Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
File:                     951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json)
Hash identifier:          uM2Lze11WTKVb6148Gjw4Jd1wnrSkm53b/XyQDwoRuA=
Subject key identifier:   60:5F:E2:00:DB:2B:1D:0E:18:18:57:36:36:B0:9D:E4:69:E9:DE:DF
Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
Certificate issuer:       /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Certificate serial:       3A59A4B5FC30BDA35190D354FD2D4D8DE461BE76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
Manifest number:          C6
Signing time:             Sat 10 Oct 2026 14:19:46 +0000
Manifest this update:     Sat 10 Oct 2026 14:14:46 +0000
Manifest next update:     Tue 13 Oct 2026 22:29:46 +0000
Files and hashes:         1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: XEccJqGaiOB9Xzm5e6zMx7nX3rIHBjs0NwZiWsSOjrA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:59:a4:b5:fc:30:bd:a3:51:90:d3:54:fd:2d:4d:8d:e4:61:be:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
        Validity
            Not Before: Oct 10 14:14:46 2026 GMT
            Not After : Oct 13 22:29:46 2026 GMT
        Subject: CN=605FE200DB2B1D0E1818573636B09DE469E9DEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:4a:83:df:a7:6b:97:83:74:5e:e1:13:b4:
                    34:fa:e0:4a:da:e1:ed:02:41:0a:b8:c5:c2:87:29:
                    97:dc:65:37:48:0b:9e:7f:6c:d6:d1:f8:76:c1:32:
                    dd:b0:dc:aa:44:52:19:0c:e5:6a:c2:f5:3e:93:10:
                    2c:11:fa:68:01:b8:2e:ae:83:b4:fb:1a:26:e4:7c:
                    7e:a3:4a:ad:e8:b3:22:3c:dc:df:a9:59:bd:70:84:
                    a4:05:b8:12:2a:b9:04:8c:bf:5d:95:e7:ec:b5:4c:
                    de:ac:1d:2a:d9:46:07:e9:ed:e1:7a:f1:34:a5:2b:
                    7e:6c:bd:c7:b9:75:17:68:fa:6e:b1:91:15:81:3c:
                    f6:d6:c2:26:c4:9c:3b:40:bb:83:6c:57:93:da:22:
                    c4:85:55:ec:d8:dd:8d:15:5a:85:b9:17:8b:d5:c8:
                    cf:78:b6:00:f0:6e:62:ba:fb:25:5c:70:eb:a0:0b:
                    f1:29:6d:ab:b7:17:04:c2:3c:24:a6:26:56:4c:4d:
                    40:fe:e7:f9:fc:85:b5:23:92:69:fd:db:8b:83:a1:
                    50:e1:a1:07:ee:fd:8c:d4:ca:ed:9c:ac:74:6e:94:
                    04:52:ac:2e:9c:9b:8e:f5:ba:f5:8e:87:f3:31:97:
                    59:60:ec:d5:8f:23:11:02:cc:20:a6:dd:c8:cc:b6:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:E2:00:DB:2B:1D:0E:18:18:57:36:36:B0:9D:E4:69:E9:DE:DF
            X509v3 Authority Key Identifier:
                keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:24:9e:f8:79:f2:01:2d:bd:09:37:38:ee:75:fc:e1:a4:
         bd:77:f9:40:49:4f:a1:b0:87:5a:62:11:bb:a9:b8:c5:93:bb:
         26:c4:81:fc:53:af:b6:d1:75:9c:4c:80:1c:bd:7c:95:2a:6c:
         ef:1e:cc:e0:6e:fe:8c:19:c9:d0:4e:56:17:78:1f:e4:4f:bc:
         8e:ba:28:f8:b7:1d:b3:2c:e6:80:a4:8e:f4:a1:b1:ec:8f:02:
         ac:37:de:6e:f7:0f:95:9c:a0:4e:62:01:7e:93:e4:cb:be:19:
         7f:1d:97:01:04:48:02:37:d2:cc:23:53:bb:b3:35:c3:c9:c8:
         46:bc:c4:10:b0:b1:c3:a4:d8:8a:6a:81:56:2f:62:66:d5:df:
         9e:2b:9e:d9:13:03:d1:da:47:0d:13:0b:59:1c:52:7d:e2:91:
         d7:10:39:34:30:62:a7:4c:37:3e:96:9c:5d:61:14:6e:80:06:
         74:50:1b:68:c9:e5:e0:0f:a9:4b:e7:0c:33:2e:aa:67:e9:a7:
         6a:62:11:7a:3a:e4:5a:98:31:b5:c4:c2:dc:3e:29:c7:b2:a7:
         b1:ae:7f:2f:21:6c:21:25:51:63:34:fc:9f:9a:f0:58:d5:22:
         01:0b:5d:44:0c:5f:f4:05:52:f1:9f:d4:b2:ee:57:97:a2:f0:
         31:ce:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:12:20 2026 by rpki-client