Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
File:                     A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft (raw, json)
Hash identifier:          CFp/Eyg2THHl8IoB3yEcNbL+RQ+I6+ILCxsbV0UFTMY=
Subject key identifier:   4F:55:96:0A:90:EA:1C:9E:0C:26:8E:D7:E4:C6:94:96:2E:2C:55:E3
Authority key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77
Certificate issuer:       /CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277
Certificate serial:       6C1DA3B0AAC5B59CAD919A5808D353DC12D2616B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
Manifest number:          86
Signing time:             Wed 29 Jul 2026 16:04:45 +0000
Manifest this update:     Wed 29 Jul 2026 15:59:45 +0000
Manifest next update:     Thu 30 Jul 2026 18:22:45 +0000
Files and hashes:         1: A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl (hash: fEstUJKfBEPK2JCGnFdyDsamaq4LiPbkEh7+XMHYnl0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 18:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1d:a3:b0:aa:c5:b5:9c:ad:91:9a:58:08:d3:53:dc:12:d2:61:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277
        Validity
            Not Before: Jul 29 15:59:45 2026 GMT
            Not After : Jul 30 18:22:45 2026 GMT
        Subject: CN=4F55960A90EA1C9E0C268ED7E4C694962E2C55E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:e5:29:ca:a5:7e:4a:8d:9f:e8:7e:62:5a:
                    cf:2b:d2:34:7f:fc:34:49:e6:3e:06:69:a7:ca:5c:
                    d8:a7:a6:08:0f:50:de:1d:5a:89:a4:cb:a1:3b:ab:
                    c2:6d:82:85:af:a9:68:08:31:53:ed:af:3f:a4:dd:
                    ca:d2:ab:00:12:f9:3c:96:9e:30:8c:de:b4:d2:67:
                    58:bb:8d:5a:bc:a6:25:c8:92:e8:66:7d:4a:20:d1:
                    c2:38:01:87:60:cd:00:df:4d:ca:a2:4b:ea:e3:80:
                    9e:93:4b:fa:3a:0c:c8:24:82:49:37:ed:48:27:47:
                    5a:cd:37:58:3a:78:37:f0:2b:83:16:06:f5:a8:8e:
                    85:89:74:97:09:7e:d9:74:a5:72:f5:30:f2:f5:dd:
                    fd:b8:7e:a0:fc:6b:f4:3f:21:a0:e4:18:9c:30:a6:
                    90:bc:56:2c:39:10:4c:58:28:e3:98:28:ad:42:0b:
                    3e:75:12:ce:87:2e:85:93:8e:ab:e2:aa:1f:06:fa:
                    62:85:b1:ed:83:64:85:50:c1:7c:c5:e8:a1:9d:54:
                    f7:25:55:a2:56:d0:f0:2a:39:1f:cf:8d:4e:43:b1:
                    9e:01:87:e5:17:f1:b2:32:62:a6:9c:f8:bd:27:b4:
                    56:24:00:63:8f:f1:80:1e:dc:54:b2:d4:bb:56:ad:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:96:0A:90:EA:1C:9E:0C:26:8E:D7:E4:C6:94:96:2E:2C:55:E3
            X509v3 Authority Key Identifier:
                keyid:A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:32:1d:31:96:6f:5d:b2:b9:91:37:6b:d7:64:91:9b:4e:
         a1:a4:e7:df:88:3e:ba:7f:89:6c:04:a9:d0:17:24:9f:ce:c9:
         9c:bb:19:c5:d4:b7:08:02:de:36:ce:7a:b8:46:0d:ed:fe:c7:
         e5:01:28:ae:fc:3d:56:a5:d0:23:95:21:7b:88:3a:3d:68:9d:
         77:ae:fc:8e:c7:de:82:49:a2:5f:dd:3d:74:23:e8:6b:f2:a1:
         05:f5:a9:c3:2f:84:0e:c6:52:6b:cb:8b:ed:d9:fb:ac:fe:32:
         17:69:bd:e9:e0:a1:c6:28:86:e9:24:31:9e:6f:c5:5e:6a:ab:
         6f:e1:e6:aa:e7:c5:ae:3a:aa:69:72:e8:21:70:71:43:c5:9d:
         43:51:e5:61:89:f4:9d:86:42:b4:8d:6f:ba:5b:c8:8f:24:66:
         d1:b3:d5:83:aa:f4:f2:35:bf:ce:7b:58:dd:9a:5f:94:68:9b:
         28:5a:f2:9e:90:0b:b2:e2:a0:5d:90:74:79:e9:04:3a:f2:db:
         38:aa:a9:c1:9d:b2:db:52:83:dd:5d:0d:8e:08:e2:ee:8c:5e:
         eb:61:54:b6:51:71:9f:b3:dc:8d:4d:0b:a3:88:8a:f8:69:81:
         f5:b8:71:da:fd:52:d0:d9:a9:bd:fc:d8:8d:97:2c:70:3b:6a:
         76:a9:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:21 2026 by rpki-client