Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
File:                     9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft (raw, json)
Hash identifier:          FvHfbO+bjhHeKgioR0V8o80Y96Eu1cgaJ5aw6NqKjko=
Subject key identifier:   2E:A1:ED:42:49:E6:BF:05:8A:4E:83:71:AB:86:A8:F5:D7:CF:79:8C
Authority key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Certificate issuer:       /CN=A914EAE40000/serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Certificate serial:       214FA197937A0849CEAE382FEC0BB0FAFF40D48A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
Manifest number:          01DC
Signing time:             Fri 05 Jun 2026 17:21:30 +0000
Manifest this update:     Fri 05 Jun 2026 17:16:30 +0000
Manifest next update:     Sat 06 Jun 2026 19:56:30 +0000
Files and hashes:         1: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl (hash: 7e1pseYNmTnyEg3mxb4px7f9AvY6/agH1az5H9z+5p8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4f:a1:97:93:7a:08:49:ce:ae:38:2f:ec:0b:b0:fa:ff:40:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
        Validity
            Not Before: Jun  5 17:16:30 2026 GMT
            Not After : Jun  6 19:56:30 2026 GMT
        Subject: CN=2EA1ED4249E6BF058A4E8371AB86A8F5D7CF798C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:94:f0:4a:f5:58:35:21:86:8f:c6:4e:f1:
                    b4:91:67:9a:ee:7d:be:bc:cd:3c:d3:af:7a:ff:52:
                    13:4f:1f:a1:2b:7d:08:34:4f:c4:3f:8d:ae:2d:74:
                    95:70:00:30:88:23:0e:e6:f4:1b:5e:2d:28:fa:84:
                    0e:c0:c0:36:83:ff:81:38:08:1e:f3:ff:2f:9b:8b:
                    ac:ee:e7:6c:ee:d2:b4:51:09:5f:74:06:c9:72:f8:
                    fc:45:5d:5b:60:b8:fe:83:7f:f6:56:c6:cf:38:6a:
                    40:5a:fc:ea:07:f4:fe:db:c9:1a:a1:db:74:5d:00:
                    35:6c:c4:c0:14:f6:1d:40:5b:cf:b0:7b:0e:9d:50:
                    9b:1b:69:dd:9a:50:8f:88:fc:92:c5:c5:1d:bf:71:
                    da:51:ad:07:4e:0d:71:cc:8c:78:d1:b0:b0:fb:3a:
                    d0:fa:8c:3d:89:5a:c2:38:3c:c9:9c:b5:89:aa:6b:
                    45:cc:c8:27:6b:19:d2:db:2c:70:d6:5c:0c:07:ff:
                    ed:bf:e0:e0:d7:df:a5:85:36:56:d2:c6:cf:2b:b2:
                    f6:e7:d1:95:63:8c:75:4b:04:b3:be:02:8c:42:06:
                    59:26:16:ef:ca:41:30:14:ec:b8:a6:75:8f:fd:60:
                    26:33:5f:c8:ec:cc:2f:0a:66:e2:6e:a3:04:69:33:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:ED:42:49:E6:BF:05:8A:4E:83:71:AB:86:A8:F5:D7:CF:79:8C
            X509v3 Authority Key Identifier:
                keyid:9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:c8:21:18:4d:71:2b:dd:9f:60:62:d5:b2:54:25:98:90:
         6a:8e:3c:9b:a9:eb:5b:f7:df:52:1f:c4:e5:31:dd:b6:68:c3:
         37:b8:17:ef:d6:b4:36:d3:16:53:63:72:6f:76:4e:76:31:0a:
         b0:b0:ab:58:84:4b:e5:bf:2c:38:11:18:f0:d4:a6:5c:a7:b9:
         ad:bc:b5:4d:7f:3f:e4:0a:e1:a3:31:60:78:66:0f:72:a4:24:
         9d:6b:fa:b1:80:0f:6b:20:59:15:71:41:49:10:07:77:61:bb:
         c1:3f:c2:dc:53:14:a3:d3:2d:1c:47:f3:ed:e3:2f:3e:d6:0b:
         5e:ea:71:23:c1:a7:33:24:39:2c:da:81:e7:4d:93:76:58:00:
         df:9f:b8:b9:07:b0:e3:56:f8:db:23:2f:95:14:db:53:29:81:
         c9:98:a6:af:86:c3:5d:ae:70:97:17:47:ee:53:26:22:05:02:
         39:23:e9:af:0b:e0:ad:e6:ee:6a:ba:44:21:3c:2c:3a:31:e7:
         77:f7:ab:6b:8c:d1:6b:0e:b1:0c:1f:9a:53:72:77:07:4b:5c:
         97:cb:67:8b:0b:73:b8:2e:95:77:b4:bc:80:a5:7c:01:3c:33:
         ef:41:a9:d5:4e:66:32:ab:9a:a1:f5:47:af:8d:7c:2a:1e:ef:
         8c:47:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:05 2026 by rpki-client