Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
File:                     BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json)
Hash identifier:          nMpfOIpldG3VjZwx/3GKJeA9/nZErE7a7/rp+pzriWk=
Subject key identifier:   AD:E0:A6:D6:95:B9:E6:4A:E8:07:12:61:AB:46:85:38:CB:9B:9A:03
Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2
Certificate issuer:       /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2
Certificate serial:       224E99F7828B1C2C33C324FAE521614B89DEC7F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
Manifest number:          24
Signing time:             Sat 13 Jun 2026 22:57:25 +0000
Manifest this update:     Sat 13 Jun 2026 22:52:25 +0000
Manifest next update:     Mon 15 Jun 2026 00:20:25 +0000
Files and hashes:         1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: Tt9ztCxuj3eN0uBB1KdRyaJZpYoGYpzSVhUDKM5pAAE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:99:f7:82:8b:1c:2c:33:c3:24:fa:e5:21:61:4b:89:de:c7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2
        Validity
            Not Before: Jun 13 22:52:25 2026 GMT
            Not After : Jun 15 00:20:25 2026 GMT
        Subject: CN=ADE0A6D695B9E64AE8071261AB468538CB9B9A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:ec:c8:e5:e3:ff:62:d2:ca:6e:cf:2f:16:
                    97:1e:20:a3:4a:8c:d2:0d:02:ee:1a:57:9e:99:2a:
                    8c:63:b9:55:df:fe:62:34:4f:4c:ac:a5:16:54:f8:
                    86:be:22:08:53:60:56:76:6c:19:a5:3e:3d:ae:27:
                    50:6b:52:98:db:01:15:32:5c:45:d3:1b:2a:bd:06:
                    98:42:93:31:a2:8a:2b:26:a3:3e:6c:3c:0a:b0:58:
                    de:02:f4:9f:be:6e:df:8e:c6:87:f6:51:2c:d7:5b:
                    ef:0c:fc:39:17:0e:57:1e:49:c1:ca:e6:80:94:37:
                    79:c7:f5:fc:e7:02:25:d5:1e:aa:4f:6f:db:b8:14:
                    b3:01:f5:b8:b9:3f:d4:77:1b:67:f6:01:22:f2:6a:
                    01:51:2d:35:a7:25:dd:08:ec:3b:b6:03:c2:6f:36:
                    b7:17:71:e6:5b:87:7f:d8:7e:59:35:8f:09:fc:df:
                    5a:64:bf:83:c6:45:06:3b:3a:42:41:62:6f:51:06:
                    e4:5c:ed:3f:69:b7:ee:55:96:93:da:fb:c1:e5:8d:
                    91:dd:1a:7c:b5:1b:ce:7e:4e:1f:21:fb:d9:32:bf:
                    14:cc:73:f7:30:f9:b5:cd:ae:f3:a9:11:f3:7b:1b:
                    3b:83:3b:43:9f:df:eb:91:1e:73:f7:b5:8d:b3:e5:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E0:A6:D6:95:B9:E6:4A:E8:07:12:61:AB:46:85:38:CB:9B:9A:03
            X509v3 Authority Key Identifier:
                keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:28:83:f4:48:5c:cb:c4:ac:03:37:92:57:71:50:28:2c:
         74:c1:4e:9e:d0:28:9f:a4:aa:5a:19:fa:1b:e8:b9:2f:ff:8e:
         56:be:ea:cf:c3:a5:af:ed:d8:3f:ff:ed:c6:b4:7d:4e:d1:c5:
         49:fb:99:32:09:95:91:66:77:7c:46:84:db:cb:21:fa:84:5f:
         a7:1d:87:e1:ad:98:0b:db:f2:f6:3e:25:3c:79:5a:d8:27:97:
         3a:c5:56:45:00:3b:f2:c7:68:7c:80:30:b8:b6:81:a2:f4:bc:
         26:a0:1d:c5:df:28:e6:8d:b0:9a:b9:56:53:9e:72:6f:da:6a:
         48:e3:74:5d:c7:4c:fc:5c:b6:8a:c0:9e:09:3e:55:d8:7b:3b:
         a5:ac:0e:20:fa:cc:7a:47:74:09:f8:cb:fa:dd:ae:e2:cf:cd:
         b0:c8:ec:56:46:49:b1:96:f7:54:26:aa:49:ad:97:59:61:43:
         be:31:cb:13:1c:e5:fc:3b:a9:a3:76:82:ba:a9:4d:fb:e1:e4:
         50:4a:25:fb:2e:c4:83:86:96:c9:d8:a8:37:1e:ef:4d:84:5e:
         1a:9a:27:3c:15:a3:f5:0d:1a:90:67:5b:e6:cf:78:4e:33:36:
         f7:6b:6e:5d:41:6a:0e:81:52:6a:d0:ba:77:92:50:20:c1:97:
         35:be:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:57 2026 by rpki-client