Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File:                     82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier:          OjWJkdDRubyjfhPzv2RCX+ZBX8YVUcyezvZUQADQvIE=
Subject key identifier:   25:D7:CE:DF:D5:06:9F:CA:7C:C1:EA:0C:4D:B3:6F:B4:6E:87:09:A0
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer:       /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial:       1B4182A70A4D72F02BA1A9B6D15DABF28D0C6598
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number:          04
Signing time:             Sat 13 Jun 2026 11:21:45 +0000
Manifest this update:     Sat 13 Jun 2026 11:16:45 +0000
Manifest next update:     Sun 14 Jun 2026 12:44:45 +0000
Files and hashes:         1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: KAmJIJKT1fyyyhQK8dg9QUsE7ATetdYD1PWGY2frq9I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:41:82:a7:0a:4d:72:f0:2b:a1:a9:b6:d1:5d:ab:f2:8d:0c:65:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
        Validity
            Not Before: Jun 13 11:16:45 2026 GMT
            Not After : Jun 14 12:44:45 2026 GMT
        Subject: CN=25D7CEDFD5069FCA7CC1EA0C4DB36FB46E8709A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:ec:78:db:ca:c3:f5:85:d0:d8:ec:c4:02:
                    a4:80:83:3c:2d:d0:f8:37:1f:10:da:80:09:84:f5:
                    32:6f:e3:c8:82:23:fc:7e:f5:3e:6f:76:f0:4a:b6:
                    15:70:bd:c2:5d:b8:14:ff:8a:da:b8:ba:a4:c3:5f:
                    2a:10:8b:06:8d:0c:b5:2e:63:36:79:8e:40:18:d1:
                    20:af:d1:e6:18:da:e8:43:52:eb:2f:bd:77:b1:44:
                    0b:07:90:0c:70:55:5c:80:5e:13:bb:62:ce:41:51:
                    ef:d0:3f:6a:6e:7d:c9:a9:0b:51:2e:89:71:48:b2:
                    4a:8c:81:a2:64:65:cb:f5:6e:1e:95:5a:b7:66:e9:
                    cb:b1:e0:a8:1d:15:8c:df:cc:15:8b:8d:e5:98:fb:
                    d4:46:f2:39:91:13:66:75:c1:7e:cc:18:21:6e:0e:
                    59:24:4d:52:33:a8:3e:89:f0:10:35:6b:38:d4:2b:
                    ac:1f:81:09:fa:b4:65:0c:3d:9f:fd:70:b9:b9:0c:
                    4e:af:39:06:c4:f0:09:d3:d4:29:25:f8:7b:2e:b1:
                    43:b8:71:28:77:fe:ee:33:51:8e:24:f8:c3:a8:f7:
                    51:be:ed:a9:32:9f:0e:82:c8:21:50:e8:2f:49:74:
                    c3:b9:96:ba:23:2b:66:2c:5c:9b:06:5f:fb:c3:3f:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D7:CE:DF:D5:06:9F:CA:7C:C1:EA:0C:4D:B3:6F:B4:6E:87:09:A0
            X509v3 Authority Key Identifier:
                keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:81:7d:7e:26:c4:f1:8e:5c:63:ed:da:7c:40:6f:42:af:06:
         06:39:c0:d1:93:33:54:e3:3f:26:59:47:34:1a:39:50:9a:3e:
         8d:2c:ec:02:2d:b6:a8:cf:f2:0f:1f:23:d2:75:13:56:f2:13:
         39:a5:22:5f:75:bb:3d:da:7b:fb:72:8b:de:a3:49:19:d4:fd:
         72:de:60:5e:e1:ab:e0:6a:1d:be:99:01:19:88:48:5a:76:74:
         38:db:05:b9:37:b5:65:4a:16:c3:21:b5:e5:c1:eb:26:77:51:
         bd:49:17:76:6e:bf:56:9d:e8:c7:f9:8d:01:c3:cb:d0:e1:e9:
         e7:f9:bc:a2:66:14:8e:a2:d0:be:7e:73:27:5e:37:46:70:0b:
         8a:8d:00:3a:53:0f:d5:e7:15:28:fb:0b:ce:a9:97:92:6a:a9:
         b8:37:9a:16:74:10:3a:e5:ab:51:a9:24:9d:c9:6e:52:ec:2b:
         97:dd:8c:ca:e2:7e:d7:9e:2e:0f:a6:36:4a:1c:5a:0b:29:15:
         79:72:50:ee:94:88:7b:d3:5f:b1:3b:40:d1:8d:29:ca:b6:74:
         25:db:1e:58:ac:e0:e8:f9:5d:fd:54:27:3f:51:4c:7d:17:d3:
         96:d7:a8:11:1e:92:32:51:55:9f:c8:63:ed:35:e0:33:3a:22:
         5b:29:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:09 2026 by rpki-client