Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
File:                     E597742A070B0180FE28980755EF35753C45FA58.mft (raw, json)
Hash identifier:          CkwDI8YRATFchqxJJExZCTStSobn5uyAz3FMwRekSX4=
Subject key identifier:   84:27:77:B6:2B:34:01:B7:87:2E:43:8E:D9:B8:46:94:7D:2C:A7:DA
Authority key identifier: E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58
Certificate issuer:       /CN=E597742A070B0180FE28980755EF35753C45FA58
Certificate serial:       15AAC170947088DC51E5FDB054A25F1543DF68CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
Manifest number:          7A
Signing time:             Fri 04 Sep 2026 08:45:16 +0000
Manifest this update:     Fri 04 Sep 2026 08:40:16 +0000
Manifest next update:     Mon 07 Sep 2026 17:35:16 +0000
Files and hashes:         1: E597742A070B0180FE28980755EF35753C45FA58.crl (hash: 6u+VzL6SovtH4CscVtUXPltsMcTGO1Y2rEwmMPBbKik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:aa:c1:70:94:70:88:dc:51:e5:fd:b0:54:a2:5f:15:43:df:68:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E597742A070B0180FE28980755EF35753C45FA58
        Validity
            Not Before: Sep  4 08:40:16 2026 GMT
            Not After : Sep  7 17:35:16 2026 GMT
        Subject: CN=842777B62B3401B7872E438ED9B846947D2CA7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:fb:b9:31:04:92:98:38:bb:37:f2:d3:77:
                    70:cf:b3:a6:c5:cd:2b:cb:78:48:62:d7:76:ba:30:
                    25:90:71:54:e2:63:4f:13:18:2e:2a:20:8d:82:a5:
                    42:8f:fb:40:73:c3:cc:dc:3a:08:31:99:9e:0a:62:
                    ce:e5:9c:c6:ca:db:86:23:b8:8b:3c:10:20:b3:72:
                    8c:b3:68:ec:eb:b8:49:22:36:bf:95:29:67:11:91:
                    a6:92:66:40:46:05:4d:81:8c:23:81:a8:ac:43:c9:
                    ef:85:13:c9:6c:ae:15:59:51:a0:f3:4b:bc:f5:a9:
                    41:e2:dc:96:aa:06:8b:79:61:ac:c9:18:6b:c7:f7:
                    88:d3:06:4c:89:ea:50:47:4d:23:ad:8f:7e:11:ed:
                    8c:32:a1:94:bc:79:8a:83:e6:48:2a:90:09:d0:8e:
                    5e:28:5f:a2:8c:45:2f:08:1f:e0:04:c4:ff:ae:9e:
                    69:de:9b:47:91:8f:99:ff:2e:fb:5e:b6:ab:a0:df:
                    3f:74:bf:13:d3:1b:4c:23:0c:a5:96:e7:87:82:c1:
                    66:c9:9b:27:f2:72:f0:ff:e2:a4:0d:f2:63:7f:20:
                    72:a6:a8:44:15:71:3c:4e:71:38:01:08:ff:39:17:
                    6e:e5:e9:1c:38:a5:d3:03:d5:82:f9:11:be:ce:e4:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:27:77:B6:2B:34:01:B7:87:2E:43:8E:D9:B8:46:94:7D:2C:A7:DA
            X509v3 Authority Key Identifier:
                keyid:E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:72:48:5a:2f:ea:ad:00:0e:bb:d8:7b:d0:41:8a:30:82:c1:
         12:fd:db:62:be:6d:3a:62:cf:a6:d7:70:fe:2a:4a:f2:05:e1:
         67:2a:f0:ac:15:86:4e:46:b6:39:28:0f:8f:19:7e:2b:60:4e:
         2d:db:b6:20:13:45:9f:1b:94:5e:d3:f3:45:91:3b:9c:ec:33:
         30:9a:2f:0d:4a:f9:b4:25:7c:af:57:6d:7d:d6:66:17:bd:bc:
         aa:04:48:de:0b:19:c8:9c:7e:f8:d9:14:ce:a1:35:21:39:6c:
         56:94:a4:a1:0c:49:5d:2a:a4:d8:a6:a6:0d:fe:aa:3b:fa:c0:
         05:db:4a:2b:e8:3c:84:bb:e8:bb:86:90:32:63:29:40:0f:f2:
         43:2f:ee:84:5b:b1:92:0f:55:f8:10:fd:c4:03:e0:55:4d:c8:
         97:c3:11:5f:e7:8d:07:d3:37:f0:79:f0:38:05:23:1e:af:5c:
         bc:5a:50:8b:bc:d9:2c:da:cb:d5:3d:54:60:f0:dd:ef:d5:20:
         4a:60:fb:46:54:1c:63:d0:68:d1:a7:25:ab:72:67:c8:c5:cd:
         ac:ae:4e:ad:88:ba:64:96:45:19:c4:26:89:88:6d:48:7a:8e:
         e5:07:b2:e2:b6:6c:9d:16:81:34:b2:58:e6:05:73:a4:1b:af:
         37:ba:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:07 2026 by rpki-client