Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
File:                     567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft (raw, json)
Hash identifier:          fEuhn+98q7Opn8RHWve6SEQKeZh7ZQNbVOgpTtlk0BE=
Subject key identifier:   56:6C:BD:95:31:4B:E1:52:D4:F6:0C:78:CD:E8:B3:C8:49:9E:68:ED
Authority key identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C
Certificate issuer:       /CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
Certificate serial:       5AC5A5A4EACF9FEBE988EDB3B0E847187ECF3669
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
Manifest number:          55
Signing time:             Wed 29 Jul 2026 20:35:11 +0000
Manifest this update:     Wed 29 Jul 2026 20:30:11 +0000
Manifest next update:     Thu 30 Jul 2026 22:05:11 +0000
Files and hashes:         1: 567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl (hash: 9ey/9Pn53FqBy53fuf8MWiN8176LKtUrEiN+aetd6zI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 22:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c5:a5:a4:ea:cf:9f:eb:e9:88:ed:b3:b0:e8:47:18:7e:cf:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
        Validity
            Not Before: Jul 29 20:30:11 2026 GMT
            Not After : Jul 30 22:05:11 2026 GMT
        Subject: CN=566CBD95314BE152D4F60C78CDE8B3C8499E68ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:36:4b:53:3f:35:88:4e:d7:20:20:c5:2f:
                    c9:05:34:d3:20:c5:94:b5:55:88:97:4d:e9:b5:6a:
                    95:40:c7:16:74:f5:4a:82:6c:1f:51:e8:11:f2:f8:
                    f7:cb:b8:c1:15:db:85:25:80:50:98:2a:12:ff:46:
                    ec:57:2e:1e:9e:0f:3f:5f:d9:b9:0e:08:1f:51:38:
                    5a:8a:e2:c8:92:53:4a:0f:37:f8:04:31:a6:78:fd:
                    3a:64:12:fc:8c:09:1e:3b:34:4c:e6:e8:34:0a:c6:
                    12:40:92:b4:45:9a:ed:74:3d:af:9e:33:fe:af:21:
                    5e:61:66:04:13:16:06:e6:b0:2f:ca:5c:3d:fc:34:
                    c1:49:3c:5b:ab:1e:98:3f:11:c4:f4:bc:4d:67:20:
                    43:a8:6e:fd:ea:74:6f:fc:25:a3:08:c9:b7:05:77:
                    f9:8e:a9:28:76:96:f1:7d:65:bd:b6:1a:80:44:91:
                    cd:66:c5:a7:10:b7:7c:08:43:8a:de:22:00:48:90:
                    ee:eb:12:f6:f1:e9:d9:14:aa:e6:ee:ef:72:ac:9a:
                    a8:36:0c:1e:2e:53:65:76:e8:af:38:87:66:60:c4:
                    77:bc:bb:96:3d:ff:d0:b4:14:46:38:13:77:77:8a:
                    b6:80:50:a8:35:a0:84:5a:b6:ae:75:35:d2:36:24:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:BD:95:31:4B:E1:52:D4:F6:0C:78:CD:E8:B3:C8:49:9E:68:ED
            X509v3 Authority Key Identifier:
                keyid:56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:53:cf:c4:38:82:e7:54:92:cc:07:7c:fe:37:d5:59:c3:
         ea:59:ff:14:47:2e:5f:34:43:96:82:23:89:63:84:68:68:6e:
         b2:ef:39:7f:7e:b8:c3:1c:07:05:3c:71:ab:e4:b7:ac:9e:46:
         73:a3:ed:91:25:29:c2:cc:f4:b1:a3:15:6e:07:32:9f:1b:2d:
         64:82:23:b2:c2:81:ca:3e:e3:9b:4b:26:0f:29:cb:4a:a8:c9:
         f1:23:57:c6:b2:24:03:e9:d9:49:6a:01:9a:f6:7c:8c:eb:b5:
         05:a0:59:df:01:6a:2c:e8:0d:41:a5:5e:2b:61:14:b8:86:13:
         d7:3b:47:94:0d:a8:bb:46:71:ea:95:db:5e:8b:ac:46:53:4d:
         04:25:e6:80:53:1d:c8:df:e9:7e:53:4f:34:67:95:b8:bf:90:
         b2:17:5c:80:14:3a:ad:65:09:7a:95:4c:fe:64:d9:53:51:83:
         9f:d2:ff:b7:11:a1:83:bd:e4:63:25:27:52:9c:7d:90:b5:6e:
         b2:23:50:30:8d:38:ef:d7:f3:b8:08:38:19:67:ca:79:15:c0:
         db:6a:70:a1:87:cf:eb:1b:99:fd:d8:cc:f1:b0:5d:9d:d2:d9:
         b1:d9:ba:61:36:01:07:0a:2d:66:72:a0:91:55:bd:7c:1f:1a:
         8d:a6:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:41 2026 by rpki-client