Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
File:                     E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft (raw, json)
Hash identifier:          5ux0eDQduXA1ArhgpcyEk+LISse89O8iHoU4fvivRbc=
Subject key identifier:   75:F6:D0:2C:43:F9:41:1F:BA:E1:6D:E8:0A:55:4A:30:8D:DB:2F:70
Authority key identifier: E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47
Certificate issuer:       /CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347
Certificate serial:       0D90BD1EE3E08D03E74DED4F85FEB2E72A36B673
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
Manifest number:          CA
Signing time:             Fri 16 Oct 2026 11:17:27 +0000
Manifest this update:     Fri 16 Oct 2026 11:12:27 +0000
Manifest next update:     Mon 19 Oct 2026 17:13:27 +0000
Files and hashes:         1: E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl (hash: xpkRfjCpktI7E1r6FoUwxnUYsx0mPI/iDcigflByRu8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 11:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:90:bd:1e:e3:e0:8d:03:e7:4d:ed:4f:85:fe:b2:e7:2a:36:b6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347
        Validity
            Not Before: Oct 16 11:12:27 2026 GMT
            Not After : Oct 19 17:13:27 2026 GMT
        Subject: CN=75F6D02C43F9411FBAE16DE80A554A308DDB2F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:92:2b:e0:75:a7:15:67:21:90:f4:a8:cf:
                    39:7c:a3:3f:75:45:94:99:16:17:31:61:87:56:d9:
                    fe:41:7d:f3:90:f6:62:65:52:2e:40:da:6d:e3:7e:
                    a8:4f:0a:2f:59:f5:b6:15:4a:6b:91:8a:b7:fc:00:
                    ec:df:e6:5d:a9:92:90:8d:af:5f:01:d9:25:45:35:
                    46:81:f3:c9:72:6d:a7:ab:f4:32:55:17:41:f7:8d:
                    0f:a7:f7:cf:9f:cb:a8:8c:f9:ba:6c:ff:39:62:ff:
                    15:89:bb:d5:dc:ed:72:fd:8f:21:9a:83:a6:e4:57:
                    97:d1:c1:ea:f9:c6:83:bb:bf:9b:f6:80:7b:a2:f3:
                    14:22:f3:48:6f:81:d9:d2:49:11:90:f5:c8:6a:0a:
                    cc:b0:b8:40:47:1c:57:6c:6b:c8:06:00:23:32:9b:
                    f9:56:46:0e:30:3f:b4:91:70:94:77:d1:2e:1d:e3:
                    50:11:5e:b7:7f:62:b8:14:9f:2b:bb:01:bb:33:fc:
                    ff:1c:11:a5:7c:d5:b8:fb:b4:b4:61:ce:35:c5:0a:
                    ff:8b:fd:8c:63:d4:a6:b2:44:ef:2a:03:42:40:62:
                    54:bd:eb:92:bf:e6:db:c6:07:bf:a5:b2:6d:ac:b3:
                    4c:48:7a:2a:6e:4c:27:b8:10:8b:5d:91:b6:3f:f0:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:D0:2C:43:F9:41:1F:BA:E1:6D:E8:0A:55:4A:30:8D:DB:2F:70
            X509v3 Authority Key Identifier:
                keyid:E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:21:6a:e2:79:90:63:0e:0e:00:63:e3:f4:3f:5e:fc:b0:
         58:08:72:84:86:cd:0a:82:9a:75:f4:99:bf:bb:8b:05:e6:2e:
         a7:2d:1d:57:48:e4:e0:c7:e8:b7:c9:a2:94:ed:29:b4:3f:af:
         9c:b4:4b:cf:f0:e2:15:fa:2f:4c:f0:c1:f3:e7:c1:28:eb:41:
         6c:fb:94:b0:29:cc:ca:8f:9f:6e:5e:95:60:97:55:d3:76:f2:
         50:6b:d1:2a:b1:e4:a9:c4:54:98:b5:75:20:d4:ef:a4:0c:10:
         85:9f:2c:fd:eb:46:c7:0d:cd:a9:a1:ae:38:c2:c0:0f:b1:9d:
         5e:22:72:4d:41:da:38:98:b2:cd:d7:66:3b:7d:48:07:f9:bc:
         dd:d5:92:dc:b0:54:d2:34:b0:29:37:f5:2e:b1:43:e8:e0:1f:
         b7:75:d1:87:40:5f:fb:a8:c1:21:fa:61:c9:91:f7:2f:3a:0a:
         41:3c:69:74:36:42:67:6b:ed:3a:e9:cb:c4:f2:25:d9:63:61:
         1d:54:08:35:d7:4f:93:e7:9f:5f:2f:ba:ba:59:33:0b:fc:53:
         f7:7b:d9:ff:56:a2:e3:7b:0b:90:dc:dd:a9:e5:f6:35:d1:e4:
         6c:8f:e9:d2:53:4c:74:e9:08:e8:5d:64:31:be:37:4c:4d:b8:
         00:83:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:23:00 2026 by rpki-client