Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
File:                     A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json)
Hash identifier:          vm1vm93nTNa8v1jpxRuPTGrN9rox8l5LcpmniXVmkGY=
Subject key identifier:   7F:62:6A:35:EA:8F:A1:FB:54:F1:DA:04:81:C8:83:0B:34:48:75:B6
Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77
Certificate issuer:       /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277
Certificate serial:       08BC6AA941449B8723CCE509029310DB2E7D32A2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
Manifest number:          49
Signing time:             Sat 13 Jun 2026 18:01:59 +0000
Manifest this update:     Sat 13 Jun 2026 17:56:59 +0000
Manifest next update:     Sun 14 Jun 2026 18:38:59 +0000
Files and hashes:         1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: VTkGiDXuVxWi1LvGWzP+OdRH/04g0wiSQMe9WuoMG8Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bc:6a:a9:41:44:9b:87:23:cc:e5:09:02:93:10:db:2e:7d:32:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277
        Validity
            Not Before: Jun 13 17:56:59 2026 GMT
            Not After : Jun 14 18:38:59 2026 GMT
        Subject: CN=7F626A35EA8FA1FB54F1DA0481C8830B344875B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:a7:00:c1:00:03:9e:12:02:71:b2:0b:31:
                    7e:4f:24:7d:2d:c4:7c:32:4b:15:6d:91:d2:20:7e:
                    8c:b1:29:fe:87:c5:37:3b:9d:13:ed:7d:54:e8:b5:
                    85:4e:15:18:67:f0:fd:2b:0b:c8:f5:52:70:2d:e4:
                    42:e5:17:a2:20:b2:f3:48:32:cf:21:17:5c:ea:ae:
                    57:6e:30:b1:49:7e:e8:5b:c2:f2:ef:d1:d8:6f:6a:
                    c3:c4:b0:99:0b:6e:ca:79:95:75:39:63:a3:ba:62:
                    9b:a2:8b:6d:e3:57:ee:b5:06:52:81:92:c6:b8:c4:
                    2a:40:4c:67:d6:52:31:42:a2:38:fc:b1:6d:88:fc:
                    94:32:c6:40:34:be:0e:52:03:2b:ee:e1:44:b6:57:
                    30:07:d0:fb:82:09:29:bf:dc:05:4a:af:0e:2e:3f:
                    38:ee:20:2a:9f:12:31:2d:cc:0b:e0:f6:b8:9b:c9:
                    e4:b2:d8:00:f7:0e:75:26:f6:46:9a:8e:7b:83:88:
                    2c:8b:1d:49:bd:ad:ec:4e:c9:7e:20:f2:1f:c5:1c:
                    73:19:a7:30:9f:df:99:06:47:41:1d:43:e5:77:75:
                    6c:96:0e:44:25:5c:b5:0b:ae:6f:b4:cc:86:a1:7d:
                    ac:fd:25:1b:9d:75:64:02:23:ed:42:25:3b:21:c9:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:6A:35:EA:8F:A1:FB:54:F1:DA:04:81:C8:83:0B:34:48:75:B6
            X509v3 Authority Key Identifier:
                keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:cd:e2:13:63:7f:ee:68:e0:26:ec:02:05:d7:22:5e:98:79:
         33:a8:8c:9d:34:40:f4:1b:79:e6:07:f9:62:98:5a:6f:59:89:
         4e:19:4e:cd:bf:56:a0:a0:36:a1:a8:24:9b:97:e0:f9:af:f0:
         5d:69:e2:ec:6c:d3:4c:fd:0b:25:d8:4a:ae:bc:60:fc:26:11:
         ce:f6:6e:fd:39:4e:ff:5d:5b:ea:dd:5f:ba:68:78:b8:85:3f:
         d9:3b:13:1f:bf:bf:d9:a4:8d:2a:f1:3a:9e:c9:2b:32:5f:4c:
         0f:f0:39:b7:6f:5f:ea:37:bc:1a:1a:a5:1a:c5:7a:45:db:cc:
         ce:0a:c3:de:e2:25:d9:9b:94:69:cd:67:da:5a:9e:5c:e9:d9:
         70:d0:b8:fe:73:b3:5c:d6:d3:33:0a:2b:b9:a8:2f:04:ba:a5:
         09:00:36:e8:59:30:e6:57:f3:81:86:23:d1:c5:ee:db:54:5e:
         c1:4e:39:76:7c:15:9f:81:b5:b5:03:fa:af:aa:fd:e1:a0:1d:
         1c:b3:68:9e:16:fb:62:7f:ac:ef:29:aa:c3:35:01:8b:d8:bb:
         2b:1d:45:37:40:70:34:b1:c9:a9:85:68:2c:07:a3:63:ef:5e:
         0e:05:28:d6:34:3e:40:d1:a6:14:9e:dc:e2:fa:7e:cb:33:3c:
         f1:f4:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:00 2026 by rpki-client