Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
File:                     C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft (raw, json)
Hash identifier:          MFCJgzX7V/QCTPcSHKr634fWvk3LUW3nxq6SKTRnxv8=
Subject key identifier:   20:12:DD:BB:8B:29:C9:4E:1A:09:3D:88:73:86:81:57:C5:F4:A6:F3
Authority key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF
Certificate issuer:       /CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF
Certificate serial:       7FBA466EDE7F53B65A2E1FA3E76C676EC615312A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
Manifest number:          7F
Signing time:             Tue 13 Oct 2026 21:18:16 +0000
Manifest this update:     Tue 13 Oct 2026 21:13:16 +0000
Manifest next update:     Sat 17 Oct 2026 07:32:16 +0000
Files and hashes:         1: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl (hash: 5l8V04MRHEH3Dkvmkh3i8DYiK5XwPIYmyLLpkgEnjWY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 07:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ba:46:6e:de:7f:53:b6:5a:2e:1f:a3:e7:6c:67:6e:c6:15:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF
        Validity
            Not Before: Oct 13 21:13:16 2026 GMT
            Not After : Oct 17 07:32:16 2026 GMT
        Subject: CN=2012DDBB8B29C94E1A093D8873868157C5F4A6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:f1:30:35:1c:31:a5:83:6c:fe:cb:0c:64:
                    7f:c8:cc:ea:e3:da:97:e1:9e:63:5e:d7:93:8a:aa:
                    68:e0:14:bc:6e:88:70:15:b1:87:cb:a4:27:ed:27:
                    a7:ad:c2:74:fa:ae:62:5a:d7:48:54:b1:b2:8f:8c:
                    03:b2:50:b8:0f:17:eb:d6:9c:5e:d7:2f:07:9d:fd:
                    85:68:a9:2d:e6:d9:4c:b9:ee:8d:20:14:37:fa:35:
                    bb:4d:c2:63:3e:c7:09:ab:73:74:ec:96:b3:4d:c4:
                    9a:24:f2:38:0d:e1:bf:80:2d:27:48:30:de:89:60:
                    0e:6f:ba:62:8a:0f:65:d2:13:5b:a2:3b:bd:56:30:
                    ef:7d:33:78:20:f1:77:40:24:cb:d1:b1:56:f9:7a:
                    1a:fa:b2:cc:db:5f:ba:b3:41:a5:c4:62:c3:95:40:
                    1e:9c:f2:50:d2:74:c5:a7:3e:ba:8d:d1:e1:9c:5d:
                    9b:fa:47:7e:c3:20:f2:64:3b:b3:f6:fd:6c:e6:9f:
                    97:f2:8e:96:1a:77:1f:91:a3:38:cd:e4:87:a0:8e:
                    78:9d:0c:a7:18:7b:f9:a4:88:dd:16:35:d3:96:c6:
                    65:d8:ff:ec:74:cb:01:1a:bf:b5:d6:e4:36:0f:68:
                    7b:28:6b:9d:20:9e:a7:08:55:30:c9:d2:e9:72:6a:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:DD:BB:8B:29:C9:4E:1A:09:3D:88:73:86:81:57:C5:F4:A6:F3
            X509v3 Authority Key Identifier:
                keyid:C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:46:b2:00:ec:8a:bc:45:16:28:55:84:ae:7f:e5:ec:8d:
         42:97:75:bf:56:9f:6d:f1:1d:f9:f3:84:29:3e:2a:20:c1:8e:
         5b:e2:45:35:5a:2f:fe:07:48:54:0f:f8:97:aa:01:3b:87:6f:
         0a:02:4a:a1:58:fd:ed:5a:e8:1c:7b:0d:a2:73:f5:de:43:47:
         94:af:36:46:6f:20:4e:1f:45:0a:bb:28:f6:2b:d5:16:d1:62:
         a7:58:ae:27:2c:41:7b:de:11:1f:ff:38:b0:cd:a7:58:06:48:
         ea:b6:f3:e0:6e:fd:67:58:59:08:c7:90:a0:71:8c:c8:3c:80:
         54:f1:23:b0:9d:b5:81:f2:31:6b:e3:01:3d:0d:3f:6c:18:dd:
         25:ca:f5:5e:76:e3:8b:34:0c:e6:9e:e0:f2:b3:92:c2:1e:26:
         58:ca:06:6c:30:a4:24:4e:92:49:25:76:ea:57:af:2b:4f:77:
         40:d3:3f:17:22:44:48:4a:8a:f7:db:68:61:cc:b9:d6:42:84:
         bb:c7:55:6b:be:00:89:a9:5d:00:6e:bd:ef:35:90:62:03:e1:
         a0:9f:ac:39:15:b8:d1:91:c3:4f:32:3f:17:40:57:0e:27:5d:
         57:c5:27:c0:78:c1:79:fd:bf:90:21:c1:64:f5:31:ea:3d:be:
         a3:58:38:72
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUf7pGbt5/U7ZaLh+j52xnbsYVMSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNF
NDBDMkVBRjAeFw0yNjEwMTMyMTEzMTZaFw0yNjEwMTcwNzMyMTZaMDMxMTAvBgNV
BAMTKDIwMTJEREJCOEIyOUM5NEUxQTA5M0Q4ODczODY4MTU3QzVGNEE2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFvEwNRwxpYNs/ssMZH/IzOrj
2pfhnmNe15OKqmjgFLxuiHAVsYfLpCftJ6etwnT6rmJa10hUsbKPjAOyULgPF+vW
nF7XLwed/YVoqS3m2Uy57o0gFDf6NbtNwmM+xwmrc3TslrNNxJok8jgN4b+ALSdI
MN6JYA5vumKKD2XSE1uiO71WMO99M3gg8XdAJMvRsVb5ehr6sszbX7qzQaXEYsOV
QB6c8lDSdMWnPrqN0eGcXZv6R37DIPJkO7P2/Wzmn5fyjpYadx+RozjN5Iegjnid
DKcYe/mkiN0WNdOWxmXY/+x0ywEav7XW5DYPaHsoa50gnqcIVTDJ0ulyasOpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUIBLdu4spyU4aCT2Ic4aBV8X0pvMwHwYDVR0j
BBgwFoAUxv3vbKK9fIL4lEqI1xOLY+QMLq8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NzI4NzAzMDQ2MDUxNDMzMS8wL0M2RkRFRjZDQTJCRDdDODJGODk0NEE4OEQ3MTM4
QjYzRTQwQzJFQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNFNDBDMkVBRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTcyODcwMzA0NjA1MTQzMzEvMC9DNkZERUY2Q0EyQkQ3
QzgyRjg5NDRBODhENzEzOEI2M0U0MEMyRUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqJGsgDsirxF
FihVhK5/5eyNQpd1v1afbfEd+fOEKT4qIMGOW+JFNVov/gdIVA/4l6oBO4dvCgJK
oVj97VroHHsNonP13kNHlK82Rm8gTh9FCrso9ivVFtFip1iuJyxBe94RH/84sM2n
WAZI6rbz4G79Z1hZCMeQoHGMyDyAVPEjsJ21gfIxa+MBPQ0/bBjdJcr1XnbjizQM
5p7g8rOSwh4mWMoGbDCkJE6SSSV26levK093QNM/FyJESEqK99toYcy51kKEu8dV
a74AialdAG697zWQYgPhoJ+sORW40ZHDTzI/F0BXDiddV8UnwHjBef2/kCHBZPUx
6j2+o1g4cg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:40:20 2026 by rpki-client