Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
File:                     C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft (raw, json)
Hash identifier:          jpv02Susc2C5LS5MVv8FEk2Q9fbcET4rClVdi4KktuQ=
Subject key identifier:   7C:54:D0:CB:AA:FD:0F:72:B6:9D:57:5B:73:02:DD:7D:03:5B:20:D1
Authority key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF
Certificate issuer:       /CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF
Certificate serial:       5717CBBF3BED72EC44667F46B133154FFC69497B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
Manifest number:          6D
Signing time:             Thu 03 Sep 2026 18:43:55 +0000
Manifest this update:     Thu 03 Sep 2026 18:38:55 +0000
Manifest next update:     Sun 06 Sep 2026 19:27:55 +0000
Files and hashes:         1: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl (hash: NK+XBIEbvBAy0m8AJ32tfbrrrG24znKdnBDZL7JWJO8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:cb:bf:3b:ed:72:ec:44:66:7f:46:b1:33:15:4f:fc:69:49:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF
        Validity
            Not Before: Sep  3 18:38:55 2026 GMT
            Not After : Sep  6 19:27:55 2026 GMT
        Subject: CN=7C54D0CBAAFD0F72B69D575B7302DD7D035B20D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:c3:c3:b6:b6:54:5c:a0:dc:22:0a:45:6c:
                    8f:26:a3:c9:eb:4c:f3:26:b2:8a:cc:05:fb:5a:d7:
                    77:15:3b:84:4f:d2:fc:91:3e:9a:26:b8:b5:b5:1a:
                    2d:1a:21:01:74:e5:b9:e1:ba:8a:21:6c:b6:89:ac:
                    18:b6:b4:4c:d3:e7:df:c0:c2:a8:14:0e:59:96:fb:
                    a2:7e:43:e2:c2:cb:40:c9:ba:98:92:9f:e0:92:32:
                    60:92:d0:72:62:91:61:0a:f6:cf:df:06:8a:4e:4b:
                    cb:44:51:df:97:8e:7c:a3:a5:b3:e7:0a:d3:e6:0c:
                    05:8c:9a:4c:62:ac:db:9b:64:78:a9:1e:cb:5e:23:
                    ea:dd:35:30:ea:c6:b0:94:97:3b:c7:93:4a:6b:98:
                    30:cb:57:55:45:fc:1d:2e:c8:59:7f:93:3b:97:bd:
                    02:55:2f:27:bb:30:9c:89:71:d0:76:7d:b8:b2:14:
                    7a:46:2c:a0:72:ae:47:ea:03:37:6f:d6:df:5a:f4:
                    dd:fe:0b:6d:54:df:c8:c4:17:4e:ca:ae:59:eb:f1:
                    5d:be:70:83:d0:0f:36:af:fb:0c:6a:10:f9:26:5a:
                    ee:45:7f:0c:3a:3a:36:47:7e:ff:cf:31:39:c5:7c:
                    49:52:e1:e2:e1:af:6b:0f:c7:17:da:e0:65:5d:d9:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:54:D0:CB:AA:FD:0F:72:B6:9D:57:5B:73:02:DD:7D:03:5B:20:D1
            X509v3 Authority Key Identifier:
                keyid:C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:73:82:25:a5:88:71:37:16:bd:c2:5e:24:99:e6:4b:b3:
         a0:e5:74:24:70:cf:b4:c9:df:52:56:f9:54:bd:c2:b6:1e:bc:
         bd:df:29:37:3d:c6:41:03:95:f8:2e:df:1b:eb:32:a5:c4:91:
         43:73:75:8f:74:22:37:cc:c0:87:bf:e6:23:1f:c6:88:26:a2:
         fc:ff:01:f0:8b:c6:cc:4b:6f:06:9b:e2:c4:aa:5c:2d:e5:8d:
         e1:af:0f:43:2d:19:2b:fd:6b:bd:47:72:4f:94:37:b7:bf:a8:
         c9:00:3a:a3:c6:79:1b:ed:f9:61:5c:46:9c:cb:a2:b8:43:b1:
         65:65:8f:7f:7d:80:ff:f2:cf:e1:9d:e0:87:8d:48:0f:e2:20:
         5a:b5:63:b4:02:c3:df:a9:ab:77:51:3b:44:2a:ac:fb:f9:8c:
         e9:da:be:9f:00:16:29:10:5c:5d:3f:da:ed:83:9f:89:58:b4:
         e2:c8:89:af:aa:72:ba:07:bd:f5:29:c6:08:83:99:21:ab:2f:
         74:cf:a5:d2:ae:ae:c1:33:be:58:cc:8d:f1:60:18:2b:ca:d4:
         8d:1f:37:d0:43:5a:d8:14:da:a6:96:ca:7d:13:b6:34:69:f0:
         ad:50:7d:24:52:3b:9b:a1:84:4a:2e:e5:cd:73:36:3b:cf:f5:
         5f:44:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:38 2026 by rpki-client