Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
File:                     EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft (raw, json)
Hash identifier:          ulKEo0hV2Anv8/fh3fLOzylz5QPzmVWAOj6Rn90IfBw=
Subject key identifier:   FC:2A:3C:5F:80:5A:9E:FE:D0:43:CC:07:2A:1C:84:8C:4F:C7:A8:AC
Authority key identifier: EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4
Certificate issuer:       /CN=EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4
Certificate serial:       6A373B8AB1E893428D94692D248ECBB352A98371
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
Manifest number:          6C
Signing time:             Thu 03 Sep 2026 18:23:52 +0000
Manifest this update:     Thu 03 Sep 2026 18:18:52 +0000
Manifest next update:     Sun 06 Sep 2026 19:15:52 +0000
Files and hashes:         1: EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl (hash: /8wsnSfSKUDUQT1xfEWRQ3RPmAcfnZWye8fZv4yzDac=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:37:3b:8a:b1:e8:93:42:8d:94:69:2d:24:8e:cb:b3:52:a9:83:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4
        Validity
            Not Before: Sep  3 18:18:52 2026 GMT
            Not After : Sep  6 19:15:52 2026 GMT
        Subject: CN=FC2A3C5F805A9EFED043CC072A1C848C4FC7A8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:02:a6:73:ab:37:2d:fd:2a:df:16:69:c8:
                    20:37:ba:f2:37:b3:03:97:bd:bc:53:42:99:a8:90:
                    7d:dc:45:ee:1b:db:99:4b:85:12:0f:d8:ff:4c:2d:
                    07:42:2e:17:16:b8:01:2b:cc:60:9b:8d:ce:91:f3:
                    15:db:0e:83:40:82:37:ad:0b:a7:7d:87:07:c8:ff:
                    79:0d:21:2b:21:32:7c:d2:42:fd:70:45:03:2b:31:
                    1b:73:03:0f:b1:c9:25:b4:b1:4c:c6:57:e1:0e:d7:
                    ae:f8:b8:ac:af:38:37:cd:94:2a:c6:bd:2c:ce:08:
                    8a:2a:76:f0:40:c0:34:f4:14:31:bd:0c:0f:ee:7d:
                    50:1c:bf:ec:2b:d4:af:af:2d:54:46:9c:ef:63:7c:
                    b2:f7:b0:3b:a2:4c:c1:41:b7:64:b6:ea:ea:45:7d:
                    f5:85:75:ca:c6:92:c0:08:a3:46:47:9b:50:81:0c:
                    f4:c5:d1:06:05:e6:74:86:ff:6c:4e:a8:e7:10:46:
                    54:0a:f9:2d:d1:29:0e:47:a8:dd:8d:78:a6:20:1a:
                    f9:25:d7:22:68:75:28:d3:3c:19:9e:8d:05:3e:14:
                    67:17:55:9c:aa:4e:e0:77:ae:4f:9f:61:34:d2:bf:
                    80:4d:c9:bb:74:ac:90:70:f6:a3:0a:a3:36:c4:b4:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2A:3C:5F:80:5A:9E:FE:D0:43:CC:07:2A:1C:84:8C:4F:C7:A8:AC
            X509v3 Authority Key Identifier:
                keyid:EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:f8:cb:b2:a2:5b:57:29:c9:9d:62:96:1b:b9:e1:67:cb:bd:
         6a:77:61:9c:07:b5:f4:2a:f8:ee:e5:4a:e1:33:ff:ae:8d:24:
         25:ca:6c:62:47:d0:27:f5:cc:8b:b6:f1:33:e6:77:b1:c1:df:
         83:f1:ea:16:37:63:ea:4d:b0:02:79:f2:f5:33:a4:69:45:eb:
         0e:dc:01:d9:8d:71:48:09:21:49:ec:3d:88:f4:55:61:ef:51:
         51:1c:c2:c7:d0:21:d9:5f:3b:5d:41:14:05:d2:3a:4d:16:68:
         1e:ad:37:2b:0d:9a:c1:c7:94:2e:50:88:23:d8:9d:93:c0:e2:
         d0:05:70:6d:8c:6b:b7:dc:0f:a5:86:a1:c4:e8:6c:78:a2:b8:
         2e:07:08:0e:45:47:58:cc:73:39:d7:b9:e8:2a:1d:20:8c:2f:
         6c:f5:e0:ad:cd:f0:0b:18:a8:7c:98:8f:42:04:04:31:1f:b1:
         c8:4d:3d:2f:c2:d9:17:26:80:d4:f3:b5:98:5f:ba:88:fd:a3:
         19:ad:15:1c:25:4c:28:a9:07:59:6a:e8:ec:24:af:43:76:be:
         2c:c5:d4:84:c1:e4:ba:52:87:03:06:9e:5d:3c:5a:dd:29:74:
         50:4b:df:1f:b7:6e:1e:d4:fd:c5:3a:b7:6c:31:f8:d9:c6:b7:
         eb:33:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:41:55 2026 by rpki-client