Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
File:                     64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json)
Hash identifier:          WF0NxS4dmTsTiopEDqREcocG4jtTFgCagv6otepMR9E=
Subject key identifier:   B7:11:1D:C7:C3:97:E0:06:B3:9C:DA:29:26:AC:80:85:28:B3:1C:EB
Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C
Certificate issuer:       /CN=64CE724CC33744853B20D6E7922A2F808B8C300C
Certificate serial:       4EA1C69F87A0CFB1210A81700345D2410D639960
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
Manifest number:          03
Signing time:             Fri 17 Apr 2026 12:19:43 +0000
Manifest this update:     Fri 17 Apr 2026 12:14:43 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:43 +0000
Files and hashes:         1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: lNA+HIxrLQYaADwr4gG6LcI6xTb7XiuKbENh1ln9qPg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a1:c6:9f:87:a0:cf:b1:21:0a:81:70:03:45:d2:41:0d:63:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C
        Validity
            Not Before: Apr 17 12:14:43 2026 GMT
            Not After : Apr 18 15:01:43 2026 GMT
        Subject: CN=B7111DC7C397E006B39CDA2926AC808528B31CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:86:fb:73:14:84:f3:09:96:cf:26:8a:fb:
                    a4:ed:15:4a:2b:97:72:44:4c:cb:fa:6d:7a:2f:0e:
                    18:38:46:56:66:60:e7:58:11:8a:d9:22:bf:1e:76:
                    1e:63:4d:13:10:0a:cc:ec:11:55:97:60:0f:fa:09:
                    71:12:b6:5d:2f:2e:3a:38:06:72:f4:f8:30:92:99:
                    33:23:f7:00:3d:30:90:ea:a6:d8:21:c8:89:58:aa:
                    00:87:1e:93:b8:b5:2d:4d:a2:37:c9:47:1a:5a:48:
                    6b:28:28:de:a9:54:a2:69:68:cd:2d:94:d0:f4:10:
                    f3:07:9d:36:31:d3:87:a1:ce:c4:c2:39:d3:f2:d9:
                    45:f0:39:e7:6a:c9:8d:c9:02:21:e0:30:cf:39:40:
                    b0:99:11:5c:82:cb:3d:67:ce:e1:89:55:b0:12:54:
                    c7:b0:0f:78:4d:f5:80:a1:69:74:98:c1:fc:e3:d1:
                    e6:4d:ce:78:6f:c1:0c:c9:fe:3e:08:0c:40:7f:e8:
                    07:a0:ae:67:54:b4:ca:c6:c0:83:a4:81:73:ff:c5:
                    8a:f4:42:76:bf:80:8e:f5:a5:94:88:f1:1a:e4:8d:
                    d7:e1:fb:62:c6:89:f3:b9:6e:6f:49:c4:9b:97:e9:
                    03:c6:d7:3a:f8:9b:b0:18:51:a9:e6:a3:e3:6b:6b:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:1D:C7:C3:97:E0:06:B3:9C:DA:29:26:AC:80:85:28:B3:1C:EB
            X509v3 Authority Key Identifier:
                keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:80:08:15:9e:55:60:5e:e0:94:73:e6:f1:f6:bf:9a:e2:ec:
         ce:2e:e4:2d:44:1e:54:70:f1:88:c5:e7:db:33:87:70:44:71:
         4d:47:b9:39:1b:e3:a1:2e:10:08:e2:87:c4:9a:6b:a4:b1:d4:
         66:d9:0d:9e:7f:a0:45:c1:3f:5c:c1:b3:7e:79:b8:d0:3f:55:
         04:62:0e:c0:40:1c:6e:39:91:40:a8:bb:ef:57:22:d9:e4:9d:
         fc:a5:13:5a:46:b0:1c:80:db:9b:e6:71:94:ff:ed:10:98:fb:
         c4:c9:eb:a6:0b:7a:fd:7e:99:84:f1:a5:1e:42:01:82:f6:04:
         ac:8b:67:61:9d:a8:53:05:46:46:d1:d8:f8:0f:d9:a4:4f:2e:
         a8:17:6b:1b:8b:cd:5b:c0:55:a3:4b:0f:8b:c2:7b:81:b8:1c:
         60:27:ab:f4:4d:bf:d0:6d:63:36:e5:06:d0:b4:e4:f5:ab:72:
         08:d6:5c:c7:3a:5d:5b:39:93:af:5c:23:ef:d8:9d:06:0b:a3:
         2d:64:75:79:3e:7e:27:e7:3d:f6:24:e3:75:e1:d7:04:5a:33:
         da:2d:99:28:8b:7b:42:d2:c5:3c:a9:47:e9:9a:40:c9:f0:8f:
         16:f6:e3:58:ea:e3:ec:3e:e1:f9:72:29:2b:b9:33:c2:37:fc:
         fd:9c:a2:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTqHGn4egz7EhCoFwA0XSQQ1jmWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4
QjhDMzAwQzAeFw0yNjA0MTcxMjE0NDNaFw0yNjA0MTgxNTAxNDNaMDMxMTAvBgNV
BAMTKEI3MTExREM3QzM5N0UwMDZCMzlDREEyOTI2QUM4MDg1MjhCMzFDRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLob7cxSE8wmWzyaK+6TtFUor
l3JETMv6bXovDhg4RlZmYOdYEYrZIr8edh5jTRMQCszsEVWXYA/6CXEStl0vLjo4
BnL0+DCSmTMj9wA9MJDqptghyIlYqgCHHpO4tS1NojfJRxpaSGsoKN6pVKJpaM0t
lND0EPMHnTYx04ehzsTCOdPy2UXwOedqyY3JAiHgMM85QLCZEVyCyz1nzuGJVbAS
VMewD3hN9YChaXSYwfzj0eZNznhvwQzJ/j4IDEB/6AegrmdUtMrGwIOkgXP/xYr0
Qna/gI71pZSI8Rrkjdfh+2LGifO5bm9JxJuX6QPG1zr4m7AYUanmo+Nra2R1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUtxEdx8OX4AaznNopJqyAhSizHOswHwYDVR0j
BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy
RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0
NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4AIFZ5VYF7g
lHPm8fa/muLszi7kLUQeVHDxiMXn2zOHcERxTUe5ORvjoS4QCOKHxJprpLHUZtkN
nn+gRcE/XMGzfnm40D9VBGIOwEAcbjmRQKi771ci2eSd/KUTWkawHIDbm+ZxlP/t
EJj7xMnrpgt6/X6ZhPGlHkIBgvYErItnYZ2oUwVGRtHY+A/ZpE8uqBdrG4vNW8BV
o0sPi8J7gbgcYCer9E2/0G1jNuUG0LTk9atyCNZcxzpdWzmTr1wj79idBgujLWR1
eT5+J+c99iTjdeHXBFoz2i2ZKIt7QtLFPKlH6ZpAyfCPFvbjWOrj7D7h+XIpK7kz
wjf8/ZyiFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:01 2026 by rpki-client