Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
File:                     3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json)
Hash identifier:          e/EIbnVIqQnzcHsZEFzilqqHzwdtrUM4zSgQh4xEGfY=
Subject key identifier:   71:F9:41:FA:59:BD:FA:1E:1D:FD:83:0A:12:5F:C6:CF:80:D3:6F:26
Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
Certificate issuer:       /CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Certificate serial:       674E89253DC0DE267A57F8C036318066FBEFB9D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
Manifest number:          30
Signing time:             Sat 13 Jun 2026 13:06:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:06:49 +0000
Files and hashes:         1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: jYZlcI73NbjLSsy9a8ooyUyT3YMcw/Nfk3QPZfkZmn4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4e:89:25:3d:c0:de:26:7a:57:f8:c0:36:31:80:66:fb:ef:b9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7
        Validity
            Not Before: Jun 13 13:01:49 2026 GMT
            Not After : Jun 14 13:06:49 2026 GMT
        Subject: CN=71F941FA59BDFA1E1DFD830A125FC6CF80D36F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:1e:de:2b:9c:a6:b8:94:0e:ac:49:c2:00:
                    1c:4b:a0:77:81:d1:e2:cd:7c:e8:a2:58:af:db:58:
                    c1:7a:c9:4b:02:78:c4:8b:eb:cf:e1:b4:67:93:bd:
                    db:ba:7b:b1:f3:06:e5:ce:6f:27:a4:b2:c9:57:ac:
                    76:f0:25:27:01:d5:04:eb:40:36:06:8f:79:38:1b:
                    83:cd:b1:92:08:5e:a0:1c:cd:7b:b2:f8:9c:1a:83:
                    91:f9:55:c9:5a:3d:a6:27:cf:2d:e2:e3:b6:f4:9b:
                    93:aa:7b:03:f2:1d:f0:7c:d7:06:6a:c5:72:d1:3d:
                    cb:39:8f:b7:8f:04:aa:e0:54:cd:37:fc:ec:4f:3f:
                    55:42:f4:c4:aa:66:a6:c7:d2:e0:67:04:37:9e:a1:
                    87:88:2d:6d:e1:e1:d5:48:71:ad:b6:1c:a3:a3:f6:
                    98:20:e9:cd:93:c3:d4:6a:8c:0b:0a:be:60:c9:92:
                    b7:e2:6a:fa:6f:d8:24:37:ff:1a:44:a4:30:5f:a8:
                    ff:b2:a1:b0:97:14:2c:bb:ca:bc:e3:54:f4:d1:ed:
                    c8:5a:64:d3:3a:4c:cf:90:44:de:e5:67:06:be:3a:
                    0b:cf:08:df:35:9d:bf:80:5e:23:76:c3:e8:2d:c0:
                    bb:07:2c:1c:c7:f4:6b:52:e5:05:38:32:99:48:f9:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F9:41:FA:59:BD:FA:1E:1D:FD:83:0A:12:5F:C6:CF:80:D3:6F:26
            X509v3 Authority Key Identifier:
                keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:ac:b3:8c:6b:e8:d2:b5:02:ce:a6:ad:92:0f:6b:cd:18:
         69:05:29:3f:3a:e0:7f:8d:6a:8b:24:08:1d:60:14:9c:92:47:
         92:a3:71:72:3a:fc:48:c4:6a:79:5f:ca:6d:3e:68:75:44:a7:
         7d:42:fb:61:00:cb:60:57:df:76:b0:57:1a:02:7a:fb:61:81:
         62:75:36:9c:2e:38:02:74:7c:68:55:1b:fa:79:1c:08:00:7e:
         11:f6:4c:de:e6:ea:de:e1:54:f4:79:e3:8b:50:c6:bd:9a:d8:
         f7:39:a0:04:9a:5e:4e:f3:5e:15:48:0c:1e:14:39:2f:cb:2f:
         b3:d9:17:b8:a7:32:56:aa:1b:c1:c2:2a:7d:10:cf:d6:12:12:
         1b:44:cc:96:16:1a:2d:5d:0f:41:6d:d3:7d:08:a8:78:7d:d5:
         ea:be:1a:25:29:66:5b:82:86:ad:97:f0:dc:88:fb:f0:63:49:
         5c:b2:7f:e4:73:ee:3f:cc:0f:64:22:ec:7a:7b:f8:c1:55:2b:
         6c:fd:fc:b3:d0:54:cb:bc:75:9a:93:0a:0d:06:94:74:ce:a5:
         0d:2b:50:fe:bf:73:d0:35:5d:86:55:23:cc:93:d8:5d:c0:ac:
         a7:26:58:a2:bc:ba:21:90:94:ba:3c:db:f7:d3:1e:90:d5:84:
         e4:37:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:07 2026 by rpki-client