Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File:                     8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier:          itQAlmv6qFK1g2nO5OO1CIIkvtHpXmJTs+vAhdg6L8Y=
Subject key identifier:   B5:19:5F:DF:E7:A8:8F:0F:54:1D:23:2B:AA:05:CB:15:70:0F:01:B2
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer:       /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial:       6457608F14A31C3E6F738F3F660D149338A7FD8C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number:          F9
Signing time:             Thu 03 Sep 2026 20:49:06 +0000
Manifest this update:     Thu 03 Sep 2026 20:44:06 +0000
Manifest next update:     Mon 07 Sep 2026 04:01:06 +0000
Files and hashes:         1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: tFgSLexZMLPJU2R3FOcO7N+IwyB+YaArSgBx4vj+ipA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 21:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:60:8f:14:a3:1c:3e:6f:73:8f:3f:66:0d:14:93:38:a7:fd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
        Validity
            Not Before: Sep  3 20:44:06 2026 GMT
            Not After : Sep  7 04:01:06 2026 GMT
        Subject: CN=B5195FDFE7A88F0F541D232BAA05CB15700F01B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:ae:65:a1:ba:fd:c9:c8:4c:69:eb:83:51:
                    0f:c9:44:f1:c0:6e:91:95:9f:f6:94:f8:0d:83:ed:
                    a6:63:b8:95:60:2e:1e:d9:d9:1c:f9:d8:b6:f1:45:
                    fc:74:0a:38:d5:5c:85:8b:72:c0:da:93:f4:6f:53:
                    34:a2:14:4d:e1:82:e3:24:7f:5c:c6:5d:c8:a7:ce:
                    ae:06:15:69:08:db:14:5b:c0:67:31:73:72:10:a6:
                    3c:21:b8:86:36:54:40:1d:43:b1:72:ac:38:cc:a5:
                    b2:2f:ce:b1:cb:89:4b:f8:6b:67:0a:a6:ba:ff:c0:
                    12:05:00:17:92:48:ec:4b:fe:8b:a5:e4:0a:5f:2c:
                    91:03:be:51:04:29:bd:ab:34:00:1c:8d:d1:c1:ee:
                    5e:75:7a:69:e1:86:53:53:6e:e6:97:4d:48:a4:a8:
                    fb:5b:aa:7b:41:db:2f:3d:92:27:4f:3f:dc:37:90:
                    e0:3a:ef:89:14:9c:e6:d0:d0:f7:11:92:27:ad:88:
                    ce:4b:e8:bd:05:31:cc:08:15:51:f0:53:61:81:97:
                    37:05:e5:5e:e8:74:c9:b7:42:c1:6b:f6:7d:fe:f3:
                    c1:4a:55:d3:a6:0b:ee:49:5f:3f:4e:cb:dd:5e:5e:
                    00:f4:14:b3:18:3e:fe:91:5a:78:bf:cd:03:30:86:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:5F:DF:E7:A8:8F:0F:54:1D:23:2B:AA:05:CB:15:70:0F:01:B2
            X509v3 Authority Key Identifier:
                keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:80:37:76:26:43:09:7c:22:82:51:49:23:22:ae:4c:5d:68:
         83:d4:36:4b:06:31:b0:05:79:df:1e:1a:d3:3a:f2:62:97:98:
         91:e5:59:3b:d4:2f:0e:0d:6f:4e:5b:1b:77:fd:de:e1:31:86:
         70:af:04:42:f8:d9:47:9d:1a:f8:cc:bc:09:eb:bf:3a:19:13:
         d0:b0:3d:96:a6:92:40:74:36:b4:46:28:e8:91:01:d2:68:a5:
         04:a3:08:6c:11:42:d8:17:10:d0:e7:67:2a:1f:3e:76:8c:ae:
         da:ff:35:5f:3c:d1:31:97:09:0b:5b:3e:64:cd:6f:2c:8c:93:
         22:ff:92:37:ed:0c:51:6c:78:7b:88:e6:45:9e:0a:6e:e2:95:
         74:66:2d:e3:67:72:10:70:4c:85:e1:b3:15:dd:c2:d7:ac:e4:
         ee:93:d7:fd:7f:18:1d:d7:b5:ce:52:c5:be:e9:e7:e1:eb:96:
         a9:08:b6:98:82:c4:fe:db:dd:6d:99:dd:04:7a:1a:6c:fd:e9:
         88:43:2f:c1:34:db:db:11:9e:25:b7:bb:92:28:ed:63:c8:2f:
         b3:c9:cc:2a:a2:31:0f:7a:a9:8c:0e:99:37:85:e9:d7:5b:62:
         f5:dc:26:36:c1:05:eb:b6:84:cb:a4:66:e8:0c:3e:c6:f7:96:
         0a:9d:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----