Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
File:                     567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft (raw, json)
Hash identifier:          7UzuS8wSq5xsiX9N7EDQWETshVhL+vKftEepaZFh1ts=
Subject key identifier:   E1:CA:EF:12:CE:AD:18:61:D8:0A:26:11:CF:4D:A8:98:5B:10:09:B1
Authority key identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C
Certificate issuer:       /CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
Certificate serial:       0EFA55B120D0A35A53DDDF00F268BB18681A2842
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
Manifest number:          03
Signing time:             Fri 29 May 2026 18:38:04 +0000
Manifest this update:     Fri 29 May 2026 18:33:04 +0000
Manifest next update:     Sat 30 May 2026 22:09:04 +0000
Files and hashes:         1: 567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl (hash: yL9z2AJvsAomc113GbBf9Bgq7ZIKgWZmltr54LTbdpQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fa:55:b1:20:d0:a3:5a:53:dd:df:00:f2:68:bb:18:68:1a:28:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
        Validity
            Not Before: May 29 18:33:04 2026 GMT
            Not After : May 30 22:09:04 2026 GMT
        Subject: CN=E1CAEF12CEAD1861D80A2611CF4DA8985B1009B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:82:79:14:cc:38:38:00:d6:04:dd:05:aa:
                    e7:84:47:fc:c6:d2:07:2c:49:79:57:8e:fe:32:93:
                    bd:55:51:75:fc:99:fd:f8:e9:78:11:52:8e:88:e2:
                    8e:76:da:49:39:46:b2:28:18:1f:43:c3:ad:50:1d:
                    db:e3:19:b7:64:fe:eb:79:0b:40:9c:d5:7d:00:6f:
                    8e:1f:59:a4:2e:21:72:46:5a:59:f2:81:8e:64:2f:
                    45:05:d0:91:13:49:e1:31:35:46:b0:50:8d:e8:cd:
                    09:37:2a:80:dd:1b:d3:56:e6:5e:68:cb:a7:a9:86:
                    e6:b2:07:0f:6a:b8:c9:51:af:56:3d:74:96:81:13:
                    bc:04:be:67:5d:20:0f:53:ff:8f:ad:20:7e:09:71:
                    b8:b5:32:b3:f2:2e:0d:9a:c9:1f:c2:30:f9:96:ba:
                    c0:a4:d1:58:94:ee:d6:28:42:8b:4a:c1:91:0f:37:
                    db:61:4c:4a:5f:f1:ea:d8:f0:4a:8e:d4:c4:b9:d2:
                    ac:22:16:f7:d1:11:ab:e7:0c:2b:a3:14:7a:82:77:
                    19:97:93:02:48:3f:6b:ea:7e:6a:ae:d4:b2:55:d6:
                    dd:32:ea:a1:73:df:4f:18:c3:df:05:38:99:aa:29:
                    8a:89:7d:07:8f:f1:e1:c1:50:41:0e:2a:8f:8d:08:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:EF:12:CE:AD:18:61:D8:0A:26:11:CF:4D:A8:98:5B:10:09:B1
            X509v3 Authority Key Identifier:
                keyid:56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:97:5b:44:d7:5f:83:79:0a:7f:a3:26:86:c1:74:2b:eb:
         19:7e:ac:33:f9:69:a5:28:e8:5b:8b:2e:e3:6d:89:d4:d4:32:
         93:2f:86:10:9c:39:de:48:fd:4a:84:5e:4a:9d:6a:13:8e:25:
         0e:2b:12:f1:97:ce:b7:c8:a5:44:cc:e6:17:5e:81:19:04:e9:
         c4:24:5e:e5:d8:41:e1:ee:bf:1c:9e:a0:9d:53:21:78:07:53:
         94:94:a9:02:35:4c:91:7e:7a:c7:ad:2e:bd:07:76:3d:1c:5a:
         31:1a:ea:bc:3a:f8:7e:ca:f5:32:f7:c1:c8:56:d3:65:16:5d:
         e6:e4:86:d6:56:64:95:20:93:b0:c9:7f:82:65:21:d8:b4:69:
         2f:a8:33:5d:ae:0f:ed:8c:d5:09:5d:e2:b0:f1:be:0f:5f:ca:
         45:2c:5e:89:b1:d3:e7:48:67:fd:d9:b3:c6:39:38:e8:d8:dc:
         08:19:f5:4b:c2:fc:76:e1:d1:e6:13:a2:9d:5d:7b:ac:5d:62:
         55:58:0e:58:01:10:b3:6d:26:e3:e6:8f:57:ff:35:a8:87:9e:
         08:ec:36:7a:91:52:40:97:63:d5:92:80:2f:0e:28:79:8a:55:
         22:41:a3:97:99:2b:e8:3c:44:d1:86:e4:26:17:29:46:2b:b8:
         78:59:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:59 2026 by rpki-client