Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
File:                     E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft (raw, json)
Hash identifier:          G5WeG+Lhh8KV1yALFL9U/Mfsw8d/TRv+i/wHzFgmugE=
Subject key identifier:   91:F0:6D:FC:70:E2:94:BC:34:16:65:C2:1F:85:AE:59:97:41:FD:53
Authority key identifier: E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47
Certificate issuer:       /CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347
Certificate serial:       668D7E778811ABA528D3A2923D3E64FE47D98E08
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
Manifest number:          02
Signing time:             Thu 16 Apr 2026 23:39:36 +0000
Manifest this update:     Thu 16 Apr 2026 23:34:36 +0000
Manifest next update:     Sat 18 Apr 2026 01:32:36 +0000
Files and hashes:         1: E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl (hash: zyH9oi1RuqQgjQap2+sCv5Q8EhmoyZq9XvAu9+IgEAM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8d:7e:77:88:11:ab:a5:28:d3:a2:92:3d:3e:64:fe:47:d9:8e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347
        Validity
            Not Before: Apr 16 23:34:36 2026 GMT
            Not After : Apr 18 01:32:36 2026 GMT
        Subject: CN=91F06DFC70E294BC341665C21F85AE599741FD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:b9:30:d4:46:86:9a:ed:bc:87:6d:5f:b1:
                    f9:30:b0:c3:75:8c:d3:bc:10:18:54:84:31:ad:16:
                    71:ca:13:15:b9:ea:f4:d8:b7:ee:b5:e1:1c:a1:8c:
                    d6:cc:7f:a7:bb:b4:1b:c5:31:71:9f:db:cb:06:94:
                    4d:49:ca:e1:df:6a:f4:7c:fb:32:3d:d8:63:63:05:
                    85:89:e7:55:74:f8:8b:23:26:46:66:f3:aa:9a:20:
                    13:dd:7e:69:90:ab:c0:14:39:99:dc:89:01:ab:14:
                    8f:0e:c1:86:9e:c9:a1:12:01:ad:c7:c0:4a:f8:35:
                    93:79:f6:7b:47:6b:ae:00:4a:d1:f4:38:6a:29:8c:
                    99:a2:e9:0f:90:f1:1b:fa:ae:a4:82:1f:d8:c5:91:
                    42:8e:46:21:42:b1:f0:a3:22:11:59:ac:a5:47:62:
                    bd:a7:85:f5:71:28:11:d7:1f:02:e8:c5:6d:dc:b8:
                    61:5c:4f:1e:cf:58:6e:e5:12:41:c6:1a:2e:f0:0d:
                    9e:e0:fb:eb:ea:41:fe:a1:e4:84:7e:56:e4:23:be:
                    cd:e4:bb:ae:ee:fb:8f:7e:a9:9d:18:ac:fe:8d:5c:
                    ae:4d:92:d9:e8:5a:6f:77:d0:29:68:ae:3b:02:7e:
                    ce:18:82:c3:d9:d8:50:84:03:0d:ad:49:62:37:a6:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:6D:FC:70:E2:94:BC:34:16:65:C2:1F:85:AE:59:97:41:FD:53
            X509v3 Authority Key Identifier:
