Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          fPx8hguzWQLGVRrbz8Kvl1AEZN/W5jO4wsfp2oONlBo=
Subject key identifier:   B5:2D:C7:47:FE:84:10:3A:80:7B:91:81:0E:F6:FB:AC:93:FF:F2:4D
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       23FEFCBFC6D9B43C22D99D8652CB669C77A2B1B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          3F
Signing time:             Mon 13 Apr 2026 07:04:17 +0000
Manifest this update:     Mon 13 Apr 2026 06:59:17 +0000
Manifest next update:     Tue 14 Apr 2026 08:32:17 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: abu1r2M8T/zBt6cXxYLv4eX88OgdTA3To9grKrrw6jY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fe:fc:bf:c6:d9:b4:3c:22:d9:9d:86:52:cb:66:9c:77:a2:b1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: Apr 13 06:59:17 2026 GMT
            Not After : Apr 14 08:32:17 2026 GMT
        Subject: CN=B52DC747FE84103A807B91810EF6FBAC93FFF24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:69:be:53:d8:32:14:48:1c:39:81:cb:41:
                    d5:df:48:64:36:4b:52:aa:95:c0:44:bf:ca:b6:bb:
                    0b:26:f7:db:6d:eb:93:cc:9a:3d:52:3c:a4:b4:22:
                    88:80:0c:d0:ba:81:bf:bc:4a:e2:60:14:f3:43:0c:
                    a2:96:6d:b9:ef:75:2b:c5:9c:d8:1b:65:7b:1b:24:
                    ef:85:e3:f2:f3:1d:cd:b5:f4:a2:eb:db:21:c1:0a:
                    8b:9f:27:b8:9b:4e:a7:e3:80:3d:2e:8e:6e:8a:b3:
                    94:d8:0b:24:11:2d:66:d4:1a:f4:d7:f9:ce:45:a1:
                    5e:f6:b5:ef:04:35:a8:d9:b1:66:a0:93:cc:e6:f8:
                    a2:91:3a:97:45:bf:83:aa:27:c9:50:a1:78:25:9e:
                    12:04:62:4f:b4:46:4c:b6:a1:96:62:32:b2:15:21:
                    c0:f6:a7:a3:2a:c6:91:74:7d:dc:2a:e5:a2:c0:3f:
                    4d:2e:6d:41:30:12:01:2f:f8:c1:7b:c9:6f:61:fe:
                    27:ef:f4:f4:78:d7:b3:83:9c:fa:5b:b0:44:05:48:
                    73:c0:ea:57:59:b5:fb:e9:78:c6:9c:69:09:e5:8e:
                    fd:95:68:75:c0:cf:2e:79:45:07:c8:4f:7e:65:15:
                    b0:07:71:ca:77:45:d1:e6:c1:72:79:16:10:43:58:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:C7:47:FE:84:10:3A:80:7B:91:81:0E:F6:FB:AC:93:FF:F2:4D
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:6b:98:91:15:e5:88:26:fe:66:b5:e8:22:76:c6:4f:94:
         28:02:f9:3e:fd:be:17:48:3b:d0:3d:ba:1e:01:8a:d3:97:ca:
         d7:e3:0c:77:85:74:4a:20:34:b9:ee:b2:8e:d5:69:b5:1a:03:
         15:30:8c:f3:98:b1:27:c5:e8:94:a9:f9:aa:2d:32:25:41:92:
         da:fb:1d:b8:d2:49:21:8b:b8:f7:9b:81:b1:d4:8e:4e:03:ee:
         f7:06:05:6e:a7:90:8e:46:8b:55:fb:eb:5e:06:e8:e4:6b:47:
         ba:a2:1a:88:e9:4f:48:78:3f:88:fe:4b:b8:08:5d:c4:db:1b:
         8d:b7:48:fa:8b:d9:68:b7:0a:b8:c8:34:24:9d:7e:16:c1:ee:
         28:f3:79:98:21:cc:03:be:b1:04:41:b3:f1:74:66:48:d6:30:
         85:74:65:5a:57:0b:d1:9a:bf:54:dd:e2:df:43:bc:b2:a0:d6:
         77:c3:0f:cc:e5:2a:0b:ee:19:a2:5e:4e:67:47:f9:63:8e:6d:
         33:f4:c3:d7:d0:5d:04:5e:23:7c:1c:6d:b9:a5:ee:6f:1d:3c:
         10:71:fa:b4:31:69:9a:b6:f8:14:7e:58:48:37:77:74:12:b6:
         52:0c:97:5e:fc:e3:a8:f4:f4:07:4d:71:42:80:56:ee:44:db:
         5a:2a:c3:b2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUI/78v8bZtDwi2Z2GUstmnHeisbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBRjk5NjI3NEY1NjVEQzU1MzI2QUFDQUZENTRGMTlF
QkE1M0ZGOTAeFw0yNjA0MTMwNjU5MTdaFw0yNjA0MTQwODMyMTdaMDMxMTAvBgNV
BAMTKEI1MkRDNzQ3RkU4NDEwM0E4MDdCOTE4MTBFRjZGQkFDOTNGRkYyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyWm+U9gyFEgcOYHLQdXfSGQ2
S1KqlcBEv8q2uwsm99tt65PMmj1SPKS0IoiADNC6gb+8SuJgFPNDDKKWbbnvdSvF
nNgbZXsbJO+F4/LzHc219KLr2yHBCoufJ7ibTqfjgD0ujm6Ks5TYCyQRLWbUGvTX
+c5FoV72te8ENajZsWagk8zm+KKROpdFv4OqJ8lQoXglnhIEYk+0Rky2oZZiMrIV
IcD2p6MqxpF0fdwq5aLAP00ubUEwEgEv+MF7yW9h/ifv9PR417ODnPpbsEQFSHPA
6ldZtfvpeMacaQnljv2VaHXAzy55RQfIT35lFbAHccp3RdHmwXJ5FhBDWLpPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUtS3HR/6EEDqAe5GBDvb7rJP/8k0wHwYDVR0j
BBgwFoAUbK+ZYnT1ZdxVMmqsr9VPGeulP/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
OTIzNzg3Mzg0NjI1NTYxNy8wLzZDQUY5OTYyNzRGNTY1REM1NTMyNkFBQ0FGRDU0
RjE5RUJBNTNGRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkNBRjk5NjI3NEY1NjVEQzU1MzI2QUFDQUZENTRGMTlFQkE1M0ZGOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNzkyMzc4NzM4NDYyNTU2MTcvMC82Q0FGOTk2Mjc0RjU2
NURDNTUzMjZBQUNBRkQ1NEYxOUVCQTUzRkY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPdrmJEV5Ygm
/ma16CJ2xk+UKAL5Pv2+F0g70D26HgGK05fK1+MMd4V0SiA0ue6yjtVptRoDFTCM
85ixJ8XolKn5qi0yJUGS2vsduNJJIYu495uBsdSOTgPu9wYFbqeQjkaLVfvrXgbo
5GtHuqIaiOlPSHg/iP5LuAhdxNsbjbdI+ovZaLcKuMg0JJ1+FsHuKPN5mCHMA76x
BEGz8XRmSNYwhXRlWlcL0Zq/VN3i30O8sqDWd8MPzOUqC+4Zol5OZ0f5Y45tM/TD
19BdBF4jfBxtuaXubx08EHH6tDFpmrb4FH5YSDd3dBK2UgyXXvzjqPT0B01xQoBW
7kTbWirDsg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:11 2026 by rpki-client