Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
File:                     E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json)
Hash identifier:          sjkbFGG6gFss7Sdk77mpUv+j3YPHchnVfH2ksBtOSeU=
Subject key identifier:   5A:6B:BF:BD:6D:2B:86:0F:6D:85:87:41:9C:61:DC:60:F7:EE:F1:A2
Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Certificate issuer:       /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Certificate serial:       56D5345011235028B4F5764E813D57A3E368D11C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
Manifest number:          3A
Signing time:             Fri 29 May 2026 10:17:46 +0000
Manifest this update:     Fri 29 May 2026 10:12:46 +0000
Manifest next update:     Sat 30 May 2026 13:27:46 +0000
Files and hashes:         1: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: b/VZ4VD9WivJzfdLV1gXk8crNF4ZjIX2MzfszmbKqHE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d5:34:50:11:23:50:28:b4:f5:76:4e:81:3d:57:a3:e3:68:d1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
        Validity
            Not Before: May 29 10:12:46 2026 GMT
            Not After : May 30 13:27:46 2026 GMT
        Subject: CN=5A6BBFBD6D2B860F6D8587419C61DC60F7EEF1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:3c:7a:02:ff:63:2e:4a:7c:89:a2:75:55:
                    30:7e:0f:dd:fa:9c:1b:6c:0a:20:95:1c:43:5c:76:
                    68:e8:d6:b1:6c:cd:b8:24:b7:1f:d9:f6:74:b1:e4:
                    2a:19:4b:76:4f:93:6b:68:04:bc:b1:71:7b:7d:fa:
                    ed:7b:23:45:f1:ee:ee:31:bf:74:f5:cf:5e:fb:7d:
                    32:13:59:75:4c:85:bb:10:79:03:65:02:7c:49:61:
                    59:c4:99:b7:af:bc:f3:9d:18:e2:72:c7:f0:f8:38:
                    18:61:4c:e9:bb:09:c5:9e:c0:8f:36:37:35:65:1c:
                    85:dc:8d:61:1b:da:1f:d5:9a:9e:d4:30:a4:d4:0e:
                    20:06:1c:c6:7a:a2:b6:94:00:9c:26:ff:86:7c:85:
                    7f:14:87:f6:bd:02:9d:9c:85:d6:68:8f:1d:85:1c:
                    75:ec:6e:8c:89:b9:ea:01:95:0b:86:9b:e2:2b:9f:
                    c6:81:69:a6:2f:6f:96:d7:76:20:d4:18:25:ed:89:
                    b1:da:79:c6:28:d8:93:2c:42:5c:3d:d6:13:84:18:
                    dc:7f:31:92:52:b9:d9:ab:1d:7e:5a:97:90:c3:34:
                    a0:84:19:cf:88:c8:5a:f8:9d:31:84:17:b5:77:73:
                    c8:61:40:b0:fe:bc:90:db:ab:bc:b7:c8:7e:21:75:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:BF:BD:6D:2B:86:0F:6D:85:87:41:9C:61:DC:60:F7:EE:F1:A2
            X509v3 Authority Key Identifier:
                keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:7b:93:a6:bd:49:ed:57:3a:aa:89:72:1f:21:ac:8d:b0:
         d9:68:f4:ba:e8:d8:93:81:06:39:f7:cd:82:1d:b4:3e:96:e6:
         a5:86:58:1b:2d:da:5d:1c:54:4e:9f:35:50:a2:d2:8f:78:fb:
         91:10:6c:48:bd:14:0a:e2:98:d8:65:01:93:8f:2c:02:12:20:
         b8:a7:fc:3c:2c:70:40:e4:f4:53:fd:7e:74:54:a8:78:76:13:
         88:83:14:b9:d2:ed:a8:38:f0:a5:e9:90:5f:56:39:e8:50:de:
         8e:a6:aa:51:79:b6:94:76:7b:2b:66:09:0c:c7:54:50:38:bd:
         48:50:d1:01:0c:4e:f3:ed:64:8f:54:01:9a:07:d0:d2:11:41:
         ba:08:1e:d4:1c:4c:ea:8c:fa:1c:83:8f:2d:8e:81:2a:93:a6:
         7d:57:a0:30:f9:46:43:1d:b5:98:b8:ce:ef:48:ae:d2:f7:79:
         bb:be:fc:b1:96:41:89:00:86:66:c4:fc:77:00:9d:e3:ae:09:
         04:1f:76:8c:f8:a5:96:73:07:9d:3f:dd:8a:4d:95:fe:09:44:
         b3:d4:ed:67:98:71:79:74:d4:6a:f2:a2:3c:ea:ce:71:3d:c6:
         2b:5a:49:39:8d:ad:f8:17:f8:59:63:60:73:37:09:0d:c4:45:
         ae:1d:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:54 2026 by rpki-client