Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File:                     D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier:          gIPjAnC8PwqB3mMuPRXgbA5FFk93i7UUvYGujZEqqsU=
Subject key identifier:   5F:66:6C:8A:4B:E7:4D:27:FA:A2:9C:0B:6F:87:D3:6C:AB:82:38:24
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer:       /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial:       0C21DC35766DF6DE1650AC0810CD4944A35A9799
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number:          3B
Signing time:             Wed 04 Mar 2026 00:23:20 +0000
Manifest this update:     Wed 04 Mar 2026 00:18:20 +0000
Manifest next update:     Thu 05 Mar 2026 03:30:20 +0000
Files and hashes:         1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: fFfMlJPmRB8W2/nCiBXtl4xNJXmnPgRbUpwcosMYbSw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 03:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:dc:35:76:6d:f6:de:16:50:ac:08:10:cd:49:44:a3:5a:97:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
        Validity
            Not Before: Mar  4 00:18:20 2026 GMT
            Not After : Mar  5 03:30:20 2026 GMT
        Subject: CN=5F666C8A4BE74D27FAA29C0B6F87D36CAB823824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:58:d0:6b:fb:24:05:b6:e1:d1:fa:16:99:
                    3b:db:1f:45:42:fa:9f:bb:f1:94:98:ca:7b:5a:44:
                    6f:b6:9a:90:1c:e0:f3:20:1a:23:46:fc:8d:7c:65:
                    e6:dc:86:17:e8:0b:f6:3b:0f:0f:7a:a5:5f:e0:2a:
                    de:fd:80:23:04:f6:de:63:f9:b8:11:7b:43:c3:a2:
                    37:3b:31:cc:90:9c:15:ba:2d:02:1f:cc:cc:83:19:
                    ce:8f:07:f0:e0:d2:20:57:56:ee:73:0a:f6:4f:5c:
                    53:b7:f7:da:72:ae:e0:d6:e3:e8:0f:db:57:7a:1c:
                    7b:0e:9b:7b:b9:65:d7:dc:3f:df:b0:9d:dc:ab:14:
                    a0:4a:6a:de:00:42:7d:2f:a8:5a:cc:b5:f0:d6:ab:
                    ba:e5:92:ac:a5:7c:1c:33:83:f9:a0:69:a2:19:2b:
                    ac:64:8b:b5:db:96:0b:52:5a:68:67:28:ec:b2:ba:
                    44:c3:cc:7d:63:47:a1:ad:83:ac:61:34:38:83:f3:
                    39:eb:b6:9c:df:ab:97:0b:61:b1:a9:5d:e2:e6:cc:
                    47:69:f3:f5:1f:52:38:bf:2e:7e:88:7a:4b:26:58:
                    8c:ee:56:df:7e:db:5d:53:4c:0a:af:0a:94:56:5b:
                    27:74:0b:21:16:f1:8d:55:7e:49:f1:53:db:55:e0:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:6C:8A:4B:E7:4D:27:FA:A2:9C:0B:6F:87:D3:6C:AB:82:38:24
            X509v3 Authority Key Identifier:
                keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:1b:6b:9b:f3:63:96:1f:aa:41:98:9b:88:75:00:6e:97:
         ee:dd:53:55:9c:26:e7:83:9a:86:0f:20:cf:d4:f5:3e:6b:0f:
         9a:78:48:aa:57:e1:3b:a1:a7:1d:07:a0:50:ef:0a:86:ca:05:
         f8:f2:d8:f7:85:30:72:54:48:ab:5e:7e:2a:b3:bb:3b:5e:48:
         b5:24:d0:76:17:7c:c5:d5:49:80:65:9b:e1:80:8e:6b:b4:9d:
         b9:55:26:62:63:36:c5:59:30:30:0c:11:27:c0:fb:83:c9:9b:
         ca:a7:6b:7d:92:a8:d5:f8:70:08:f3:53:5d:a7:64:22:5c:99:
         af:a9:79:1d:a5:55:ca:bf:82:15:6c:3c:4c:3e:1c:73:d2:50:
         72:20:71:f3:96:cd:e9:0a:79:f3:85:81:bf:2e:08:67:bb:c6:
         be:09:09:df:b2:bb:0d:2b:a8:13:7b:e6:e6:fd:59:df:e8:fe:
         77:df:b3:2b:ad:ad:bd:1d:4f:2c:4d:96:09:6f:7b:3a:44:50:
         3e:f0:43:97:8d:41:2e:60:4e:42:c3:70:0c:bd:86:c3:71:fe:
         77:ad:31:26:f0:f5:5b:35:a7:95:c8:95:51:78:23:d2:a5:99:
         a1:6b:68:5f:74:cf:cb:4b:7f:77:c1:b5:bb:5a:be:e7:fd:c8:
         b1:df:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:07:32 2026 by rpki-client