Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
File:                     DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json)
Hash identifier:          jpbvwpnLziESyNIbGxJXwHUkuouQ0s6Am+1M+3j1//w=
Subject key identifier:   15:61:C0:0E:6A:84:BA:14:A6:F9:5A:5C:80:24:D5:00:11:8A:E8:82
Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
Certificate issuer:       /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
Certificate serial:       36C308DC7CC48B65A74CB9A2A2544F936D21D2D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
Manifest number:          E5
Signing time:             Fri 24 Jul 2026 13:21:17 +0000
Manifest this update:     Fri 24 Jul 2026 13:16:17 +0000
Manifest next update:     Sat 25 Jul 2026 16:43:17 +0000
Files and hashes:         1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: f7yewThsSIV1gacOc7R/5ORScc6MHdpIlhTlpS9RL5Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c3:08:dc:7c:c4:8b:65:a7:4c:b9:a2:a2:54:4f:93:6d:21:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
        Validity
            Not Before: Jul 24 13:16:17 2026 GMT
            Not After : Jul 25 16:43:17 2026 GMT
        Subject: CN=1561C00E6A84BA14A6F95A5C8024D500118AE882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:44:0b:49:69:7c:99:79:8e:d3:1d:1f:86:
                    8f:7b:cb:d3:5a:0d:3f:39:0d:b2:dd:0f:8b:6a:1b:
                    37:3b:5a:f7:06:f2:3d:f2:c7:3e:90:c2:80:34:ce:
                    9f:97:63:08:37:b3:49:33:d4:be:51:ae:3d:9d:cd:
                    c0:0d:ed:74:f4:94:94:9f:05:be:31:f3:d4:4b:5e:
                    a6:4a:54:ce:6f:5a:d1:4e:eb:27:20:6e:f6:ce:3e:
                    c5:e3:3b:90:38:bc:04:88:4a:c0:49:21:04:44:9c:
                    54:d4:d6:7c:89:f6:4a:15:94:0c:2c:87:58:ce:8b:
                    bf:c7:70:cd:9d:07:ed:f2:53:db:e6:74:29:07:6b:
                    0a:45:c7:ce:ab:f5:50:fa:e8:a3:37:dd:75:be:96:
                    2f:6d:1f:2a:85:ae:b2:ef:67:85:bc:28:4a:22:2b:
                    a4:ce:a2:40:be:42:93:9c:ab:1e:bd:c5:83:8d:d9:
                    3c:20:81:5b:0e:90:d1:7b:00:d0:88:b5:50:64:9d:
                    63:b7:f3:89:e0:05:3a:11:b0:e4:be:9f:43:9c:53:
                    ce:a0:af:d8:fc:fc:0a:dd:31:6f:61:a6:cf:08:7e:
                    36:ce:75:83:27:22:9e:10:ef:b3:03:a7:6a:a0:55:
                    13:cc:47:88:29:c1:be:f5:26:6f:6d:65:4d:ca:dd:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:C0:0E:6A:84:BA:14:A6:F9:5A:5C:80:24:D5:00:11:8A:E8:82
            X509v3 Authority Key Identifier:
                keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:43:f6:99:f6:a5:6d:0b:59:cb:1f:c6:91:ea:25:ec:f0:
         c6:e2:ae:92:a4:d3:96:d8:c4:45:d7:3d:88:87:a6:54:95:53:
         a7:f8:c4:38:b7:d9:a6:84:44:70:15:06:99:2d:4e:8c:53:ec:
         2a:87:e7:31:73:d5:89:f9:ae:5c:b4:5e:ce:54:22:b7:c7:45:
         a3:72:b5:e9:a8:71:21:00:4d:51:18:f1:56:34:56:60:61:38:
         0a:9a:3d:ff:d8:d8:22:05:65:79:b3:b2:2f:c7:fe:3b:77:78:
         94:15:4c:f9:6b:b6:4f:f2:a8:14:f3:7e:35:61:db:0e:06:f0:
         82:13:71:a0:ba:24:14:d9:f2:4c:b2:0e:cd:91:ff:f0:5e:46:
         8b:65:3b:ae:df:cb:61:0d:fd:9c:a9:50:4e:27:7e:54:ea:4e:
         a9:8a:d9:99:7e:ff:9a:69:42:33:61:ae:53:e1:79:4d:b3:53:
         02:dc:c2:8f:4d:84:3f:f7:de:a1:f5:ad:67:e9:94:a7:ba:6b:
         f3:7c:db:c6:67:90:88:28:cb:c6:26:99:b3:8a:29:9d:4a:0f:
         fe:f5:00:ff:50:cb:4f:08:e4:1e:1a:a1:3c:70:8b:e3:ea:49:
         1b:8a:75:83:8a:24:67:fc:41:a6:32:00:c3:fc:00:bf:ae:1e:
         dc:50:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:09 2026 by rpki-client