Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
File:                     9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json)
Hash identifier:          SrqV0Ev9ZAFUneRc5SmSch53DAdlFeeXzwFguxApFOY=
Subject key identifier:   29:57:80:21:4F:7F:03:6B:04:B8:8F:00:B2:DC:14:2B:CA:31:1D:E8
Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34
Certificate issuer:       /CN=9FEF44F113313B4929575EF55ED937D41AA80334
Certificate serial:       4C18A78421269BB72FF16BBB1748924BEC1CC2BC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 14:56:52 +0000
Manifest this update:     Sat 13 Jun 2026 14:51:52 +0000
Manifest next update:     Sun 14 Jun 2026 18:18:52 +0000
Files and hashes:         1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: /t47aYluGilhrJtz6yZfg5m+qY06vl5Cq6tqy6Laqhg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:a7:84:21:26:9b:b7:2f:f1:6b:bb:17:48:92:4b:ec:1c:c2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334
        Validity
            Not Before: Jun 13 14:51:52 2026 GMT
            Not After : Jun 14 18:18:52 2026 GMT
        Subject: CN=295780214F7F036B04B88F00B2DC142BCA311DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:f5:1c:cb:69:c6:9b:3e:83:c0:ec:ae:0a:
                    dc:c1:c7:15:c4:68:05:1a:00:0c:6b:be:07:a7:64:
                    d5:95:7a:65:9e:fc:54:f7:49:0c:e0:74:cd:c0:d7:
                    46:b7:12:2b:62:90:26:f0:d9:53:e0:65:f8:7f:1c:
                    78:19:98:c0:ae:fe:c2:4d:7a:8e:da:c3:0e:0f:3f:
                    2f:c3:c9:08:fa:46:ae:ba:66:c6:21:ee:0d:11:23:
                    8a:20:25:1c:ea:7e:3c:96:d4:25:ab:9c:00:c7:a6:
                    ed:f9:69:36:fe:11:81:bc:28:90:a3:22:50:58:ba:
                    3b:5e:16:a8:4a:c4:a8:e2:d6:d5:9d:0d:a5:4f:db:
                    6d:9a:26:df:22:d6:13:f9:35:94:fd:9b:67:b2:ec:
                    81:bf:60:0e:d0:d4:03:c2:b9:d8:b5:47:97:95:d1:
                    3d:11:80:8c:6b:e7:0d:1c:5a:e8:79:c4:f0:f6:89:
                    32:b6:e2:44:0e:da:47:b9:df:8d:ec:f2:df:00:77:
                    80:e3:76:3b:f0:31:16:aa:d8:25:86:b5:70:cd:84:
                    7e:7d:a8:01:e1:ec:87:31:ec:97:89:23:5e:bf:c2:
                    45:26:57:2d:49:d7:f1:e9:c6:50:88:f8:32:a9:c2:
                    1f:0d:b3:4c:88:8f:78:e7:f1:cb:b5:4b:31:b2:4d:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:80:21:4F:7F:03:6B:04:B8:8F:00:B2:DC:14:2B:CA:31:1D:E8
            X509v3 Authority Key Identifier:
                keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:94:05:f7:ad:d5:89:b7:d7:58:ce:e1:a2:6f:e9:42:11:c2:
         e3:11:2a:74:0a:45:b1:75:26:7c:77:83:6f:3f:75:d8:7a:a6:
         4d:f1:2c:1c:9c:9e:a1:91:d6:87:8c:31:54:5d:24:5b:76:48:
         fe:c7:ec:a8:e0:9d:e8:ce:fb:2a:b9:0d:da:a8:33:6c:06:78:
         d7:1f:3d:3a:64:0f:ab:d3:44:1a:e5:7c:db:d8:68:82:a4:c1:
         14:b4:c6:2f:32:41:38:f7:fb:64:d1:0d:e9:25:ae:e2:94:61:
         b3:43:68:64:5a:55:1f:d6:30:3a:56:91:be:f3:19:cd:fb:8f:
         c0:13:58:e7:ef:24:86:f7:05:af:eb:f2:00:66:1c:7e:cf:de:
         4d:13:2b:4e:8f:25:fc:d2:98:47:fa:a9:81:0c:69:de:a6:df:
         ba:a1:d6:72:d6:af:6f:87:bb:32:a9:f9:2c:b6:9b:37:8b:0c:
         fe:a4:1a:7c:d1:03:e7:97:e0:45:c2:22:04:de:ae:6a:49:7b:
         5e:e2:14:a9:f1:8c:38:ad:25:06:a4:42:31:f0:42:5b:17:ba:
         24:f3:db:b3:3a:48:dc:ca:48:dc:08:e1:6a:cd:c6:fc:f1:d7:
         b6:44:d2:1e:ad:1e:82:53:40:f2:51:07:e6:5f:e8:a7:4d:2c:
         46:4a:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:13 2026 by rpki-client