Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File:                     6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier:          RvaN/qGp3MQlTHCEiODgu5Bm4hDbNOFZ+HmzN/Hh1lU=
Subject key identifier:   BC:1D:06:46:20:F2:55:72:F0:68:90:17:2A:10:31:B3:C7:4A:7C:BF
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer:       /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial:       4FA7619CBD1FA8D4DB182C51744E43BE62A3E4CC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number:          0109
Signing time:             Sun 11 Oct 2026 16:45:45 +0000
Manifest this update:     Sun 11 Oct 2026 16:40:45 +0000
Manifest next update:     Thu 15 Oct 2026 00:18:45 +0000
Files and hashes:         1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: 5lVEzzCW68B6RXI6ezUpLbDBcCWQC3EZlFtxo47hcF8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 00:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a7:61:9c:bd:1f:a8:d4:db:18:2c:51:74:4e:43:be:62:a3:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
        Validity
            Not Before: Oct 11 16:40:45 2026 GMT
            Not After : Oct 15 00:18:45 2026 GMT
        Subject: CN=BC1D064620F25572F06890172A1031B3C74A7CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:25:be:ff:cc:0e:7d:23:bd:1e:13:51:b1:
                    f3:1b:18:a3:ba:e2:fb:35:a8:22:20:7d:3a:88:44:
                    53:53:ec:7b:3c:52:e9:2c:3e:56:ec:1c:9b:d5:8c:
                    e5:24:79:4b:bd:6f:e2:07:de:3a:d3:81:3e:96:d2:
                    b4:a6:83:17:20:d2:b9:cd:70:38:d7:e0:37:56:7f:
                    5c:05:34:b7:13:af:2d:b3:fc:6a:e3:6a:44:6f:3a:
                    c8:26:a0:78:64:c9:84:6e:de:2f:fe:c8:86:b5:75:
                    aa:d7:92:f7:ff:a3:a7:7e:67:b8:08:ff:8c:89:d4:
                    4d:bf:66:48:f2:36:78:10:a8:5d:72:8a:bb:b4:5d:
                    14:93:8e:6f:2e:dd:39:ab:34:3b:04:cf:ab:8d:6c:
                    83:a5:35:b6:3a:97:9c:c1:7f:87:0e:ab:66:87:9b:
                    4d:50:0b:80:d2:48:64:30:f8:56:7b:28:12:66:58:
                    dc:72:b6:eb:1e:ba:c2:97:44:b6:4f:32:29:6a:0a:
                    9f:76:f4:e9:e0:9c:29:04:35:1c:30:3a:63:6e:c6:
                    2e:05:4e:8b:26:10:fa:cc:90:3b:87:8e:2e:a3:24:
                    db:6d:92:92:43:ca:bd:13:9d:11:64:a8:93:d6:3a:
                    53:a4:c2:d7:08:fb:f8:de:0a:31:3a:b1:de:05:15:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:06:46:20:F2:55:72:F0:68:90:17:2A:10:31:B3:C7:4A:7C:BF
            X509v3 Authority Key Identifier:
                keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:d0:d1:c8:5a:65:c7:a6:f6:e5:89:5e:45:38:00:b3:d8:
         25:98:2b:98:f4:57:6a:cc:c8:d7:ed:f2:89:db:95:e9:dc:f7:
         e1:e9:2a:a3:0d:87:44:a0:fa:ff:43:e1:49:1a:e1:0e:fb:6b:
         fa:fd:16:e3:9e:b6:e5:b8:c8:71:49:8a:bb:9c:6a:a3:e8:e0:
         7f:e0:be:7c:70:7a:81:6a:d4:34:fa:c6:75:3c:42:7d:c4:1d:
         e3:87:75:c4:8f:eb:3e:41:f7:db:df:ba:8e:f4:e4:c3:60:eb:
         45:1b:9d:26:ed:5d:e0:29:4b:82:8f:9a:ad:5a:65:32:db:b4:
         d5:7b:07:56:97:9a:ab:a1:76:23:0e:41:02:5f:ac:27:ac:d4:
         b4:64:b6:cc:46:19:7b:88:35:77:8b:33:b3:4b:93:69:45:0b:
         e6:e9:35:c8:12:2f:a2:89:46:46:d8:a5:e2:f0:7e:ff:31:27:
         79:df:29:2c:d0:5d:0f:47:64:03:28:48:c2:d0:e8:59:ce:3b:
         81:14:5f:8b:42:03:c3:b3:ab:1c:1a:ce:6a:5a:ac:8b:e1:34:
         1c:4e:c8:05:75:4e:72:7e:3d:30:26:cf:46:6d:45:0d:2f:b1:
         31:44:48:30:a2:90:03:ae:8e:3f:cf:66:d5:9c:af:d5:15:8e:
         87:2e:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:09:05 2026 by rpki-client