Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
File:                     9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json)
Hash identifier:          PQf5S5IWX7he5k20L9Gbl/JSKWwjvY8gwTj0VW1bDcQ=
Subject key identifier:   F5:BA:AE:40:0B:DF:D6:4A:BC:9C:97:9A:40:B4:5D:C7:17:A4:80:70
Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34
Certificate issuer:       /CN=9FEF44F113313B4929575EF55ED937D41AA80334
Certificate serial:       1AC3FD4CD82B6570A61842E458BAE9BA147BD97E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
Manifest number:          06
Signing time:             Fri 17 Apr 2026 02:44:38 +0000
Manifest this update:     Fri 17 Apr 2026 02:39:38 +0000
Manifest next update:     Sat 18 Apr 2026 05:34:38 +0000
Files and hashes:         1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: Lo9s3rRPbH9kfPFO2fkzAvTRZuLXHlo9X5uQ/tud6BE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c3:fd:4c:d8:2b:65:70:a6:18:42:e4:58:ba:e9:ba:14:7b:d9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334
        Validity
            Not Before: Apr 17 02:39:38 2026 GMT
            Not After : Apr 18 05:34:38 2026 GMT
        Subject: CN=F5BAAE400BDFD64ABC9C979A40B45DC717A48070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:10:49:7c:19:a4:fd:8a:9d:e6:62:e6:69:
                    16:a5:bf:8f:c9:b3:d1:b2:5b:f2:f5:78:91:35:bc:
                    2d:9e:4a:18:91:31:fc:4c:52:20:84:65:45:52:c1:
                    0a:c7:f7:fa:ea:66:87:b8:2d:d1:bb:31:f0:d3:0f:
                    77:f7:22:af:fb:3e:be:69:bf:33:06:a5:f2:63:36:
                    51:2b:d5:fa:88:56:93:cb:50:af:87:ca:c8:f9:54:
                    b1:71:d4:9f:a2:a5:8b:fd:ce:9b:98:67:a1:83:ee:
                    21:85:ea:e6:03:2e:db:80:72:17:de:ce:aa:55:b3:
                    45:a9:77:54:84:da:8f:0a:99:22:a9:e3:7e:65:3f:
                    b7:86:bd:aa:77:f2:17:4c:a7:65:fa:22:fd:4d:33:
                    49:db:7d:43:7d:0f:d3:bf:9c:cf:30:7c:b0:9d:ca:
                    42:81:9e:00:c3:29:e1:c0:bc:8b:38:5a:9c:60:79:
                    2d:70:97:19:ab:21:54:66:2f:f6:86:12:5b:83:95:
                    ed:02:5c:d4:76:1a:e6:b0:61:d1:34:e7:22:c9:7a:
                    b2:bd:28:d4:f0:8b:eb:c9:76:db:b8:c9:06:2b:70:
                    e6:cf:a9:f9:95:60:58:b2:20:f9:58:dd:86:19:87:
                    37:46:2e:81:65:1c:f2:1e:9b:ac:44:e2:b8:93:7f:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:AE:40:0B:DF:D6:4A:BC:9C:97:9A:40:B4:5D:C7:17:A4:80:70
            X509v3 Authority Key Identifier:
                keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:18:2b:d2:06:dd:25:eb:05:1f:ad:2f:88:ca:15:53:9f:35:
         68:cd:2e:94:1f:7a:b9:66:07:65:32:87:5d:99:84:47:1c:ec:
         6d:c0:dc:6e:26:19:d8:9a:e4:3b:28:3f:f9:23:76:fb:08:18:
         85:48:df:c3:94:dd:2d:41:a5:47:27:0e:7d:99:3c:98:92:17:
         68:d7:40:cc:09:5e:65:4c:5c:0b:25:5e:c7:f6:86:09:8b:0f:
         c0:f2:62:18:49:84:4e:5c:e3:cb:d7:08:5b:d9:98:b3:d8:01:
         5b:3b:26:c3:d9:b2:05:05:87:79:0a:f3:81:7a:46:8f:4b:45:
         05:b6:08:22:36:9e:49:4d:e6:78:07:9e:61:47:da:f1:36:5d:
         03:d9:92:69:3b:01:f5:70:da:0b:a6:82:e6:eb:c9:21:93:40:
         92:fb:75:9e:61:ef:78:18:17:66:cc:5f:94:fd:4d:28:f0:c0:
         b6:a7:c7:c7:80:88:10:63:a9:40:5b:8f:57:5c:f6:5f:6f:37:
         f4:e4:9d:69:59:3e:fb:27:6c:fe:b5:49:74:54:9c:45:62:9e:
         d4:f3:ce:61:5d:e6:4c:e3:b9:7e:8c:98:7a:19:08:c3:0e:1a:
         54:84:1b:cc:58:e1:8c:93:c4:bb:1f:3b:59:05:47:88:df:18:
         35:f6:17:3d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGsP9TNgrZXCmGELkWLrpuhR72X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQx
QUE4MDMzNDAeFw0yNjA0MTcwMjM5MzhaFw0yNjA0MTgwNTM0MzhaMDMxMTAvBgNV
BAMTKEY1QkFBRTQwMEJERkQ2NEFCQzlDOTc5QTQwQjQ1REM3MTdBNDgwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjRBJfBmk/Yqd5mLmaRalv4/J
s9GyW/L1eJE1vC2eShiRMfxMUiCEZUVSwQrH9/rqZoe4LdG7MfDTD3f3Iq/7Pr5p
vzMGpfJjNlEr1fqIVpPLUK+Hysj5VLFx1J+ipYv9zpuYZ6GD7iGF6uYDLtuAchfe
zqpVs0Wpd1SE2o8KmSKp435lP7eGvap38hdMp2X6Iv1NM0nbfUN9D9O/nM8wfLCd
ykKBngDDKeHAvIs4WpxgeS1wlxmrIVRmL/aGEluDle0CXNR2GuawYdE05yLJerK9
KNTwi+vJdtu4yQYrcObPqfmVYFiyIPlY3YYZhzdGLoFlHPIem6xE4riTf1GhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU9bquQAvf1kq8nJeaQLRdxxekgHAwHwYDVR0j
BBgwFoAUn+9E8RMxO0kpV171Xtk31BqoAzQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk5Nzg0Nzg3NjE0MTA1Ny8wLzlGRUY0NEYxMTMzMTNCNDkyOTU3NUVGNTVFRDkz
N0Q0MUFBODAzMzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU5OTc4NDc4NzYxNDEwNTcvMC85RkVGNDRGMTEzMzEz
QjQ5Mjk1NzVFRjU1RUQ5MzdENDFBQTgwMzM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxgr0gbdJesF
H60viMoVU581aM0ulB96uWYHZTKHXZmERxzsbcDcbiYZ2JrkOyg/+SN2+wgYhUjf
w5TdLUGlRycOfZk8mJIXaNdAzAleZUxcCyVex/aGCYsPwPJiGEmETlzjy9cIW9mY
s9gBWzsmw9myBQWHeQrzgXpGj0tFBbYIIjaeSU3meAeeYUfa8TZdA9mSaTsB9XDa
C6aC5uvJIZNAkvt1nmHveBgXZsxflP1NKPDAtqfHx4CIEGOpQFuPV1z2X2839OSd
aVk++yds/rVJdFScRWKe1PPOYV3mTOO5foyYehkIww4aVIQbzFjhjJPEux87WQVH
iN8YNfYXPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:35 2026 by rpki-client