Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File:                     D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier:          u/al+AlSS16jjCwNQ649c7G/8EZQcR0QsC3zSO+3f4o=
Subject key identifier:   D4:AC:AE:69:49:53:AA:9D:49:98:D3:63:3C:BC:37:0B:9F:FD:D8:9A
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer:       /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial:       6E93FEB038BF54CD30708B81044F2B25A082E632
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number:          014C
Signing time:             Thu 03 Sep 2026 22:04:11 +0000
Manifest this update:     Thu 03 Sep 2026 21:59:11 +0000
Manifest next update:     Mon 07 Sep 2026 02:48:11 +0000
Files and hashes:         1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: WgFgfy1oy0vaJ/ArxCBwv5F/dYUJCsS5KAGec5JVq4Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:fe:b0:38:bf:54:cd:30:70:8b:81:04:4f:2b:25:a0:82:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
        Validity
            Not Before: Sep  3 21:59:11 2026 GMT
            Not After : Sep  7 02:48:11 2026 GMT
        Subject: CN=D4ACAE694953AA9D4998D3633CBC370B9FFDD89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:ee:f3:7f:39:67:d2:9c:e4:08:51:a6:18:
                    4f:41:f3:e2:3a:4d:30:c0:62:45:dd:7b:c6:8c:e8:
                    3f:f0:a4:fe:2c:b2:60:a7:f5:2a:42:64:95:5e:fd:
                    e1:87:db:be:2e:0d:f5:d3:22:e4:35:53:0e:a2:23:
                    18:cb:36:8c:a1:ec:31:f3:04:d8:5a:d3:0a:d9:df:
                    67:c9:ab:34:8f:fc:0c:8e:65:dd:68:ad:52:d7:14:
                    fd:63:ec:30:fb:e2:85:d0:75:e8:fe:ff:95:b5:f6:
                    e7:ed:1b:6a:ec:49:13:34:e0:6e:03:69:a4:b7:6b:
                    b7:ea:ec:59:93:5c:39:22:c2:86:07:3a:84:6d:6d:
                    1c:a4:02:19:48:92:a4:ff:fa:27:b2:cb:6c:bf:c1:
                    f1:4a:b3:c4:6d:70:f9:fb:9a:4d:4d:f8:dd:4b:f8:
                    6c:26:f5:a0:ec:8d:30:81:cc:6e:32:b6:8d:fb:c5:
                    bf:b7:17:ae:98:a5:c2:b4:dd:cb:5e:88:cf:c9:e3:
                    29:b0:aa:33:36:65:1a:63:51:1c:37:28:dd:06:5d:
                    92:d0:ad:a4:92:8d:7d:37:3f:3c:b3:cd:59:75:8b:
                    9c:8d:b2:0a:a9:ee:4b:cf:35:c1:0a:3d:c0:bd:da:
                    48:8a:58:b9:8a:fe:f6:c6:10:90:58:85:db:86:d8:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:AE:69:49:53:AA:9D:49:98:D3:63:3C:BC:37:0B:9F:FD:D8:9A
            X509v3 Authority Key Identifier:
                keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:31:95:35:32:7d:6f:d4:fc:05:f6:b2:a4:7e:2c:1f:7f:
         08:cf:3a:24:71:8c:67:15:cf:64:90:a3:c0:95:71:11:99:84:
         dd:61:b5:99:51:0b:69:55:9d:e4:1c:51:80:c9:0e:c3:e0:a7:
         a3:0b:ec:62:a0:60:db:79:ac:6f:8a:61:82:a6:d1:c0:5e:10:
         53:eb:73:3e:3e:b7:e4:da:df:9f:ed:58:e5:1e:7e:0b:cc:3b:
         77:a6:fe:81:c8:38:4b:67:eb:c6:1a:f0:5b:15:bc:58:b8:5e:
         b3:cb:29:db:0d:84:23:29:aa:46:76:74:2d:66:54:87:01:80:
         86:34:5d:f1:c4:66:82:b9:54:e9:58:96:70:7e:f5:64:39:90:
         c4:a7:bc:4d:d6:b1:e2:e3:cb:f1:84:c8:68:19:eb:fe:e3:da:
         38:53:16:cd:28:cd:fe:80:53:44:bb:b7:01:fe:0b:a7:6d:06:
         01:45:62:7d:b1:25:ba:58:25:93:64:54:5e:ae:48:47:1b:03:
         99:4e:9d:55:1e:e1:3a:09:5f:9b:b9:bf:14:92:4a:e2:64:8d:
         34:f7:07:df:6b:7b:ca:af:d1:d3:f5:57:4c:f8:85:38:40:82:
         fb:07:de:82:be:e8:7c:cc:2c:4a:ef:bd:e8:eb:ac:2d:9a:f6:
         c4:40:81:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbpP+sDi/VM0wcIuBBE8rJaCC5jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0
QjI0MjcwNDAeFw0yNjA5MDMyMTU5MTFaFw0yNjA5MDcwMjQ4MTFaMDMxMTAvBgNV
BAMTKEQ0QUNBRTY5NDk1M0FBOUQ0OTk4RDM2MzNDQkMzNzBCOUZGREQ4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfO7zfzln0pzkCFGmGE9B8+I6
TTDAYkXde8aM6D/wpP4ssmCn9SpCZJVe/eGH274uDfXTIuQ1Uw6iIxjLNoyh7DHz
BNha0wrZ32fJqzSP/AyOZd1orVLXFP1j7DD74oXQdej+/5W19uftG2rsSRM04G4D
aaS3a7fq7FmTXDkiwoYHOoRtbRykAhlIkqT/+ieyy2y/wfFKs8RtcPn7mk1N+N1L
+Gwm9aDsjTCBzG4yto37xb+3F66YpcK03cteiM/J4ymwqjM2ZRpjURw3KN0GXZLQ
raSSjX03PzyzzVl1i5yNsgqp7kvPNcEKPcC92kiKWLmK/vbGEJBYhduG2CZrAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU1KyuaUlTqp1JmNNjPLw3C5/92JowHwYDVR0j
BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC
MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1
MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrsxlTUyfW/U
/AX2sqR+LB9/CM86JHGMZxXPZJCjwJVxEZmE3WG1mVELaVWd5BxRgMkOw+Cnowvs
YqBg23msb4phgqbRwF4QU+tzPj635Nrfn+1Y5R5+C8w7d6b+gcg4S2frxhrwWxW8
WLhes8sp2w2EIymqRnZ0LWZUhwGAhjRd8cRmgrlU6ViWcH71ZDmQxKe8Tdax4uPL
8YTIaBnr/uPaOFMWzSjN/oBTRLu3Af4Lp20GAUVifbElulglk2RUXq5IRxsDmU6d
VR7hOglfm7m/FJJK4mSNNPcH32t7yq/R0/VXTPiFOECC+wfegr7ofMwsSu+96Ous
LZr2xECB5A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:53:08 2026 by rpki-client