Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
File:                     64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json)
Hash identifier:          atgc8v5sx9FZMlYsCjJFEvGEypWAsTJKUMjVXDukFmo=
Subject key identifier:   CD:E3:30:51:72:D4:B6:F6:2A:F5:4F:13:54:63:8E:A8:18:F1:F0:AF
Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C
Certificate issuer:       /CN=64CE724CC33744853B20D6E7922A2F808B8C300C
Certificate serial:       607E697831BDD9091D1480D03E5F30D4BC7B678A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
Manifest number:          3A
Signing time:             Fri 29 May 2026 05:47:40 +0000
Manifest this update:     Fri 29 May 2026 05:42:40 +0000
Manifest next update:     Sat 30 May 2026 08:48:40 +0000
Files and hashes:         1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: PNjN2qOR9n9uw7savxmBIKV6z8VYC/2tixqLjf9uo/4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7e:69:78:31:bd:d9:09:1d:14:80:d0:3e:5f:30:d4:bc:7b:67:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C
        Validity
            Not Before: May 29 05:42:40 2026 GMT
            Not After : May 30 08:48:40 2026 GMT
        Subject: CN=CDE3305172D4B6F62AF54F1354638EA818F1F0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:fc:75:84:94:a3:c4:b8:c8:98:51:8b:a6:
                    ae:36:78:fd:61:e7:b5:5e:af:8c:72:e1:a2:1d:90:
                    55:8f:cd:0e:24:d6:66:15:8e:b7:c4:88:34:ad:a0:
                    4d:8c:13:2f:55:88:e6:47:5b:80:94:5e:6b:ab:6d:
                    a5:68:96:86:7b:02:d4:23:1a:95:1d:0a:e1:83:37:
                    42:cc:24:69:a0:ff:5b:f9:9d:83:38:84:97:7f:a0:
                    02:cb:f6:ba:17:20:f9:4c:79:2d:fa:dd:ea:f2:55:
                    4d:30:5e:e1:52:8d:33:7f:e0:8b:f7:91:67:94:50:
                    e5:5d:53:64:63:76:e9:0d:3a:2b:d8:cb:ec:e5:ec:
                    e5:bd:5e:ea:30:34:7c:d6:fd:4e:b1:cd:f7:c6:48:
                    7c:57:6e:17:e1:a2:d6:38:bd:6f:45:56:3e:45:e8:
                    4b:0b:ef:0e:02:c7:79:0e:a1:1f:55:07:45:3f:f8:
                    aa:90:ac:77:3e:1d:f8:30:bd:d1:58:dc:c1:83:f1:
                    52:da:8c:ee:e6:78:97:26:27:86:8b:cd:4c:54:60:
                    7d:47:98:63:be:c7:db:4f:fb:73:ea:b9:6b:75:2c:
                    0a:ad:60:73:32:85:35:4c:3e:bc:7b:83:73:84:23:
                    b8:53:54:45:17:ce:9b:8c:99:47:32:50:d7:2d:99:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:30:51:72:D4:B6:F6:2A:F5:4F:13:54:63:8E:A8:18:F1:F0:AF
            X509v3 Authority Key Identifier:
                keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:0f:86:84:ae:37:8d:78:0e:dd:e9:65:a6:1f:63:ba:d6:
         2c:18:14:58:d0:1b:ca:9b:d6:64:9c:e3:f2:6c:ff:9e:15:fa:
         53:7f:a7:ed:41:c9:3b:91:c5:ec:5c:b7:6a:ea:d9:3e:10:73:
         7e:28:de:51:46:cd:32:8f:7b:62:5d:1b:d7:fd:c8:96:c0:bc:
         5c:19:8e:a8:f3:28:cc:82:3a:e8:04:42:94:ca:3f:68:24:59:
         28:bc:a2:ed:b4:9a:88:45:4a:8e:d7:0f:9c:10:f8:21:dd:7f:
         36:57:1c:60:67:dd:de:3d:f3:44:e8:fb:ed:bc:35:0c:a2:70:
         d2:3d:b8:72:54:84:35:32:76:93:e8:6e:70:d9:73:41:1d:6c:
         b6:5d:c7:ae:1f:f4:69:ca:b7:cf:6e:07:25:c8:ca:1c:18:2f:
         69:46:a7:63:90:65:1b:89:48:7f:1f:42:17:ac:9f:59:4c:e8:
         7b:ee:f7:33:79:9c:07:ff:6c:6d:fc:49:c5:7e:6c:15:c9:f5:
         28:18:5a:43:f6:e1:8e:15:6d:8a:88:85:dd:ad:b8:78:8f:ee:
         75:21:ea:82:6a:66:97:f5:11:55:05:67:78:e8:12:05:21:f4:
         94:75:8d:d8:2b:6e:64:29:b0:a9:93:e0:1f:5a:4d:0d:9b:43:
         e0:bc:12:e9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYH5peDG92QkdFIDQPl8w1Lx7Z4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4
QjhDMzAwQzAeFw0yNjA1MjkwNTQyNDBaFw0yNjA1MzAwODQ4NDBaMDMxMTAvBgNV
BAMTKENERTMzMDUxNzJENEI2RjYyQUY1NEYxMzU0NjM4RUE4MThGMUYwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1vx1hJSjxLjImFGLpq42eP1h
57Ver4xy4aIdkFWPzQ4k1mYVjrfEiDStoE2MEy9ViOZHW4CUXmurbaVoloZ7AtQj
GpUdCuGDN0LMJGmg/1v5nYM4hJd/oALL9roXIPlMeS363eryVU0wXuFSjTN/4Iv3
kWeUUOVdU2RjdukNOivYy+zl7OW9XuowNHzW/U6xzffGSHxXbhfhotY4vW9FVj5F
6EsL7w4Cx3kOoR9VB0U/+KqQrHc+HfgwvdFY3MGD8VLajO7meJcmJ4aLzUxUYH1H
mGO+x9tP+3PquWt1LAqtYHMyhTVMPrx7g3OEI7hTVEUXzpuMmUcyUNctmesXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUzeMwUXLUtvYq9U8TVGOOqBjx8K8wHwYDVR0j
BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy
RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0
NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+QPhoSuN414
Dt3pZaYfY7rWLBgUWNAbypvWZJzj8mz/nhX6U3+n7UHJO5HF7Fy3aurZPhBzfije
UUbNMo97Yl0b1/3IlsC8XBmOqPMozII66ARClMo/aCRZKLyi7bSaiEVKjtcPnBD4
Id1/NlccYGfd3j3zROj77bw1DKJw0j24clSENTJ2k+hucNlzQR1stl3Hrh/0acq3
z24HJcjKHBgvaUanY5BlG4lIfx9CF6yfWUzoe+73M3mcB/9sbfxJxX5sFcn1KBha
Q/bhjhVtioiF3a24eI/udSHqgmpml/URVQVneOgSBSH0lHWN2CtuZCmwqZPgH1pN
DZtD4LwS6Q==
-----END CERTIFICATE-----
Generated at Fri May 29 22:02:53 2026 by rpki-client