Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File:                     F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier:          X1H5UBeA2YaPJ0NPcWrKQivioscggEyH+snO4XxPMq4=
Subject key identifier:   1D:68:41:1A:DF:B9:C8:7C:5F:32:76:67:4E:EC:13:DC:EB:D3:2A:B0
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer:       /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial:       64B833B72E4F6E2CAC857C022480B2913CDDDF17
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number:          0130
Signing time:             Wed 14 Oct 2026 13:04:09 +0000
Manifest this update:     Wed 14 Oct 2026 12:59:09 +0000
Manifest next update:     Sat 17 Oct 2026 13:20:09 +0000
Files and hashes:         1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: OR+4VOPwnkhjrNL4Nihc4S/uMzDI40yRxK9RB4orW3Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b8:33:b7:2e:4f:6e:2c:ac:85:7c:02:24:80:b2:91:3c:dd:df:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
        Validity
            Not Before: Oct 14 12:59:09 2026 GMT
            Not After : Oct 17 13:20:09 2026 GMT
        Subject: CN=1D68411ADFB9C87C5F3276674EEC13DCEBD32AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:3c:7f:fc:7b:84:0f:b2:1a:17:ea:55:dd:
                    7f:1a:84:a4:da:a9:1b:62:a1:92:05:b2:b5:b6:46:
                    12:8b:0b:2f:8d:43:a9:25:6d:93:ea:a5:88:02:b4:
                    e7:59:17:64:19:e6:88:b2:af:0b:0a:32:12:de:e4:
                    83:3b:60:84:6e:a7:15:6c:95:d2:3c:02:60:5d:7b:
                    25:d4:9b:52:02:b2:b6:15:31:f4:79:25:1c:5d:a0:
                    52:97:24:ab:b5:4e:87:e7:c5:86:d8:b6:03:06:85:
                    94:28:38:cd:c9:14:10:e4:ad:66:86:21:97:14:c5:
                    92:63:42:14:75:99:8f:df:e3:43:a2:57:43:9d:1c:
                    6d:1a:ba:cd:54:a0:2b:f6:4d:66:50:a5:ec:37:59:
                    05:1e:a6:65:0e:ca:2c:5b:c6:0a:0c:54:8a:99:3b:
                    c7:6a:18:d8:70:07:3c:2f:dd:ff:a9:c1:ed:92:b7:
                    7d:8c:0a:f5:44:4a:09:be:ff:c3:9d:8e:8c:db:c5:
                    9e:bc:b8:20:a6:ad:c7:21:20:04:80:f8:d6:57:6e:
                    b6:a1:fd:b3:3b:6d:f0:ba:c3:34:42:12:ac:35:92:
                    79:fe:88:30:92:16:30:d6:bd:10:ba:ed:1e:bc:9d:
                    ff:78:a0:b9:32:00:29:67:f5:4e:47:ea:1a:93:0b:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:41:1A:DF:B9:C8:7C:5F:32:76:67:4E:EC:13:DC:EB:D3:2A:B0
            X509v3 Authority Key Identifier:
                keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:4d:d6:c1:d0:65:ca:a9:38:e1:ca:be:34:53:0e:64:7f:
         a8:5e:95:ad:46:1d:be:1b:5d:65:26:bc:35:e3:18:38:35:95:
         05:72:cf:ce:4f:24:2c:53:8f:bd:a5:da:e9:59:a5:9f:c2:0d:
         38:14:55:c0:fe:a6:5f:d2:c9:b2:f5:71:5d:eb:2f:ba:bd:5f:
         12:de:09:5f:eb:d5:88:1b:62:c2:ee:de:15:59:88:d0:49:84:
         3d:ca:59:0e:31:e9:71:41:77:f0:dc:43:6c:81:7f:17:39:63:
         21:e4:5e:a7:ca:aa:f1:05:26:f9:4a:56:fb:49:fe:36:45:a9:
         59:3f:c3:3b:95:4d:7a:fe:b8:b0:a3:ed:ac:d1:7a:be:59:87:
         dc:be:8d:9f:53:b4:42:f0:6f:c1:53:59:a2:a0:65:e6:08:f3:
         6f:e3:a0:72:45:90:06:14:01:35:6a:fb:7f:1c:c8:95:9f:4a:
         a2:ea:b2:18:eb:91:b5:89:7a:b0:fb:7d:78:b7:da:40:5c:d4:
         7d:31:ee:19:03:2d:3d:52:92:23:e2:65:8b:b1:d7:3a:3a:b4:
         2b:b3:b6:b7:fe:66:4d:77:eb:7c:e3:75:82:0a:a8:6b:95:ac:
         1b:6d:a3:09:bf:4e:5a:a5:a4:34:4c:97:f6:ed:5f:4d:34:ea:
         b1:1a:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:30:34 2026 by rpki-client