Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
File:                     9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft (raw, json)
Hash identifier:          8W808MeJKdfE3xEzASr2uL33QXgj+kbYM5jCM5fj5U0=
Subject key identifier:   0B:8F:8D:23:5E:2E:0D:A2:AD:6F:0D:8D:15:02:99:41:5B:82:CB:4B
Authority key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Certificate issuer:       /CN=A914EAE40000/serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Certificate serial:       64FDC3A6BE45669A55FDA979DE32558467B766CC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
Manifest number:          0320
Signing time:             Tue 28 Jul 2026 09:16:27 +0000
Manifest this update:     Tue 28 Jul 2026 09:11:27 +0000
Manifest next update:     Wed 29 Jul 2026 09:36:27 +0000
Files and hashes:         1: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl (hash: AIl51gnOZaxR8hsLE41NQl9CkFrZt3oHULu8TkUC4EI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 09:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fd:c3:a6:be:45:66:9a:55:fd:a9:79:de:32:55:84:67:b7:66:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
        Validity
            Not Before: Jul 28 09:11:27 2026 GMT
            Not After : Jul 29 09:36:27 2026 GMT
        Subject: CN=0B8F8D235E2E0DA2AD6F0D8D150299415B82CB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:73:60:3a:34:b2:ea:6d:0e:5d:89:77:19:
                    cc:e5:9d:2f:17:5a:b4:eb:c6:1a:2e:c0:13:b2:70:
                    0d:34:a2:dc:2c:8d:07:85:17:ba:04:67:d5:61:c4:
                    ee:dd:9f:80:a6:2e:e5:78:44:c3:e9:93:a5:db:f9:
                    db:3d:33:2f:dc:4b:26:61:a1:cc:0f:a9:3c:8d:17:
                    08:e1:91:a7:98:a4:6c:69:dc:27:1c:69:ec:91:ba:
                    d6:83:1e:bd:87:e9:a7:93:37:13:e8:e4:96:7e:e4:
                    4f:29:ce:ea:f3:86:89:4f:e4:96:2d:7e:2e:8a:e6:
                    9c:a1:97:17:f7:f7:6b:42:c6:5b:c7:0e:e1:33:a3:
                    00:48:f7:c6:d8:b6:2d:96:98:de:b4:2f:34:22:94:
                    b3:23:8c:a0:ec:70:2b:5e:c6:54:a4:e9:a3:af:ec:
                    b1:db:95:53:c9:66:7e:bb:34:e9:59:d4:86:8d:7d:
                    fe:8f:7b:22:0e:5c:27:7d:f2:ca:e3:4b:5b:2a:1f:
                    55:a9:97:73:ff:b2:29:15:72:69:7b:9f:08:df:6f:
                    10:36:d0:b1:a9:6a:a1:75:b2:22:b4:5c:31:a4:99:
                    e1:80:91:6b:4c:fc:96:da:97:ec:08:9a:6e:5c:6b:
                    41:3b:eb:00:95:d3:3f:05:3a:bc:da:d3:ab:c0:1d:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8F:8D:23:5E:2E:0D:A2:AD:6F:0D:8D:15:02:99:41:5B:82:CB:4B
            X509v3 Authority Key Identifier:
                keyid:9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:dc:82:d7:be:20:dc:f9:c9:bb:20:71:cd:76:1b:fd:15:
         ca:03:58:f3:96:c1:b3:20:d1:cc:39:d9:57:53:39:3f:43:94:
         3e:bf:e2:11:79:e3:81:50:a3:d8:cf:a1:46:2b:12:d0:fe:41:
         59:03:f3:05:11:a9:0f:59:bb:03:ee:54:d4:65:2f:7d:46:f7:
         1e:57:c4:b5:45:54:7e:53:6a:94:08:1c:a2:06:4e:a7:f8:67:
         6e:66:ac:83:89:d5:06:e9:c4:b2:62:f5:4d:e5:56:d8:1e:78:
         90:f2:62:ca:20:ab:49:50:bf:3e:83:83:b2:0e:69:d3:ac:47:
         06:7a:9c:c9:dd:b0:cf:9b:c4:15:f7:b3:24:eb:6f:c1:15:0f:
         94:90:6e:47:b0:bc:a2:d2:3d:f2:ce:d8:9c:10:f3:8d:13:8d:
         62:aa:50:95:f2:5d:68:50:c1:09:e8:a6:41:83:77:84:64:88:
         02:77:d6:29:60:7c:2c:f9:31:87:c9:7f:af:09:44:d4:ed:6e:
         44:cf:e6:25:5d:de:13:6d:91:fa:d8:7b:1e:fc:d2:e1:4d:85:
         e6:28:0c:ca:0f:f6:e2:dc:4b:db:dc:0e:ba:66:03:4e:a0:02:
         78:f9:6f:ce:5e:e4:66:17:2f:fb:cc:0c:87:8a:dc:c6:aa:71:
         4e:f6:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:00 2026 by rpki-client