Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
File:                     567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft (raw, json)
Hash identifier:          Strcrgkwz6J3UWZAXNasB9tJN7UWePKmQ92pPYaA6tE=
Subject key identifier:   90:DC:0C:BE:31:AF:CB:33:B3:ED:AF:00:D9:9B:5F:81:2C:A7:E2:3A
Authority key identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C
Certificate issuer:       /CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
Certificate serial:       2963034530894F885B430AE4C9848924276A70AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
Manifest number:          7C
Signing time:             Fri 28 Aug 2026 06:47:41 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:41 +0000
Manifest next update:     Mon 31 Aug 2026 13:48:41 +0000
Files and hashes:         1: 567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl (hash: yMd09P/DkOjy2/l8GUiSYde+9He5hPsszHYzKqy8jDY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:63:03:45:30:89:4f:88:5b:43:0a:e4:c9:84:89:24:27:6a:70:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
        Validity
            Not Before: Aug 28 06:42:41 2026 GMT
            Not After : Aug 31 13:48:41 2026 GMT
        Subject: CN=90DC0CBE31AFCB33B3EDAF00D99B5F812CA7E23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:ad:43:66:d8:fe:58:93:62:d3:02:bf:14:
                    ab:2e:6f:b5:c1:44:dc:07:4a:66:84:15:1a:1e:4e:
                    ca:fb:8a:ca:9a:79:9c:41:56:1f:d9:7c:96:ea:51:
                    eb:69:42:f5:c5:78:75:66:27:78:e5:5a:1f:1e:5b:
                    ba:d6:b1:cb:33:44:98:4d:f9:95:e8:ef:6b:87:a3:
                    9b:18:39:5e:ef:c5:f3:f1:a6:fd:c3:4f:26:a0:64:
                    81:0e:dd:96:69:e2:cc:da:7c:3b:b7:5c:e7:4c:d3:
                    18:ed:f1:d4:29:d6:d3:13:54:8d:93:81:52:a0:4f:
                    06:a4:9f:20:e5:b5:c7:a9:f0:4a:25:0e:00:e3:98:
                    2d:61:97:3a:b2:1b:29:8b:b2:17:e2:5f:1e:08:c8:
                    ba:1d:48:57:76:e2:1b:61:f1:f4:e1:4a:de:3f:a7:
                    32:ad:0a:b3:15:6c:f5:c9:42:06:02:5f:68:c3:2a:
                    b0:0e:b8:87:ab:d6:e0:52:fe:85:49:ec:93:af:e8:
                    26:71:94:4b:76:65:5f:55:c1:58:19:70:3f:c1:44:
                    60:32:34:9f:96:77:16:86:ae:17:33:62:f8:e3:37:
                    a6:a4:18:2b:7c:0d:0d:5a:bf:ac:53:12:77:61:4c:
                    6b:bc:a3:df:60:24:c8:4c:83:59:64:4b:e3:ff:fd:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:0C:BE:31:AF:CB:33:B3:ED:AF:00:D9:9B:5F:81:2C:A7:E2:3A
            X509v3 Authority Key Identifier:
                keyid:56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:1e:92:ff:4e:7c:c3:ab:88:56:9b:e3:58:db:39:cd:87:
         f9:4b:95:d4:e1:c7:23:60:0e:a9:f8:82:b5:75:d3:62:50:eb:
         11:06:51:07:14:3e:fc:6e:e7:15:16:b0:db:36:9e:57:53:d6:
         71:4a:3e:90:c8:08:78:51:7a:b7:54:46:a0:d1:2b:ab:f7:1c:
         95:de:fb:25:ea:9d:1c:c8:01:97:cd:6b:02:51:ab:40:8d:50:
         27:6e:35:e3:95:f8:6d:2d:de:7d:21:42:48:1e:b7:9e:18:79:
         10:d8:ec:12:6d:90:7b:64:d9:a7:94:2b:14:ca:9f:04:a4:97:
         0a:61:f6:ee:1d:67:3c:b6:32:84:79:54:f1:19:03:a0:c5:ca:
         88:69:d1:e0:ba:7e:6f:4f:e0:cf:ef:18:ff:f7:05:77:95:94:
         11:14:31:61:fd:5c:c3:21:e3:7d:c3:e4:9c:9e:b7:4c:f5:0c:
         e4:dd:ce:e8:fd:a6:e2:a9:da:6d:64:5f:77:cc:6e:fc:9b:1c:
         15:71:c6:8a:6c:4b:22:d8:2e:5b:1f:7d:a6:6c:2d:dd:7f:ec:
         bd:5a:46:05:e2:3f:31:b3:51:98:1f:8f:d0:ba:ab:c3:40:2a:
         51:93:69:8a:83:c9:ce:fd:55:1d:39:35:3d:30:6d:c7:45:1c:
         37:a9:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:45:19 2026 by rpki-client