Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
File:                     7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft (raw, json)
Hash identifier:          LfhNnWVXYOrp8ddTlEbXKyRmYRSw0vu45r83hC1Vp/Q=
Subject key identifier:   F3:20:69:26:2E:CD:8F:17:66:0E:7E:63:AD:FE:8C:58:2C:2D:6D:F7
Authority key identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA
Certificate issuer:       /CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
Certificate serial:       53A2FD8C5A2BB964F341F61E70F6ED276DDBDB63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
Manifest number:          28
Signing time:             Fri 27 Mar 2026 01:13:28 +0000
Manifest this update:     Fri 27 Mar 2026 01:08:28 +0000
Manifest next update:     Sat 28 Mar 2026 03:46:28 +0000
Files and hashes:         1: 7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl (hash: I2ULQbcpXfHOsshKrZ/Ja6334CSya7b+qRT/CeOnZ2o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:fd:8c:5a:2b:b9:64:f3:41:f6:1e:70:f6:ed:27:6d:db:db:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA
        Validity
            Not Before: Mar 27 01:08:28 2026 GMT
            Not After : Mar 28 03:46:28 2026 GMT
        Subject: CN=F32069262ECD8F17660E7E63ADFE8C582C2D6DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:9a:e9:2b:1b:85:c1:16:81:36:46:21:86:
                    71:1d:df:34:d2:cf:f9:69:b7:c4:0e:bf:dc:04:37:
                    4e:b0:e6:cd:81:8c:20:39:37:44:17:09:32:bd:21:
                    58:5a:9f:62:39:05:4d:54:da:21:34:cf:2a:13:4a:
                    4f:13:97:75:cd:7a:23:d6:28:ac:2d:f6:88:39:e6:
                    8f:f9:cb:71:e3:9e:5b:8a:e1:9a:2d:16:22:dd:ec:
                    b6:ad:be:fe:48:86:46:17:94:31:d7:c7:a4:b2:dd:
                    40:6c:cb:1c:53:00:74:fc:a6:8d:a6:a9:c7:c2:7b:
                    91:b9:4d:5e:12:db:ea:7d:98:55:96:67:d3:b6:04:
                    8c:fd:ba:b8:80:8f:85:25:89:c7:96:fe:34:5d:3e:
                    66:19:cb:59:3a:dd:47:13:e9:f3:2d:9d:90:07:ca:
                    ad:bd:57:d9:e2:ca:1b:d3:ba:31:42:cd:41:8a:e0:
                    3b:a3:e1:89:69:f0:29:63:64:75:bf:b8:12:b4:dd:
                    2b:2a:e8:98:19:98:ab:42:c4:63:4a:b4:4a:fe:7f:
                    d5:95:39:7e:fd:55:23:33:01:e1:53:8f:23:93:44:
                    14:14:f1:1f:8f:d3:d7:f3:f0:cd:94:56:94:7a:c1:
                    fe:88:79:ed:ee:44:df:a4:03:f4:35:1c:d9:bd:05:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:20:69:26:2E:CD:8F:17:66:0E:7E:63:AD:FE:8C:58:2C:2D:6D:F7
            X509v3 Authority Key Identifier:
                keyid:77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:04:2a:6d:66:c4:5a:6e:ea:88:a7:a3:47:c2:dc:46:ae:09:
         cb:1b:5a:9f:5b:5c:b0:52:21:77:4e:62:a8:d5:fa:8f:b3:45:
         c7:4b:f2:c8:5f:43:90:4b:68:76:cd:75:6d:9a:d1:59:e2:38:
         d9:d0:90:63:76:1c:18:d0:6c:9a:8c:00:33:cb:6a:3b:38:22:
         ba:09:32:5b:c3:02:a0:30:1d:58:03:9a:38:1d:66:69:0e:90:
         de:f1:93:9f:26:a4:df:c5:0a:e3:39:83:03:4d:ae:1f:67:2e:
         22:57:22:27:af:b7:f7:06:94:cc:76:2b:ac:00:54:41:98:38:
         8f:74:5d:42:e3:f9:94:45:9d:43:53:b3:9f:64:27:a5:21:31:
         40:38:c8:bf:46:87:50:ef:26:c3:45:25:3f:7a:7e:fe:b8:ed:
         96:94:51:8e:31:b4:3f:57:33:55:57:ca:48:99:7c:a0:45:56:
         a2:f0:e4:4c:36:2b:04:19:7f:bc:1b:68:d7:fb:77:52:e1:c2:
         9f:77:33:d5:30:8e:c0:8b:4e:05:60:91:39:be:97:82:3c:7e:
         f2:26:cc:13:e9:35:42:eb:6a:d1:1f:50:d5:a7:df:65:c1:81:
         9b:f2:0f:d0:7e:d3:81:8b:d6:10:60:8c:2f:a5:8d:c8:a9:63:
         d3:e9:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:21:44 2026 by rpki-client