Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
File:                     786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json)
Hash identifier:          FAZlSb2nFJa26E6iL5FNPMXzBl2sDzRqVINQGYpc7pY=
Subject key identifier:   7B:03:1E:EF:F2:32:B3:45:35:75:19:75:3A:47:E9:B4:8B:7F:20:0B
Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
Certificate issuer:       /CN=786588C287D0F949A379F4D51335F9423A0E03E3
Certificate serial:       58BED130A1936A15529BDDFD1530AB8962DCE233
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
Manifest number:          06
Signing time:             Sun 12 Apr 2026 23:24:17 +0000
Manifest this update:     Sun 12 Apr 2026 23:19:17 +0000
Manifest next update:     Mon 13 Apr 2026 23:28:17 +0000
Files and hashes:         1: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: 3Oo8ev6X/WUB3cCie8ctWSzwRn0NRjvxUxq5swH6ybM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 23:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:be:d1:30:a1:93:6a:15:52:9b:dd:fd:15:30:ab:89:62:dc:e2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3
        Validity
            Not Before: Apr 12 23:19:17 2026 GMT
            Not After : Apr 13 23:28:17 2026 GMT
        Subject: CN=7B031EEFF232B345357519753A47E9B48B7F200B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:fa:0b:ff:c2:05:ba:ea:4f:92:1d:47:69:
                    40:60:44:83:98:7c:cd:75:af:34:35:36:05:b3:2a:
                    33:aa:59:5d:cf:34:b2:f1:92:c3:cf:ff:78:88:29:
                    e9:85:97:c8:69:bb:99:66:8e:ac:31:3f:41:52:61:
                    f7:de:7b:21:a8:80:b8:68:a3:66:e0:69:a5:a3:20:
                    55:2d:40:a0:ba:ff:81:d0:d1:3f:78:df:a4:9c:17:
                    f5:a3:40:5f:26:4b:f5:e3:b6:70:47:b6:45:f7:19:
                    30:8d:76:27:39:c8:d4:8e:2d:c0:a8:df:4e:5d:15:
                    df:93:ff:a3:9a:c9:0a:e7:bf:f4:b9:8d:d4:3c:df:
                    11:c4:4c:25:fe:2c:4f:75:8d:b9:f9:e5:01:88:91:
                    32:c5:59:d9:2a:ae:79:de:41:ad:a2:9a:21:9a:7b:
                    3b:3a:d5:b3:7f:98:6c:9e:08:c1:cc:68:b3:18:36:
                    e3:0a:31:3b:9e:b8:79:7d:ce:ce:6e:36:19:94:4a:
                    0a:aa:33:aa:74:57:2c:65:b1:52:11:28:87:d3:09:
                    2a:f1:97:10:f8:1b:f1:9f:d6:1d:d2:a7:3a:ac:37:
                    1e:e9:ef:94:d1:c8:22:2b:4b:fa:21:dd:fc:d8:9d:
                    37:e3:6e:83:66:43:ff:6f:75:df:fd:cd:ce:c2:db:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:1E:EF:F2:32:B3:45:35:75:19:75:3A:47:E9:B4:8B:7F:20:0B
            X509v3 Authority Key Identifier:
                keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:83:1d:2e:93:21:b8:03:16:d2:e9:2f:11:49:c6:36:e0:0a:
         c6:09:db:9a:a1:1c:46:7b:4c:f2:87:5d:f6:9a:a0:7d:b4:c8:
         8c:21:f7:7f:d1:91:2a:00:4d:b4:19:7e:e7:a8:63:25:8a:47:
         08:9f:42:1a:f3:40:6c:e3:90:bc:c5:f6:0c:ac:ca:a4:f5:60:
         59:e7:0a:68:a9:83:6a:11:54:0f:1d:56:91:67:b4:6f:ac:8c:
         38:98:89:0e:52:13:e1:f9:cf:de:62:82:06:15:bc:e0:b3:40:
         4d:c0:f8:63:71:96:72:94:df:ae:f7:6b:a8:31:bb:16:95:db:
         b4:ba:c8:52:12:a1:43:49:c5:c1:46:e2:e1:29:f6:b5:24:b9:
         f8:a0:d1:39:4d:9a:81:fb:22:7f:59:7a:bc:3c:b9:cf:aa:51:
         cb:43:d6:4d:f6:d4:ca:5c:90:eb:67:a5:a2:7b:94:74:95:6d:
         44:e5:41:0d:f4:83:5a:fb:2a:8d:85:a7:c9:37:57:f0:ce:b9:
         d0:52:d2:f4:74:d8:95:97:95:f1:be:a8:49:c0:0f:1b:f8:38:
         90:3b:9e:ec:40:02:8c:e4:e5:28:75:b9:8e:41:e8:57:61:99:
         ca:9f:2a:72:4c:c5:6b:24:b5:14:74:51:da:c3:29:c1:5f:c7:
         8c:db:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:05:09 2026 by rpki-client