Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
File:                     7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft (raw, json)
Hash identifier:          gVZXVZ5SVB59e3f+feTT+lV3B2BJDCFA9uzBZF6d7JU=
Subject key identifier:   25:95:BA:BE:11:5C:F6:90:63:8E:69:9A:E4:D3:90:0A:98:E2:D2:EB
Authority key identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA
Certificate issuer:       /CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
Certificate serial:       0BAB09D2CA9445262F2F609D32BE89A80848971C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
Manifest number:          66
Signing time:             Wed 13 May 2026 02:35:53 +0000
Manifest this update:     Wed 13 May 2026 02:30:53 +0000
Manifest next update:     Thu 14 May 2026 02:57:53 +0000
Files and hashes:         1: 7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl (hash: N2ITeVjwpMOzX34N7nwVrCm/q0LzZrb4SfaBj/Djch4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ab:09:d2:ca:94:45:26:2f:2f:60:9d:32:be:89:a8:08:48:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
        Validity
            Not Before: May 13 02:30:53 2026 GMT
            Not After : May 14 02:57:53 2026 GMT
        Subject: CN=2595BABE115CF690638E699AE4D3900A98E2D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:b0:89:0c:57:54:37:a1:1d:2a:09:17:02:
                    0f:b0:0a:f9:90:d0:c1:3d:d1:b9:00:49:ca:b7:8d:
                    37:dc:b7:33:a3:57:db:78:c0:8a:3e:28:0b:d4:58:
                    c7:5b:4c:f4:bf:36:55:3d:6f:32:81:16:ff:49:26:
                    ad:c9:0e:bd:f2:12:4a:12:6c:da:33:a0:13:f0:61:
                    fa:d0:a7:f4:da:27:e5:46:be:e7:1c:b2:2f:21:fa:
                    f4:ba:f9:4b:6d:2e:9a:a9:5f:79:cf:90:02:1a:ba:
                    77:c8:3e:cc:31:cc:63:87:14:2a:d4:27:4b:3e:74:
                    cf:fc:43:99:70:81:84:bc:f7:94:7f:49:fa:9a:f2:
                    14:b6:01:06:39:88:33:8f:4e:e0:6e:81:72:6c:4d:
                    ec:b3:59:70:01:c6:d9:6b:6e:91:f3:db:b1:2b:89:
                    37:f4:d1:3b:61:32:f8:af:1a:c9:bd:47:b3:4d:27:
                    c2:5a:c0:87:d9:9e:ab:88:bc:a6:a2:83:b7:f5:4c:
                    16:22:0c:9d:d1:90:24:ee:c1:4c:04:d4:49:32:27:
                    b1:4b:26:17:92:f2:c1:ec:3d:79:7a:03:30:cb:fe:
                    d0:8b:6d:3f:f3:6e:cf:25:14:1e:f8:16:1d:db:19:
                    d3:25:8a:d3:cb:a6:15:22:e9:1b:6e:4c:c7:5c:61:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:95:BA:BE:11:5C:F6:90:63:8E:69:9A:E4:D3:90:0A:98:E2:D2:EB
            X509v3 Authority Key Identifier:
                keyid:77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:5e:82:c0:5a:ab:ee:2d:30:32:1f:8c:df:ef:9a:3a:85:
         0e:b1:9b:22:9f:a0:45:69:81:7c:70:7e:45:95:b4:ef:26:8e:
         78:b6:0d:08:51:69:8a:7a:a7:a7:f7:4e:d3:ab:9b:4a:c5:5f:
         70:3f:43:11:63:0b:76:ea:14:89:e8:33:33:bd:c8:9f:51:68:
         5c:65:f7:8e:e1:2a:b3:39:bb:54:5a:16:90:e8:8b:9e:c4:a5:
         7a:4d:0a:bd:40:f3:f9:93:7f:32:d2:04:2a:c5:9e:67:fc:fd:
         98:60:d9:a1:7f:f5:6e:47:85:94:15:92:12:76:30:13:94:36:
         38:78:99:0d:fc:7f:07:9b:d4:de:2d:0a:50:a3:e5:72:a7:3e:
         43:f7:30:1f:27:63:19:dc:ea:4f:dd:f1:13:4e:b2:1a:06:c4:
         0a:9d:e7:78:57:0d:7e:9f:5c:64:8e:aa:1e:1d:fe:c5:cf:c1:
         3c:bb:15:73:06:4a:1d:cf:22:5f:4d:cf:de:16:1f:20:08:de:
         92:2f:9b:5c:e2:60:21:07:1f:2b:a4:ef:28:8b:d3:b5:37:ce:
         39:14:9f:12:42:cd:82:78:7d:6c:41:ce:73:88:3a:cb:c7:db:
         f1:54:a4:14:8d:35:ae:2b:8b:6d:64:f1:a4:09:73:c7:95:80:
         4e:25:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:52 2026 by rpki-client