Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File:                     1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier:          Gb9EvhjEZ6cf1nYzZ5QujUuge1ExzKXLzUSDzINefsQ=
Subject key identifier:   3F:95:77:64:9F:83:63:D1:60:9F:56:AD:5B:AD:44:A3:CA:06:BB:78
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       1BD8F89D14FCF49F1CCB5A225CEF28CEC2BA6EB7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number:          3A
Signing time:             Tue 03 Mar 2026 17:03:20 +0000
Manifest this update:     Tue 03 Mar 2026 16:58:20 +0000
Manifest next update:     Wed 04 Mar 2026 18:48:20 +0000
Files and hashes:         1: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: +N9sbBR+3QA0mqo57LLdTnED8pkV5HA5oFcLes0qbb8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 18:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:f8:9d:14:fc:f4:9f:1c:cb:5a:22:5c:ef:28:ce:c2:ba:6e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Mar  3 16:58:20 2026 GMT
            Not After : Mar  4 18:48:20 2026 GMT
        Subject: CN=3F9577649F8363D1609F56AD5BAD44A3CA06BB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:b5:35:99:ca:d3:d0:3f:58:48:eb:9c:55:
                    dd:9e:9f:6c:4b:fb:be:f5:73:80:8b:8a:4b:11:1a:
                    1c:51:aa:ae:68:16:45:8c:9c:23:97:16:ca:58:7a:
                    04:0d:9e:6f:e2:df:4b:6e:e1:2a:73:2a:d4:d1:b1:
                    bf:36:84:19:cd:c8:d0:7d:53:70:81:e0:87:aa:de:
                    91:a3:9a:9f:f9:45:a6:13:4f:14:29:be:72:d6:30:
                    1b:a1:09:bd:4e:2b:eb:1e:2b:7a:9d:ae:cd:75:d1:
                    14:41:5d:b7:31:0e:cf:5b:91:fa:63:e2:33:8a:31:
                    36:6d:e1:14:06:bb:f0:3e:30:18:7f:cc:29:94:6c:
                    5c:ca:eb:36:f0:e9:bc:9f:1c:5b:2f:d6:91:64:28:
                    1f:63:2f:a1:7c:9c:ec:f1:b7:ed:cd:17:49:95:3f:
                    f6:57:03:3c:68:13:92:86:50:56:8d:f0:ea:05:81:
                    15:6a:ad:b3:3f:3c:d9:33:c3:4e:16:95:d5:17:17:
                    61:7f:dc:b4:33:d5:49:bb:9f:bc:ff:72:bc:06:a4:
                    93:41:c2:e8:49:77:a7:6a:eb:fb:c1:a7:9c:7c:ad:
                    f0:ab:aa:28:5e:3c:35:a4:a9:24:df:07:16:77:cd:
                    c8:1d:f0:4d:c6:e8:98:04:a8:94:34:ce:f0:db:ab:
                    a3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:77:64:9F:83:63:D1:60:9F:56:AD:5B:AD:44:A3:CA:06:BB:78
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:86:b8:64:4f:ed:5b:fa:06:05:f9:b2:4a:1e:1c:d9:62:5f:
         03:e2:f6:7e:22:b8:7d:5c:c4:ee:eb:6b:6c:e6:c8:71:b2:49:
         2a:8e:e2:56:2f:8c:1f:6f:d4:bc:00:8e:ef:28:63:14:c8:26:
         d5:93:62:93:e4:62:62:c8:47:f7:36:76:ee:d9:3f:3b:f4:e0:
         cc:86:6a:ad:9f:1a:5e:cf:38:10:dc:3c:12:28:39:af:c6:f6:
         f1:d8:22:f0:dc:0e:77:89:05:d2:2e:4f:d8:6f:73:35:f7:f5:
         ba:ff:83:bd:dc:9d:fc:1b:0b:50:40:51:a1:98:7f:0b:38:a3:
         4e:57:e1:2f:c1:f4:bc:04:d5:0b:71:c6:a3:41:b7:10:89:1e:
         57:6b:ea:a0:4e:47:40:6d:16:35:c1:c3:61:5e:c4:47:63:59:
         cc:4f:ce:88:2f:46:f8:4a:b2:ee:db:ed:0a:d3:4c:f1:6b:74:
         29:cd:d0:e3:02:9b:f8:e0:5a:31:75:dd:f6:d2:25:09:3f:ab:
         bb:19:cc:99:1c:c1:2a:0d:3d:b6:17:32:ea:9e:f5:a1:c8:fe:
         54:ee:1e:23:42:3a:3b:db:69:9a:43:d2:45:69:1c:9e:c1:50:
         08:2b:b5:50:e9:a0:d7:48:9e:36:8a:0f:b2:cb:b3:fb:46:fa:
         00:a8:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:30:18 2026 by rpki-client