Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          zaZARpkBsxtLKNj4jDBjEyXMyPhI3AWf4jwTR+mFmd0=
Subject key identifier:   DD:21:60:00:6F:FB:26:BD:E2:E7:E5:2D:81:27:48:83:DE:62:75:1D
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       215FDBA284FC9C072F959F2B05A92942E3FF7242
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          BA
Signing time:             Tue 14 Jul 2026 18:16:51 +0000
Manifest this update:     Tue 14 Jul 2026 18:11:51 +0000
Manifest next update:     Wed 15 Jul 2026 19:22:51 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: LtG9hU4rYzWbO9gMQhXBK4bcKG02Cm02ZlML3jIQC/g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 19:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5f:db:a2:84:fc:9c:07:2f:95:9f:2b:05:a9:29:42:e3:ff:72:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: Jul 14 18:11:51 2026 GMT
            Not After : Jul 15 19:22:51 2026 GMT
        Subject: CN=DD2160006FFB26BDE2E7E52D81274883DE62751D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:65:25:bf:c7:1e:12:85:68:32:88:52:da:
                    0d:ff:20:55:ff:66:4d:cb:bd:f0:ab:85:73:ab:e3:
                    d2:ce:aa:fe:6f:52:ff:3e:3b:3a:52:fb:22:ee:5f:
                    6d:67:bc:bd:23:37:26:db:e3:9e:ba:87:22:94:63:
                    9f:ba:81:28:04:7c:a3:48:1a:c7:da:b2:61:fc:1c:
                    5c:73:ae:0d:63:44:43:3b:12:8e:9f:a6:24:93:e6:
                    35:a3:98:36:9f:46:e4:6c:08:92:fd:c7:0c:df:06:
                    81:82:8b:2e:32:73:fd:b2:38:92:5e:cb:77:9a:52:
                    a2:59:ea:ba:f9:bf:6e:34:94:97:4b:20:4a:6a:1a:
                    df:f1:c7:8c:19:76:d4:32:e8:6d:66:ce:c5:45:5e:
                    db:fe:d1:3f:33:bb:5e:b9:f3:ff:6b:76:2d:e2:62:
                    c1:df:78:0f:dc:74:e7:b0:35:f5:b7:18:5f:aa:02:
                    d1:24:95:be:4a:6e:45:af:8a:5f:be:37:4d:26:55:
                    de:61:21:21:9f:ca:22:07:e2:ae:70:2d:8d:44:5c:
                    22:b6:5c:e3:0e:8a:c6:21:d3:b5:dd:e7:9f:9f:a1:
                    6d:31:cc:39:f5:9e:c1:3a:ce:31:59:34:d2:0a:6c:
                    90:42:d1:83:44:cf:09:e0:65:40:8a:8b:b1:a8:3a:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:60:00:6F:FB:26:BD:E2:E7:E5:2D:81:27:48:83:DE:62:75:1D
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:f5:db:1d:ca:73:f2:39:ab:61:e8:a8:bb:d2:cb:64:f4:
         86:5b:40:4d:b0:6f:e9:fd:1b:ad:c0:6c:a1:f9:91:d0:03:46:
         64:24:39:f0:2e:29:70:87:7b:4b:64:3e:64:5e:7b:da:f5:90:
         9c:81:d0:60:92:1e:70:f7:2c:e8:1b:66:0b:63:c5:66:93:24:
         1f:88:99:e0:03:25:e6:dd:68:14:3a:51:21:81:79:a9:02:55:
         27:cb:c7:cb:97:3c:86:61:0f:2c:10:ed:5d:58:f5:ba:42:03:
         ad:06:2d:03:e5:92:ad:e8:f4:bb:db:a3:00:c6:a5:4f:f7:07:
         ee:c9:e1:eb:be:86:11:ce:d0:c5:c6:60:37:4c:98:0e:bb:b9:
         3f:dd:47:dd:cb:2f:9d:cf:46:a7:61:0d:45:a8:09:bb:01:75:
         9b:e4:e5:fe:47:f1:a7:0c:15:5e:d7:17:69:31:49:7f:2a:e8:
         6f:d6:e1:77:d0:9c:29:6d:3e:43:33:95:3c:c3:76:c2:11:00:
         78:81:05:1b:b6:a1:8a:1f:10:d4:77:e9:9f:e3:36:52:68:c1:
         e1:8c:e1:8a:a5:c6:20:6d:e8:f9:1c:2d:3f:aa:ca:3d:fc:42:
         d4:15:14:ef:9d:5f:2e:e8:a6:d4:ae:c6:5f:7a:b7:49:24:e9:
         59:10:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:17 2026 by rpki-client