Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
File:                     49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json)
Hash identifier:          wjkOl1IAQw+EPYedhwONXxb+Zvqn8MWr1G8JN3uRKsE=
Subject key identifier:   FF:25:0E:52:95:A0:62:E5:25:33:A3:85:86:80:41:A7:D1:4E:04:3B
Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
Certificate issuer:       /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Certificate serial:       7832D9BE38214F7E0812A3CF3260CD9CF7ECC184
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
Manifest number:          0A
Signing time:             Fri 17 Apr 2026 02:24:38 +0000
Manifest this update:     Fri 17 Apr 2026 02:19:38 +0000
Manifest next update:     Sat 18 Apr 2026 06:09:38 +0000
Files and hashes:         1: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: N2/GQD7+6HY+7SkldH9gIY+NoxwHN8bWa1KIUmxHWmc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 06:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:32:d9:be:38:21:4f:7e:08:12:a3:cf:32:60:cd:9c:f7:ec:c1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
        Validity
            Not Before: Apr 17 02:19:38 2026 GMT
            Not After : Apr 18 06:09:38 2026 GMT
        Subject: CN=FF250E5295A062E52533A385868041A7D14E043B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:e8:d9:c3:f4:bc:e1:df:e7:26:20:0f:8e:
                    5d:5b:e4:21:04:8b:46:48:bf:17:97:79:1c:65:ec:
                    c2:1b:29:af:62:2b:08:d5:ac:d3:d2:63:07:b1:85:
                    72:c2:91:bc:7f:ee:6d:19:6c:86:d1:c3:0b:ed:dc:
                    28:52:d2:7d:31:15:d7:51:1c:ec:d2:54:56:b5:6b:
                    6b:88:e2:37:6a:82:f1:ba:60:d2:d0:d5:3c:16:7e:
                    b1:99:5a:67:b8:8c:c1:be:91:60:db:80:2f:65:01:
                    19:a3:fc:05:de:69:e7:02:d9:b1:2a:08:5f:79:64:
                    63:9b:9a:a7:47:16:26:84:97:1c:73:f4:48:42:a5:
                    ef:ab:fd:bc:01:4b:f4:11:fb:6f:c3:b8:56:f4:d3:
                    54:5d:05:14:40:e4:cf:12:b2:53:79:10:3c:51:d7:
                    56:fd:e3:ad:5e:6a:70:62:17:ad:0f:04:a8:0b:92:
                    03:5d:6a:f1:04:2e:3d:c7:ec:04:13:2c:3b:6e:e1:
                    2c:8a:d7:c6:da:1f:cc:0e:30:8d:1f:e4:f7:bd:4a:
                    35:96:e3:5a:bf:2a:97:38:b3:1f:55:06:f3:a4:85:
                    e3:ef:22:b8:04:79:a5:3d:b2:38:91:36:1c:10:9e:
                    07:e9:20:79:82:3b:b8:2e:f9:19:a6:17:ff:5f:03:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:25:0E:52:95:A0:62:E5:25:33:A3:85:86:80:41:A7:D1:4E:04:3B
            X509v3 Authority Key Identifier:
                keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:22:bd:ec:05:11:5c:5a:23:28:4b:62:36:1d:e0:3c:a0:03:
         6c:47:dc:21:20:66:da:3b:4e:28:3f:3e:9e:c1:b1:a8:b2:29:
         0a:c8:d2:eb:8b:99:fe:3b:75:2e:12:e3:23:59:c5:0c:10:70:
         43:22:24:d7:56:6c:f1:a2:f5:54:b8:0c:41:35:5e:a7:ea:f3:
         8b:84:4d:c9:bc:0d:3b:a1:3b:eb:aa:ca:34:4d:90:eb:18:dc:
         5d:22:bc:ad:a0:26:ee:fd:72:b6:2c:5f:5d:c6:69:57:80:24:
         84:f7:f1:4a:68:9f:82:e5:a6:ce:61:be:2e:c3:c3:f2:1c:2d:
         1d:71:f6:92:83:b8:72:11:74:98:1c:1d:bf:3a:e1:33:20:95:
         6d:3a:29:00:9c:eb:f0:3c:4e:61:0f:e7:ff:51:7f:c4:51:b8:
         b7:2d:97:51:71:14:40:69:76:a9:6c:9e:98:c3:23:33:a4:aa:
         df:85:c7:c9:b4:b2:80:e5:68:d7:ea:be:30:f2:df:a3:64:bb:
         8c:db:c1:d6:4f:7b:77:b4:0f:32:e8:7a:ae:9d:82:65:55:9b:
         c4:05:45:a0:9c:b4:3a:ef:b8:c7:e5:50:13:05:88:f2:37:69:
         f6:5b:f7:6f:61:ff:e4:e4:17:51:f2:97:87:47:b7:d0:49:b0:
         7d:e4:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:34 2026 by rpki-client