Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
File:                     9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json)
Hash identifier:          zWmgUS1U1Ygm/ryYwVfadnK9OFeCloaSmX11rRnAnNQ=
Subject key identifier:   06:D5:31:D4:AC:F4:DF:F9:EC:15:3F:D1:60:35:A4:00:EC:23:97:85
Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34
Certificate issuer:       /CN=9FEF44F113313B4929575EF55ED937D41AA80334
Certificate serial:       73A3E03A36594DEFC59FAADC2D08E227D2DC22E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
Manifest number:          90
Signing time:             Wed 29 Jul 2026 06:38:43 +0000
Manifest this update:     Wed 29 Jul 2026 06:33:43 +0000
Manifest next update:     Thu 30 Jul 2026 07:13:43 +0000
Files and hashes:         1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: q4gfuhXFSMrqFczTrvLiA4fL8Th6tnaE/euBccEXmy8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:e0:3a:36:59:4d:ef:c5:9f:aa:dc:2d:08:e2:27:d2:dc:22:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334
        Validity
            Not Before: Jul 29 06:33:43 2026 GMT
            Not After : Jul 30 07:13:43 2026 GMT
        Subject: CN=06D531D4ACF4DFF9EC153FD16035A400EC239785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:09:04:2e:43:ae:0c:5a:cf:cb:ef:25:84:
                    c6:5e:ca:e6:c4:5f:66:78:6d:f0:79:87:bc:fc:47:
                    30:db:81:33:76:df:b7:69:64:e3:ea:15:e9:c8:7c:
                    d7:15:d6:df:93:4d:7b:22:a1:80:2c:ed:56:67:66:
                    99:9d:f5:28:66:ac:49:8c:1d:98:b8:a2:d8:22:a9:
                    c9:70:4b:68:90:d1:16:5e:66:74:13:4e:14:0d:9a:
                    d4:4d:32:de:4e:2b:77:32:eb:44:8f:6f:32:ec:f8:
                    d1:14:f7:07:56:c2:28:47:fc:47:a7:98:8f:9b:0e:
                    fc:cc:c4:f2:df:47:f6:71:95:2e:08:f0:c1:a2:30:
                    be:31:51:cc:e4:0c:7d:80:71:d6:fe:14:7e:37:08:
                    ce:63:f8:03:99:f7:0f:86:91:84:d1:68:8b:46:be:
                    23:b6:5a:ee:17:63:11:91:08:b9:90:cb:59:4e:73:
                    ab:7e:78:9f:70:6a:60:34:a1:42:ba:d0:9b:4b:52:
                    c8:30:13:20:f8:12:c6:ac:f8:6b:4b:59:d3:7d:8d:
                    2e:52:ef:5a:40:7b:6b:4c:91:31:65:9c:4e:23:37:
                    b7:e2:af:3a:60:59:b1:6c:0c:c8:1d:30:97:23:d8:
                    ae:fa:51:67:c1:81:a9:07:80:4d:a9:0d:2f:67:eb:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:31:D4:AC:F4:DF:F9:EC:15:3F:D1:60:35:A4:00:EC:23:97:85
            X509v3 Authority Key Identifier:
                keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:e2:e2:05:45:e4:4d:82:8b:ed:5d:d8:00:31:70:de:a4:
         1b:01:13:26:c4:be:c7:6e:e3:2d:45:08:8e:cf:87:20:4c:24:
         20:f6:66:78:d3:ca:21:87:6b:3f:2a:8b:07:42:9d:8e:21:69:
         33:9d:fd:51:f5:a7:ec:96:67:13:03:27:02:f8:24:b8:25:a1:
         2b:e0:45:54:bc:a2:7f:6c:2d:af:ba:aa:d5:a6:43:18:f3:ca:
         7a:14:af:05:76:32:06:4b:68:c3:50:39:02:ab:61:c8:26:8f:
         ef:4d:c3:d9:4e:3a:e5:ff:1d:22:07:b7:16:58:bd:aa:3e:40:
         8d:22:23:0d:91:20:89:d6:c7:85:03:12:91:e9:fa:06:18:8f:
         d8:f2:b1:ad:dc:17:f3:cc:78:c7:2c:e1:0f:bd:c6:6e:75:c1:
         55:9e:ca:ea:bf:2f:ac:1a:ac:f9:de:99:f9:13:62:6a:f3:a3:
         78:ae:c4:77:b7:18:fb:2c:01:77:2c:ea:a0:0f:5a:bd:6e:c7:
         c3:e0:20:85:73:4c:f0:7b:db:a0:ed:10:e8:34:2a:1d:ef:46:
         55:11:e9:db:ec:ec:8d:09:17:f9:a2:60:37:52:d8:3f:44:b7:
         b9:8a:59:24:0c:4f:84:5e:fa:08:5e:a2:4a:c3:34:3f:14:72:
         55:29:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:01 2026 by rpki-client