                keyid:E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:da:a8:ab:21:1f:be:b4:ab:66:7d:7a:33:a1:6f:08:54:c0:
         42:a9:1f:00:53:52:f4:1e:f4:3c:af:60:2b:a0:ec:d3:eb:16:
         8e:19:d5:51:29:59:fe:01:c7:ae:eb:92:25:fa:f7:a5:76:44:
         68:ff:20:44:af:4d:21:ca:75:3f:fa:3a:6b:e6:b0:ff:94:d9:
         e7:08:d5:aa:1e:fc:9e:39:da:08:56:e8:04:19:2d:51:b9:84:
         84:c9:dd:4e:b5:05:4e:f2:66:8a:a9:58:48:0a:37:12:ff:9c:
         0f:11:c9:7a:28:5c:95:04:54:54:f3:48:d7:93:2a:ea:ca:9d:
         93:f3:04:e4:46:5f:93:c6:1a:9e:da:5b:f6:76:25:43:90:46:
         3d:c8:27:60:2e:dd:16:d3:e9:1d:05:03:6e:aa:74:6c:7b:35:
         c4:c1:30:e1:2d:a6:92:e0:5c:1b:54:5c:e9:66:6e:5e:dd:10:
         d3:47:5b:ec:5a:ca:bf:69:21:82:ea:20:65:64:ba:89:5f:41:
         8c:de:7e:cc:56:42:23:ea:dd:cf:04:ec:a5:b2:da:23:87:9e:
         e1:ab:ed:e1:e4:8c:42:e1:9c:4a:52:2d:bb:78:c4:ca:2f:a6:
         40:bc:43:3d:3e:58:60:da:f5:1e:96:96:08:81:5d:9f:03:b6:
         f1:81:8d:50
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZo1+d4gRq6Uo06KSPT5k/kfZjggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFQkU1NkM2N0EwMjcxRjhERDJDNjUxMTAyREM5NTNF
NEQ5ODM0NzAeFw0yNjA0MTYyMzM0MzZaFw0yNjA0MTgwMTMyMzZaMDMxMTAvBgNV
BAMTKDkxRjA2REZDNzBFMjk0QkMzNDE2NjVDMjFGODVBRTU5OTc0MUZENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhrkw1EaGmu28h21fsfkwsMN1
jNO8EBhUhDGtFnHKExW56vTYt+614RyhjNbMf6e7tBvFMXGf28sGlE1JyuHfavR8
+zI92GNjBYWJ51V0+IsjJkZm86qaIBPdfmmQq8AUOZnciQGrFI8OwYaeyaESAa3H
wEr4NZN59ntHa64AStH0OGopjJmi6Q+Q8Rv6rqSCH9jFkUKORiFCsfCjIhFZrKVH
Yr2nhfVxKBHXHwLoxW3cuGFcTx7PWG7lEkHGGi7wDZ7g++vqQf6h5IR+VuQjvs3k
u67u+49+qZ0YrP6NXK5NktnoWm930ClorjsCfs4YgsPZ2FCEAw2tSWI3pilvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkfBt/HDilLw0FmXCH4WuWZdB/VMwHwYDVR0j
BBgwFoAU5uvlbGegJx+N0sZREC3JU+TZg0cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzAzMzIxMzEyMjk2OTYwMi8wL0U2RUJFNTZDNjdBMDI3MUY4REQyQzY1MTEwMkRD
OTUzRTREOTgzNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTZFQkU1NkM2N0EwMjcxRjhERDJDNjUxMTAyREM5NTNFNEQ5ODM0Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwMzMyMTMxMjI5Njk2MDIvMC9FNkVCRTU2QzY3QTAy
NzFGOEREMkM2NTExMDJEQzk1M0U0RDk4MzQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAytqoqyEfvrSr
Zn16M6FvCFTAQqkfAFNS9B70PK9gK6Ds0+sWjhnVUSlZ/gHHruuSJfr3pXZEaP8g
RK9NIcp1P/o6a+aw/5TZ5wjVqh78njnaCFboBBktUbmEhMndTrUFTvJmiqlYSAo3
Ev+cDxHJeihclQRUVPNI15Mq6sqdk/ME5EZfk8Yantpb9nYlQ5BGPcgnYC7dFtPp
HQUDbqp0bHs1xMEw4S2mkuBcG1Rc6WZuXt0Q00db7FrKv2khguogZWS6iV9BjN5+
zFZCI+rdzwTspbLaI4ee4avt4eSMQuGcSlItu3jEyi+mQLxDPT5YYNr1HpaWCIFd
nwO28YGNUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:00 2026 by rpki-client