Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
File:                     567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft (raw, json)
Hash identifier:          kY/yGWZaQUolBkOsofMB6tyQ0jJe/oT199qCegIy+90=
Subject key identifier:   4F:9E:FF:3B:D2:BB:2B:39:0A:02:53:E9:6C:7C:3B:C9:36:B0:5F:E3
Authority key identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C
Certificate issuer:       /CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
Certificate serial:       568494A4717B49CFDD9F5AD1237A54D0537F367F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
Manifest number:          4D
Signing time:             Thu 23 Jul 2026 20:24:27 +0000
Manifest this update:     Thu 23 Jul 2026 20:19:27 +0000
Manifest next update:     Fri 24 Jul 2026 21:33:27 +0000
Files and hashes:         1: 567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl (hash: TJjM9UB+9TMsEuZvlKhTtZGiOmrlyJFhfvk4WAGvhQc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:94:a4:71:7b:49:cf:dd:9f:5a:d1:23:7a:54:d0:53:7f:36:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C
        Validity
            Not Before: Jul 23 20:19:27 2026 GMT
            Not After : Jul 24 21:33:27 2026 GMT
        Subject: CN=4F9EFF3BD2BB2B390A0253E96C7C3BC936B05FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d2:5c:70:45:8f:8d:1b:83:6f:d7:f8:d5:58:
                    c6:9b:6d:2e:55:36:02:e7:e1:a8:96:f0:55:93:48:
                    2c:09:db:10:49:3b:3b:13:73:39:ff:af:de:c5:5f:
                    79:01:37:37:a1:38:7d:de:7d:d3:a7:44:ac:67:0f:
                    a7:7a:96:f9:62:46:31:ef:ca:6c:22:43:3a:33:bb:
                    4b:37:5e:9e:54:13:21:d0:e2:8b:d9:8a:ee:65:28:
                    69:99:b2:8f:80:ea:f6:f4:60:74:6e:5c:16:8a:2d:
                    3f:c7:b8:27:0c:63:09:6b:bc:8b:0b:26:7d:0a:c6:
                    06:89:92:88:ac:41:0e:e2:99:77:28:4a:04:58:60:
                    8c:2a:8e:d5:c5:0a:a6:a6:f6:6c:f6:e4:a0:a9:c9:
                    1b:ab:94:dd:b5:82:40:f0:ca:74:e5:8f:50:c9:9d:
                    9c:54:74:94:79:92:3d:4f:eb:47:6f:ee:80:15:26:
                    e2:ca:41:8e:28:77:f8:61:39:2d:3a:57:69:f8:a2:
                    5f:fc:eb:1d:d1:c1:05:25:4d:98:44:95:82:11:95:
                    80:31:c4:69:d5:1e:d9:31:59:63:a5:58:e8:01:ef:
                    6d:6c:bd:26:17:85:cb:23:6a:1b:fd:95:97:cc:38:
                    f1:47:37:e0:cb:32:6e:bc:1d:22:84:91:36:e3:99:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:FF:3B:D2:BB:2B:39:0A:02:53:E9:6C:7C:3B:C9:36:B0:5F:E3
            X509v3 Authority Key Identifier:
                keyid:56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:64:14:88:5c:ad:24:53:ae:aa:06:6b:f1:b1:a9:85:1a:8a:
         d7:1b:76:d5:20:e5:20:86:c8:06:0a:b3:9f:c6:63:45:c0:cf:
         28:ed:38:ef:e0:8d:48:94:98:7d:93:51:40:45:7a:a9:2c:6f:
         af:25:cf:24:bd:a9:55:59:79:bd:af:62:a8:3a:a5:1e:aa:29:
         f3:1f:66:10:b3:fc:97:a9:de:16:d6:6c:34:10:1d:4b:8a:04:
         80:6b:7d:5d:a2:69:14:a5:a8:93:ba:4d:19:57:65:61:17:78:
         d9:45:e9:9d:1e:29:a0:52:db:cd:73:0e:1c:9d:60:84:68:cb:
         cb:f3:d1:eb:22:fe:bb:eb:55:a3:4b:64:11:ae:32:3c:bd:ba:
         97:0b:6f:6f:49:18:79:25:0c:0d:72:34:ff:41:2b:f4:9c:a4:
         5e:f3:4a:d1:d0:d8:69:d7:9f:bf:c3:51:71:6e:74:34:8a:15:
         47:89:78:20:46:32:20:51:b0:fe:08:76:fc:a5:3c:ab:91:ab:
         3e:7e:48:2c:3e:e8:21:5b:49:01:65:35:55:f6:fa:2f:15:08:
         f9:54:86:35:ad:c7:c4:a4:9c:54:b6:01:eb:0a:1a:60:57:d1:
         0c:f5:d8:64:e5:3d:02:24:87:bd:47:bb:f8:c8:0b:0b:60:d3:
         03:da:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:47 2026 by rpki-client