Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
File:                     EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json)
Hash identifier:          lMGTymOjvSCw5z5VCHOS3/NGgCuygdIeIU69C6Pj71w=
Subject key identifier:   C2:0B:97:41:42:F2:AF:4C:BC:5F:E5:F9:AC:2A:B5:74:BA:7E:75:78
Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
Certificate issuer:       /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
Certificate serial:       400783427FC32B85F809AA4F1B2FC9896F416677
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
Manifest number:          F3
Signing time:             Thu 23 Jul 2026 17:44:14 +0000
Manifest this update:     Thu 23 Jul 2026 17:39:14 +0000
Manifest next update:     Fri 24 Jul 2026 21:12:14 +0000
Files and hashes:         1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: b8S+6yOuoACkF1I4Yzb0xxzleUs60jqPuOn+xw7/4hA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:07:83:42:7f:c3:2b:85:f8:09:aa:4f:1b:2f:c9:89:6f:41:66:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
        Validity
            Not Before: Jul 23 17:39:14 2026 GMT
            Not After : Jul 24 21:12:14 2026 GMT
        Subject: CN=C20B974142F2AF4CBC5FE5F9AC2AB574BA7E7578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:a5:2b:da:3b:8a:54:63:1d:c6:61:70:cd:
                    c9:77:c8:26:92:0e:cf:6b:cf:1c:b2:cd:bc:ca:79:
                    bd:e2:82:79:af:00:63:4d:fa:3a:01:7e:67:e7:81:
                    5b:08:0b:d1:dc:2d:00:40:5b:fb:a8:78:35:ca:0f:
                    92:4a:f0:33:ac:39:d2:77:c0:25:55:24:11:31:36:
                    34:2d:b5:9f:cf:8d:0a:9b:cd:22:f1:61:53:97:90:
                    72:42:7c:0e:9c:b2:3b:7f:65:56:3a:c6:3c:76:37:
                    86:13:36:5c:7b:db:02:b4:02:da:f4:cb:2d:fc:76:
                    30:1e:c6:50:5f:12:c6:e6:93:42:4d:d3:89:b1:15:
                    4c:f8:b5:48:c1:78:b7:98:50:76:7a:5a:e5:1f:a1:
                    6f:b9:64:47:c2:6f:3a:50:2e:92:fb:ee:cc:91:cb:
                    75:40:c4:e6:88:7d:dd:7f:83:df:b7:dc:77:c0:37:
                    76:bc:65:05:6f:a0:d8:3d:34:04:9a:f9:c7:37:72:
                    35:05:ab:03:02:22:f8:f7:83:fb:67:b2:94:8e:20:
                    92:23:a2:7f:5a:0d:91:3f:ae:bf:d6:dd:f3:65:ce:
                    9c:95:ba:5b:c1:53:70:6d:4a:4c:7d:28:a5:d5:df:
                    cd:ca:0b:49:59:67:76:f9:ce:20:ce:82:d7:ad:94:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:97:41:42:F2:AF:4C:BC:5F:E5:F9:AC:2A:B5:74:BA:7E:75:78
            X509v3 Authority Key Identifier:
                keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:6d:bc:3f:c6:9b:e7:d0:5d:58:51:f4:fd:e6:18:f1:03:
         67:a0:4d:c4:40:47:f9:1e:ba:d2:44:bb:22:31:37:fa:c5:6a:
         f7:dd:ad:e3:a6:13:c5:6a:06:a8:fb:d4:26:0e:7a:c0:95:93:
         bf:35:c4:c4:6d:02:10:96:ac:19:ad:94:52:bf:70:3a:f4:16:
         65:8b:8f:76:2c:cf:69:c6:83:3e:db:0f:9d:cf:52:ac:4a:7a:
         6b:ec:d0:0f:2d:da:15:4c:3b:75:a6:b4:67:0f:fe:af:10:f8:
         a6:8f:26:a6:97:ff:57:65:ad:5c:d1:82:6b:4b:f6:40:60:5f:
         41:8c:97:3b:25:b8:b2:3b:6a:89:11:8a:e7:17:61:7b:5a:77:
         6c:df:f8:89:10:59:31:ec:ee:75:56:ce:ea:4d:75:5b:16:52:
         20:cb:ae:12:32:88:04:34:62:16:26:0a:58:fa:ae:2c:a7:36:
         73:54:7b:4f:01:4f:a9:48:b6:78:41:56:5f:8b:d2:c1:f3:da:
         fd:49:dd:08:03:df:06:4e:57:ce:45:d5:93:fc:52:7d:b7:ad:
         00:05:90:80:e5:77:1d:7c:99:f5:95:fd:83:90:3a:17:29:61:
         0a:30:f8:93:cb:0a:f8:46:ce:50:d0:fb:1b:d8:12:9e:b8:d3:
         7d:4c:bc:0e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQAeDQn/DK4X4CapPGy/JiW9BZncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5
NjVFNTRBNTAeFw0yNjA3MjMxNzM5MTRaFw0yNjA3MjQyMTEyMTRaMDMxMTAvBgNV
BAMTKEMyMEI5NzQxNDJGMkFGNENCQzVGRTVGOUFDMkFCNTc0QkE3RTc1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsh6Ur2juKVGMdxmFwzcl3yCaS
Ds9rzxyyzbzKeb3ignmvAGNN+joBfmfngVsIC9HcLQBAW/uoeDXKD5JK8DOsOdJ3
wCVVJBExNjQttZ/PjQqbzSLxYVOXkHJCfA6csjt/ZVY6xjx2N4YTNlx72wK0Atr0
yy38djAexlBfEsbmk0JN04mxFUz4tUjBeLeYUHZ6WuUfoW+5ZEfCbzpQLpL77syR
y3VAxOaIfd1/g9+33HfAN3a8ZQVvoNg9NASa+cc3cjUFqwMCIvj3g/tnspSOIJIj
on9aDZE/rr/W3fNlzpyVulvBU3BtSkx9KKXV383KC0lZZ3b5ziDOgtetlD2FAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUwguXQULyr0y8X+X5rCq1dLp+dXgwHwYDVR0j
BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw
NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG
OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd9tvD/Gm+fQ
XVhR9P3mGPEDZ6BNxEBH+R660kS7IjE3+sVq992t46YTxWoGqPvUJg56wJWTvzXE
xG0CEJasGa2UUr9wOvQWZYuPdizPacaDPtsPnc9SrEp6a+zQDy3aFUw7daa0Zw/+
rxD4po8mppf/V2WtXNGCa0v2QGBfQYyXOyW4sjtqiRGK5xdhe1p3bN/4iRBZMezu
dVbO6k11WxZSIMuuEjKIBDRiFiYKWPquLKc2c1R7TwFPqUi2eEFWX4vSwfPa/Und
CAPfBk5XzkXVk/xSfbetAAWQgOV3HXyZ9ZX9g5A6FylhCjD4k8sK+EbOUND7G9gS
nrjTfUy8Dg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:20 2026 by rpki-client