57
Signing time:             Sun 14 Jun 2026 00:27:29 +0000
Manifest this update:     Sun 14 Jun 2026 00:22:29 +0000
Manifest next update:     Mon 15 Jun 2026 01:27:29 +0000
Files and hashes:         1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: yln79E98Q3TRDa3U7gOS8Jg4i7V/K/NTAAoeAu84ojw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:03:93:16:7b:92:09:9b:b3:17:8a:ce:29:9b:e6:68:38:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94
        Validity
            Not Before: Jun 14 00:22:29 2026 GMT
            Not After : Jun 15 01:27:29 2026 GMT
        Subject: CN=4D577E5E6BAE9C19361B8A38B8E74FCDBB962B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:44:ce:cc:97:9d:01:93:51:29:3f:cc:10:
                    af:bd:b0:03:e9:3e:d9:a6:28:a5:d4:95:4b:d1:1d:
                    61:10:6c:07:e1:0b:4d:b1:d8:93:0b:d1:64:d6:40:
                    11:a5:bc:e8:bf:7e:3c:a4:95:ad:3b:bf:1e:75:c7:
                    50:02:a2:f6:84:c4:5c:66:cc:55:f3:7c:0e:70:92:
                    5f:5b:70:c5:d9:a9:dc:0e:e0:06:dd:ac:5b:43:38:
                    87:86:2e:8f:ae:5c:ae:af:c4:6b:c9:05:83:fa:05:
                    16:5d:2a:8a:e4:3a:a8:a0:1e:2c:62:96:9d:b8:c9:
                    2f:69:cb:55:6b:0c:67:13:59:8b:4a:17:2c:0f:b6:
                    c7:9e:26:24:9b:dc:fd:cf:dd:87:4d:fb:92:0e:73:
                    39:5b:d3:3b:29:04:7b:55:1e:83:6b:8b:2c:d4:b0:
                    90:f9:17:db:60:8a:0e:95:13:be:72:46:06:bf:32:
                    af:a2:51:58:c8:81:08:d3:32:ef:10:1c:9b:f0:2c:
                    17:a8:be:76:b1:2d:05:b6:0d:6e:ec:0b:1b:59:3d:
                    22:bf:2f:22:ac:17:aa:8d:62:c7:8c:85:b5:c1:ed:
                    72:7a:d9:b1:37:79:23:31:fa:55:d9:d0:63:8e:6d:
                    84:3b:85:35:3f:59:56:d2:3c:82:d7:a4:32:14:28:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:7E:5E:6B:AE:9C:19:36:1B:8A:38:B8:E7:4F:CD:BB:96:2B:33
            X509v3 Authority Key Identifier:
                keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:28:a9:9e:41:2d:fe:4d:8f:f6:ef:59:80:42:db:28:c3:3f:
         9a:6b:ff:59:53:31:6b:71:ff:a1:1a:1d:b1:f2:80:d3:7b:32:
         62:03:6b:f1:23:ca:63:c8:8d:b8:22:8d:a6:3a:02:42:01:77:
         0c:6b:74:69:83:bb:b1:82:d8:59:88:31:a7:14:a5:87:31:5f:
         09:0d:e1:22:d9:89:a8:7e:f5:6b:0c:b1:7f:16:4a:db:ea:e1:
         84:74:c7:53:57:5c:35:73:51:e7:71:67:d0:34:48:96:72:46:
         6a:0c:ee:d4:58:ba:6e:76:6c:04:c8:f9:87:ce:1e:b5:fa:f7:
         c0:71:af:0a:59:79:ae:28:8a:90:04:68:f6:c9:fa:64:d3:82:
         e0:89:2f:a0:2c:ab:3c:2d:f7:c6:54:b4:d7:18:d6:4a:79:18:
         c5:9a:20:df:49:ee:2c:7f:4c:81:4c:44:8f:87:5c:59:de:32:
         f2:3e:7a:87:9f:10:cd:3d:8a:4d:5d:4d:e1:8c:da:b0:05:b5:
         bf:67:b9:5b:95:0f:a6:47:d1:76:50:cd:54:8c:91:17:f6:13:
         5d:41:61:12:e9:e0:6c:dc:b8:ef:af:20:11:bf:99:1a:1a:cb:
         30:87:13:9e:77:ad:83:3b:56:88:91:6d:36:53:38:90:1d:4f:
         cb:3f:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:41 2026 by rpki-client