Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File:                     D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier:          FFxsi+TA3tU22P8ePsC/QKIB5UJuVDWmEIEW4Jr79KI=
Subject key identifier:   DA:66:10:76:D5:B7:E0:DA:52:26:11:3E:CD:E6:06:87:7A:D9:C0:FD
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer:       /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial:       7E643C44DA4DC4B3C0622AF555F8DCD3634F7623
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number:          78
Signing time:             Sat 18 Apr 2026 13:59:55 +0000
Manifest this update:     Sat 18 Apr 2026 13:54:55 +0000
Manifest next update:     Sun 19 Apr 2026 17:04:55 +0000
Files and hashes:         1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: 7edsmi9gUex5daDlqwjpg25H2CA7qyPMZHIovhdeP5w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 10:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:64:3c:44:da:4d:c4:b3:c0:62:2a:f5:55:f8:dc:d3:63:4f:76:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
        Validity
            Not Before: Apr 18 13:54:55 2026 GMT
            Not After : Apr 19 17:04:55 2026 GMT
        Subject: CN=DA661076D5B7E0DA5226113ECDE606877AD9C0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:18:18:59:9a:42:bd:c4:d2:e7:69:f9:cd:21:
                    3e:1d:7b:24:cb:44:16:bb:8f:64:ba:02:92:bb:18:
                    2a:7f:73:c1:44:4f:8a:27:04:17:c4:1e:64:ff:2e:
                    bd:0e:04:87:cf:58:6c:63:f1:f0:39:57:86:29:74:
                    94:d3:bd:02:ee:20:ed:3e:25:8f:86:fd:4f:3c:cf:
                    7d:ef:23:6d:7c:b3:58:2f:55:77:13:c1:1e:6f:f2:
                    fc:53:34:33:a5:f6:18:6c:19:68:a1:73:ae:66:02:
                    eb:ee:00:09:83:18:2c:9d:a0:58:ed:0d:da:d0:12:
                    c1:33:60:a3:03:e9:7e:dd:f5:e4:db:0a:19:df:35:
                    b3:df:9e:34:c5:da:56:08:64:75:e2:4b:cb:68:2c:
                    cc:9c:4d:45:b4:0c:51:0e:b2:b1:8e:c3:e7:fb:29:
                    8b:57:d1:4f:a1:6c:02:ad:16:2f:b0:b7:86:88:87:
                    d9:7e:e3:8f:b7:c1:f1:26:9b:c0:9f:63:fe:4a:5c:
                    48:38:e0:82:f6:fc:cd:4f:7f:0b:35:6b:b9:40:a6:
                    0b:36:e3:17:9a:c9:a9:8d:05:f4:c7:16:80:1b:94:
                    c3:ca:df:6e:9b:82:b3:5f:56:8f:44:59:5b:3b:88:
                    24:87:3f:52:41:07:2d:11:42:1e:48:27:a0:97:7d:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:10:76:D5:B7:E0:DA:52:26:11:3E:CD:E6:06:87:7A:D9:C0:FD
            X509v3 Authority Key Identifier:
                keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:a3:b1:a4:4d:04:53:dc:ab:07:4a:2c:e5:82:8d:ba:a0:
         8f:b5:60:43:d3:06:70:f9:cf:15:fc:f4:01:60:c3:a6:52:46:
         ce:5f:e1:e8:17:7e:52:33:07:84:80:9e:4c:1f:0e:be:13:65:
         05:55:73:d7:df:f4:a1:d3:6c:8f:29:bf:1f:5f:e9:48:42:04:
         7a:39:cc:c2:f6:f0:76:2d:80:f7:2f:71:c8:dc:ad:ff:30:4b:
         1c:0f:9a:41:f9:4a:48:26:3e:6e:45:b5:98:73:ee:83:44:da:
         0b:1e:f7:a4:82:b9:9c:b7:cb:e8:f7:74:71:2f:32:1e:c7:88:
         7b:6f:b1:2a:8a:e6:3e:a9:f6:27:90:f3:8b:b4:ad:71:7f:7d:
         29:24:fd:5f:75:74:cd:9f:b5:45:d5:5f:40:72:5b:5e:e4:4e:
         f0:82:9d:98:cf:a5:aa:aa:96:26:90:6d:04:75:ae:67:cc:d1:
         92:59:74:62:e0:d9:17:92:20:25:0f:72:b2:4d:22:26:5b:76:
         d4:bc:bc:93:d2:40:4c:1f:00:3e:11:18:e1:57:da:f8:90:c7:
         b0:3d:d0:b0:a4:46:02:f7:4c:98:3b:0f:29:83:51:1a:76:76:
         a2:d4:81:f0:4a:22:65:46:2b:a5:1e:d3:02:44:7a:92:bf:45:
         f8:52:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:14:17 2026 by rpki-client