Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          mP7/xgc5r6/tSPWUFBuLva3tGjyfiPKUk02c0sASqns=
Subject key identifier:   2D:D6:92:C4:FA:65:99:DF:75:2D:67:31:D8:F3:B1:80:56:D3:AD:1F
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       706095186D83ECA15B478A11448DA18851D4020B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          67
Signing time:             Wed 13 May 2026 02:55:54 +0000
Manifest this update:     Wed 13 May 2026 02:50:54 +0000
Manifest next update:     Thu 14 May 2026 06:38:54 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: 4w3qKha/xbCMzHyJ5TaPbiExuf8/EjMJEG1Lzw0ezT8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:60:95:18:6d:83:ec:a1:5b:47:8a:11:44:8d:a1:88:51:d4:02:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: May 13 02:50:54 2026 GMT
            Not After : May 14 06:38:54 2026 GMT
        Subject: CN=2DD692C4FA6599DF752D6731D8F3B18056D3AD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:d5:5c:fc:63:91:0f:e5:cf:18:16:43:3b:
                    60:f1:1b:72:40:19:a7:0a:75:a6:1f:8d:82:d0:79:
                    a2:67:05:f9:0f:e8:2a:a0:d4:03:a5:3d:7f:31:b2:
                    ca:22:fa:1a:5b:46:d1:c7:f1:43:3d:be:ee:8c:b1:
                    cc:ba:1e:d5:8d:b1:b3:12:6f:a3:7a:bb:23:c3:04:
                    e5:75:19:04:17:ae:42:c6:37:d9:fb:51:ec:81:64:
                    b0:a7:b5:c4:f3:bf:da:ca:a9:49:03:e7:e8:89:ef:
                    b8:f4:fe:30:78:52:d6:e8:7b:54:63:c9:f0:d3:02:
                    83:39:ed:87:aa:10:68:1b:cc:a8:5e:78:47:5d:48:
                    d2:0b:63:99:ea:aa:d4:32:e4:75:20:06:23:40:5e:
                    34:a6:e8:a8:31:dd:e9:13:a6:65:80:94:89:46:68:
                    12:d8:ab:0c:3e:26:31:95:d6:81:d2:b5:35:bc:32:
                    b6:f6:00:42:6a:42:9c:9f:77:42:7a:4f:a6:a2:00:
                    d8:4a:4b:3b:26:3c:f6:4d:fd:f5:ff:26:a0:f8:7d:
                    8a:88:be:b6:f3:64:48:53:bd:4e:5f:81:b0:23:13:
                    2e:06:06:a2:90:34:cb:e1:a7:ae:e1:c5:c8:92:fe:
                    40:26:aa:a2:ee:a7:59:c5:0e:07:6d:fe:63:bf:a6:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D6:92:C4:FA:65:99:DF:75:2D:67:31:D8:F3:B1:80:56:D3:AD:1F
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:d6:98:20:13:0f:ee:cd:a6:9c:90:a5:39:35:e2:ef:eb:
         81:b5:36:66:69:c6:42:0c:1f:6a:7d:e4:8b:d7:74:4e:bd:31:
         51:38:ae:9c:37:46:e7:63:29:97:50:4c:9f:5d:a4:ed:7a:f0:
         25:0b:0e:18:1b:fd:62:5a:2a:06:1e:97:63:0b:13:2d:b9:8a:
         51:fb:0b:39:04:ab:a2:69:16:05:64:1c:36:5c:48:55:02:44:
         27:9b:4c:84:05:aa:09:fd:b8:91:ab:5f:8d:72:8a:33:d2:ca:
         36:67:ee:29:2f:2e:b3:00:d0:de:c0:ea:09:b5:06:65:a5:8e:
         b5:48:b4:34:c2:4f:8c:cf:16:4a:ab:ab:bc:6d:04:ab:a9:8d:
         2d:6e:0b:7d:24:15:60:56:b0:ed:f9:3f:19:e9:14:4e:cf:00:
         5d:82:0d:fb:51:1a:7d:03:5c:bc:a9:03:3b:74:a2:45:48:5e:
         32:dd:5a:44:fb:00:19:9d:a9:fb:6c:c7:7f:27:ec:ef:b0:10:
         fc:59:2e:b5:d8:53:3d:24:77:3a:5b:bb:64:63:bb:c5:40:99:
         10:70:d5:7c:77:a9:74:0c:fe:e4:08:99:d3:a4:05:a6:ef:25:
         5b:73:c0:49:b4:b7:2a:26:8d:cb:f6:38:14:b7:2c:51:a9:ad:
         df:22:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:59 2026 by rpki-client