Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
File:                     6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft (raw, json)
Hash identifier:          JJJYuyB7C1pHAeBHZbgJ5EZUBHcCuyTn44/pliRWkBk=
Subject key identifier:   72:B3:16:F6:5A:67:F2:4B:E7:B8:54:8C:8F:4E:50:11:3C:61:83:21
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       4672A90E96E6B9F57569A8D490D51924F43FFDF3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
Manifest number:          71
Signing time:             Mon 13 Apr 2026 02:29:17 +0000
Manifest this update:     Mon 13 Apr 2026 02:24:17 +0000
Manifest next update:     Tue 14 Apr 2026 02:36:17 +0000
Files and hashes:         1: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl (hash: 1DNCTmjNDYZCKRXRog9lu2msO4oQNv5+25y7xjnhXf8=)
                          2: 3130312e35322e35322e302f32342d3234203d3e203435303739.roa (hash: WeT/+VI4DJbVK3NQkPYzHL8X47fHP0WfM+8Qgv7h4ls=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:72:a9:0e:96:e6:b9:f5:75:69:a8:d4:90:d5:19:24:f4:3f:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: Apr 13 02:24:17 2026 GMT
            Not After : Apr 14 02:36:17 2026 GMT
        Subject: CN=72B316F65A67F24BE7B8548C8F4E50113C618321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:bc:c5:b8:f0:68:60:a3:95:01:41:58:59:
                    3e:9b:dc:1f:67:48:e2:6b:fb:e9:38:66:f8:c5:db:
                    ab:15:2d:4f:69:66:b4:05:42:c8:cf:89:b1:b9:b9:
                    76:8e:62:e4:a4:86:a5:cd:b5:42:82:0d:09:95:7c:
                    30:92:54:b9:fe:65:d3:62:cf:e9:a3:e2:78:6a:5a:
                    7c:fb:c0:aa:06:07:ca:f8:35:c9:18:1d:19:66:f4:
                    ab:29:bb:25:f1:77:36:c4:4b:28:a8:4e:a6:ee:c8:
                    d2:99:7a:94:cc:51:6e:fb:de:fe:af:9e:8d:a7:59:
                    12:0d:1b:35:c6:a2:4b:52:91:5a:cd:93:1b:b6:28:
                    b8:b8:9c:e3:ea:e1:28:4c:46:94:72:76:9e:1a:fb:
                    6e:fe:0d:2b:3e:d1:7b:00:39:a6:5c:c7:4a:de:b4:
                    d5:06:56:3e:8f:d9:76:56:3b:0a:84:97:fd:f9:74:
                    23:62:5a:d3:3e:b2:22:a6:75:c2:36:75:b7:04:28:
                    4a:6f:59:66:01:de:21:42:29:b0:bd:ab:ea:58:25:
                    f5:d3:d7:49:d2:a0:31:6b:33:e4:a2:40:4e:39:c1:
                    fe:8f:d0:0f:57:c7:e6:8c:4f:a7:85:5b:97:d8:40:
                    c9:8d:0c:88:7f:0a:c3:69:14:b6:36:85:27:03:ca:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:16:F6:5A:67:F2:4B:E7:B8:54:8C:8F:4E:50:11:3C:61:83:21
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:bb:28:b5:33:a8:e0:b4:8d:2b:de:e0:5d:17:e4:99:15:
         ca:89:b0:0a:24:1f:37:5a:78:a0:d0:ee:ea:c5:d3:1d:72:f4:
         c9:b0:97:4d:6b:38:4d:97:93:8b:17:13:80:8e:fb:0a:75:30:
         b3:80:ce:21:5e:64:fb:7b:81:b0:cb:76:8a:62:26:18:e0:a0:
         b4:4b:9b:aa:4a:f3:9c:86:5d:7f:ee:7b:90:21:8e:1b:b0:50:
         3b:35:87:44:03:23:94:f6:46:d4:44:09:ce:3c:3c:fc:ef:0d:
         a8:5e:94:3c:27:57:02:bb:8d:89:e1:56:9d:52:1b:3b:b5:ba:
         0c:d3:60:00:b6:e0:ae:b3:81:b4:a3:78:b4:8e:d8:2d:f1:58:
         43:db:d8:04:c9:77:fa:ed:6b:f2:65:1d:d1:ca:27:4f:c9:08:
         e9:d9:2b:1d:9a:52:5a:8d:18:8e:3e:0a:d9:a0:72:84:87:1f:
         7b:d3:38:c1:5e:51:9f:7b:35:5d:69:7b:88:2c:3d:1a:f4:79:
         1b:7f:c1:e1:ce:4c:de:f7:e7:09:d9:d3:72:fe:93:31:0c:fc:
         5f:6d:c3:6b:c4:cd:e4:a4:f2:94:b3:64:b2:39:10:e4:b3:5b:
         f2:90:5d:40:66:cf:83:9f:9d:91:c8:c5:b9:7b:71:b5:f5:29:
         3d:3c:3c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:30:23 2026 by rpki-client