Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File:                     97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier:          QRjlSPuk94qdLnyzRYwtzYEpNtIK08AoVE/Bx/h3Cio=
Subject key identifier:   79:04:83:80:19:44:CF:52:9B:0D:7A:50:F4:1F:78:5A:59:F8:3D:60
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer:       /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial:       2AA15BEF07B2CE84AA42A84EA2D887334879C55E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number:          3B
Signing time:             Wed 04 Mar 2026 07:13:20 +0000
Manifest this update:     Wed 04 Mar 2026 07:08:20 +0000
Manifest next update:     Thu 05 Mar 2026 10:16:20 +0000
Files and hashes:         1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: CiJzUjQXmmQelGfvz6Z+hvVoqwbvS71JbR0RiQSF6PI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 10:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:5b:ef:07:b2:ce:84:aa:42:a8:4e:a2:d8:87:33:48:79:c5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
        Validity
            Not Before: Mar  4 07:08:20 2026 GMT
            Not After : Mar  5 10:16:20 2026 GMT
        Subject: CN=790483801944CF529B0D7A50F41F785A59F83D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:39:4a:ae:61:cc:f7:61:c2:e9:a7:15:1b:
                    1a:6e:ca:af:ca:4e:11:d9:1c:72:bf:e3:17:13:b9:
                    b3:71:a0:c9:31:6c:30:40:cc:5f:f9:dd:7f:3d:fa:
                    46:b8:a5:15:83:8f:bd:5f:c0:73:5e:9c:7a:b7:99:
                    6b:d3:f1:4d:73:d0:2c:8a:99:36:48:1a:69:e5:2a:
                    a9:4c:5b:59:ee:66:01:8b:76:5c:a5:3e:70:63:b2:
                    51:1f:c7:42:20:c2:c4:0b:78:87:1f:d2:2e:2a:5e:
                    75:c2:f0:b7:7b:50:b8:e1:a4:e9:64:53:00:d9:2a:
                    66:ad:ff:92:70:10:c1:d3:a9:46:db:48:c1:c1:72:
                    b5:31:81:e6:eb:6d:7d:5f:ad:64:37:6b:b3:b6:31:
                    87:75:70:50:d2:87:81:93:7b:21:08:67:62:92:fd:
                    01:d4:0e:d5:9a:e2:6c:23:59:f2:0d:a3:5b:fd:c3:
                    17:de:fa:77:30:fd:9f:1e:ea:11:6d:ad:e8:cd:58:
                    5f:b3:23:03:e9:13:44:3f:34:79:5a:ee:51:c8:4d:
                    5f:79:45:37:6e:9e:14:e3:1d:0a:cb:cf:10:7e:43:
                    fb:f4:76:a9:15:ef:7d:cf:22:bf:08:46:2b:fc:0b:
                    57:52:d0:8c:7a:d1:49:a9:8d:3b:a9:c6:55:73:5a:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:83:80:19:44:CF:52:9B:0D:7A:50:F4:1F:78:5A:59:F8:3D:60
            X509v3 Authority Key Identifier:
                keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:c1:b8:d1:a9:fb:80:65:9f:ae:15:96:34:c8:45:d0:aa:
         3b:bf:f1:cd:26:25:98:95:bd:46:fc:3b:21:9d:63:38:f9:9a:
         c2:8b:6a:fe:47:cc:fe:4a:66:af:00:3e:ca:f6:db:71:4b:bb:
         0f:65:7b:34:bc:24:8f:56:60:e8:b8:fe:ea:7a:da:ed:de:1d:
         b8:13:20:23:99:8f:b0:db:79:ca:c0:60:f3:11:0c:76:bd:a9:
         4b:03:bd:a4:af:4a:39:14:2f:93:40:d4:d3:29:96:a0:88:75:
         7a:44:39:4a:13:1c:90:d6:22:d5:67:7c:1e:4d:72:bd:cf:6d:
         72:f5:2b:26:4b:00:a3:c4:bc:84:29:68:24:6f:60:67:6c:9c:
         be:1c:ea:4c:18:d7:4e:6f:b4:c7:0f:6d:91:20:2d:c6:d4:c5:
         34:16:a3:8b:b4:1f:91:e5:c9:86:26:bf:b2:e6:e3:30:b7:5a:
         7c:a1:f5:32:7c:08:b3:24:62:62:87:7a:e5:45:16:01:e8:ae:
         8b:6f:4b:d2:78:29:3f:4f:92:ab:37:d5:f4:fa:4f:d1:7f:fd:
         34:96:e1:0e:aa:7b:a3:ac:bb:34:56:ba:94:8c:bf:6e:52:be:
         b2:bf:2f:37:77:dd:d6:16:b6:ee:8c:55:a8:93:70:7b:a5:e3:
         b3:cb:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:10:32 2026 by rpki-client