Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
File:                     F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft (raw, json)
Hash identifier:          O/FHD4TS5uMmGINBB0Q5RjwiAVgyKDMDc9K1DZxWn+c=
Subject key identifier:   04:22:2D:24:C3:6C:B0:45:E6:DC:4E:DF:6A:40:52:5D:80:DF:24:2F
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       6338202FDB094CB3CA188DA64F938D4AD3F9AD63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
Manifest number:          0F
Signing time:             Sun 12 Apr 2026 22:14:17 +0000
Manifest this update:     Sun 12 Apr 2026 22:09:17 +0000
Manifest next update:     Tue 14 Apr 2026 01:27:17 +0000
Files and hashes:         1: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl (hash: IMkBR+UO+Bqphr8XrB1DKSU5pYyb+YoO/tCD9XUf0iQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 01:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:20:2f:db:09:4c:b3:ca:18:8d:a6:4f:93:8d:4a:d3:f9:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Apr 12 22:09:17 2026 GMT
            Not After : Apr 14 01:27:17 2026 GMT
        Subject: CN=04222D24C36CB045E6DC4EDF6A40525D80DF242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:11:5c:72:b2:9f:58:bd:3c:01:d0:87:5b:
                    1c:04:2c:b0:94:9b:0d:62:ad:d0:3e:23:25:f2:7d:
                    ad:dd:ec:8a:dc:f4:d6:b1:41:0a:4d:20:46:c9:51:
                    7a:4a:e1:c4:13:86:92:df:30:50:1f:13:2c:98:fa:
                    2c:f7:e8:ba:c8:31:c2:f5:d0:b5:39:a6:6a:7a:81:
                    05:ed:9b:80:72:fd:35:51:ae:34:9f:bc:7c:5c:be:
                    b5:2e:d6:58:82:03:74:a9:a8:01:a0:79:a6:73:e8:
                    ff:d7:a2:de:d5:13:28:7b:98:7d:9e:6a:55:18:f0:
                    0d:d6:04:a1:9b:ab:74:b3:9a:80:2b:8a:be:27:ca:
                    4c:cf:e1:e3:e7:b0:fb:b1:a6:5d:17:96:0b:db:6a:
                    da:ef:12:cd:5b:f8:77:2e:32:e5:31:18:0a:ff:0a:
                    a2:0c:50:a2:b0:e4:65:8a:7c:b2:d7:75:59:78:14:
                    8a:5a:36:1f:55:ef:b2:12:3d:1b:59:ba:a0:df:ce:
                    99:4b:65:47:ae:84:7b:3f:21:21:e2:86:1f:a6:c4:
                    d9:31:01:f9:82:25:02:32:1c:e1:01:96:c5:20:e1:
                    a2:6d:65:1d:7a:7e:e3:b1:ba:b7:a6:49:6e:de:fb:
                    dd:9d:64:73:3f:2e:cc:63:74:8d:b5:ed:6a:f2:5c:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:2D:24:C3:6C:B0:45:E6:DC:4E:DF:6A:40:52:5D:80:DF:24:2F
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:61:66:e6:4a:4e:97:9e:f2:1c:7b:8a:76:68:96:e6:d6:83:
         43:ae:5d:6b:5c:22:a7:38:8d:e5:6d:74:4e:e7:9e:7c:19:80:
         07:20:f3:14:98:17:c6:1a:1e:a2:6f:c1:7e:3e:41:ef:89:ac:
         c0:ab:44:f9:d3:d4:74:12:f9:b6:dd:6d:1b:5e:e2:5a:b6:aa:
         f0:5e:ea:ee:7e:94:5f:ec:10:61:3a:2b:e0:b8:a1:cc:60:80:
         1b:54:da:34:58:27:65:7c:7e:0f:34:79:3d:76:91:e1:c5:c8:
         ab:0a:9b:be:3a:db:78:88:9a:57:be:2e:63:db:02:e7:2e:67:
         e8:4b:61:ef:e2:63:d5:0d:8c:2c:ee:01:c2:3a:0f:e6:69:fd:
         9f:ee:6b:cf:e6:5a:40:ad:57:e3:a5:00:52:6a:e5:03:3d:a9:
         0b:12:b6:53:e2:1c:db:47:ab:ff:52:96:c4:c9:b9:21:ac:ac:
         72:e9:a9:b5:7c:d1:26:e5:0d:c1:b9:fa:05:e8:02:ea:2e:fe:
         22:05:f8:d1:b0:31:f2:28:48:10:05:b6:bb:95:26:d2:2b:83:
         b9:7b:99:5a:4e:1e:a8:17:01:fb:db:f4:89:d6:35:a8:82:62:
         4a:57:68:f4:04:17:d2:03:70:46:7d:a4:2c:81:ad:5b:45:ac:
         1f:16:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:53 2026 by rpki-client