Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
File:                     64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json)
Hash identifier:          JrkpExgF3f1EkXbDc8Uuyo/zyrF1vZgb3HM71yUCw8I=
Subject key identifier:   DD:50:6D:5E:E3:B2:4F:66:C0:FC:82:2E:8C:FE:26:8E:81:00:25:93
Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C
Certificate issuer:       /CN=64CE724CC33744853B20D6E7922A2F808B8C300C
Certificate serial:       2BB1954F2FEF7C790997E58D84217CC8542F1375
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
Manifest number:          4E
Signing time:             Sat 13 Jun 2026 16:46:57 +0000
Manifest this update:     Sat 13 Jun 2026 16:41:57 +0000
Manifest next update:     Sun 14 Jun 2026 20:28:57 +0000
Files and hashes:         1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: Ad1F9O62TtfyhGObeV1M+KlxpnlLDZfjR54aKhZ3KOE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b1:95:4f:2f:ef:7c:79:09:97:e5:8d:84:21:7c:c8:54:2f:13:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C
        Validity
            Not Before: Jun 13 16:41:57 2026 GMT
            Not After : Jun 14 20:28:57 2026 GMT
        Subject: CN=DD506D5EE3B24F66C0FC822E8CFE268E81002593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:d8:15:82:82:08:bf:fe:e6:74:01:90:e0:
                    aa:d9:b6:78:fd:e9:ca:55:8f:f8:dc:37:f5:9b:7c:
                    2a:05:48:d6:90:34:55:9c:6c:51:c1:9b:bd:4c:1e:
                    cf:5f:1e:2d:d5:4a:36:79:55:7d:3e:76:70:69:7d:
                    68:2b:bf:4d:bc:69:47:61:14:0b:ca:cb:7f:8c:5e:
                    55:5b:13:17:9c:3d:49:5d:40:1f:4d:ef:e0:fd:64:
                    6b:17:4f:4d:f5:d2:6c:88:36:63:0f:0a:e2:98:de:
                    9d:83:dd:28:49:4d:53:9c:4b:45:a7:2a:7e:f0:0f:
                    e8:fd:50:d1:42:c9:56:aa:19:07:dd:02:8a:5a:01:
                    1f:4c:f4:c3:5f:ae:26:97:63:e5:53:49:d2:93:eb:
                    46:9c:3d:d6:47:d4:a6:3b:db:cd:b9:2c:8e:9d:5a:
                    af:9f:70:51:94:ea:71:89:89:81:4a:2d:85:87:e9:
                    1a:96:d1:39:6d:15:72:c4:52:f4:13:57:cb:7a:40:
                    73:92:7a:69:c9:9e:51:e5:0c:e9:08:24:97:0e:26:
                    f3:c0:74:df:44:8c:dc:1c:c6:3b:78:1b:86:b2:72:
                    a6:ad:fd:b2:82:3a:d3:6a:87:f0:a8:b2:13:fa:45:
                    a4:60:0b:c1:d7:da:9b:0d:92:54:da:50:f7:af:bf:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:6D:5E:E3:B2:4F:66:C0:FC:82:2E:8C:FE:26:8E:81:00:25:93
            X509v3 Authority Key Identifier:
                keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:98:af:e0:a8:86:c4:f4:43:42:e8:57:c8:63:31:04:f4:
         2d:08:ff:32:bb:0b:ab:ba:c6:b9:8e:26:0e:ef:3b:08:c9:4d:
         9f:ff:9d:cc:df:2c:ec:e4:3c:c4:f8:ca:14:49:6e:ee:8d:f4:
         70:dc:f9:7c:e0:d1:82:d9:5e:4a:df:9f:ff:0a:57:86:d8:c6:
         a2:09:94:04:53:3c:08:2a:4d:2a:9b:f9:aa:13:6e:c2:3a:7f:
         3b:9e:d7:b3:c6:18:ee:0b:05:3e:e7:3c:b1:cb:cb:f5:42:60:
         2f:6c:17:4e:18:e1:45:a1:64:5e:62:d8:d9:4c:5a:39:5c:b5:
         ff:15:b9:27:71:af:d0:63:28:7c:7c:ff:f7:8c:dd:4f:33:6c:
         8e:c9:55:90:25:6d:6c:26:9b:86:0e:c5:ea:2c:ff:b8:62:80:
         8d:61:9f:c5:ce:ae:9c:ae:b3:44:de:33:5b:1d:d2:62:1c:8e:
         fd:92:ee:6b:3c:6b:f5:d1:5d:c9:cc:b8:fc:56:de:43:c5:90:
         9d:83:49:39:c1:43:83:70:62:4e:00:f3:0f:1f:28:33:fb:76:
         7e:af:e0:9a:20:16:54:1d:76:64:39:f8:c9:78:4d:66:e1:3b:
         b1:d4:9b:33:24:30:74:bd:93:7b:c1:aa:df:35:a4:9e:3a:b2:
         35:8e:ba:03
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUK7GVTy/vfHkJl+WNhCF8yFQvE3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4
QjhDMzAwQzAeFw0yNjA2MTMxNjQxNTdaFw0yNjA2MTQyMDI4NTdaMDMxMTAvBgNV
BAMTKERENTA2RDVFRTNCMjRGNjZDMEZDODIyRThDRkUyNjhFODEwMDI1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZutgVgoIIv/7mdAGQ4KrZtnj9
6cpVj/jcN/WbfCoFSNaQNFWcbFHBm71MHs9fHi3VSjZ5VX0+dnBpfWgrv028aUdh
FAvKy3+MXlVbExecPUldQB9N7+D9ZGsXT0310myINmMPCuKY3p2D3ShJTVOcS0Wn
Kn7wD+j9UNFCyVaqGQfdAopaAR9M9MNfriaXY+VTSdKT60acPdZH1KY72825LI6d
Wq+fcFGU6nGJiYFKLYWH6RqW0TltFXLEUvQTV8t6QHOSemnJnlHlDOkIJJcOJvPA
dN9EjNwcxjt4G4aycqat/bKCOtNqh/CoshP6RaRgC8HX2psNklTaUPevv7sTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3VBtXuOyT2bA/IIujP4mjoEAJZMwHwYDVR0j
BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy
RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0
NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/+Yr+CohsT0
Q0LoV8hjMQT0LQj/MrsLq7rGuY4mDu87CMlNn/+dzN8s7OQ8xPjKFElu7o30cNz5
fODRgtleSt+f/wpXhtjGogmUBFM8CCpNKpv5qhNuwjp/O57Xs8YY7gsFPuc8scvL
9UJgL2wXThjhRaFkXmLY2UxaOVy1/xW5J3Gv0GMofHz/94zdTzNsjslVkCVtbCab
hg7F6iz/uGKAjWGfxc6unK6zRN4zWx3SYhyO/ZLuazxr9dFdycy4/FbeQ8WQnYNJ
OcFDg3BiTgDzDx8oM/t2fq/gmiAWVB12ZDn4yXhNZuE7sdSbMyQwdL2Te8Gq3zWk
njqyNY66Aw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:26 2026 by rpki-client