Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
File:                     8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json)
Hash identifier:          WCmpp8KZ1j7PjgIiWuZgT1eoJsoj4N2B1Tr2ei31Hdc=
Subject key identifier:   89:7B:66:FD:83:88:55:DB:60:D6:86:F0:54:40:EA:0E:B5:1E:BC:7B
Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
Certificate issuer:       /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Certificate serial:       585ADD3737C9CB79F11D23FA413EC340F7E0CA94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
Manifest number:          8C
Signing time:             Tue 14 Jul 2026 03:05:17 +0000
Manifest this update:     Tue 14 Jul 2026 03:00:17 +0000
Manifest next update:     Wed 15 Jul 2026 04:03:17 +0000
Files and hashes:         1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: v3x8ZVxTYmV8lUOonLG70pQ7cvINNRb5PLstfmJ53Es=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5a:dd:37:37:c9:cb:79:f1:1d:23:fa:41:3e:c3:40:f7:e0:ca:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
        Validity
            Not Before: Jul 14 03:00:17 2026 GMT
            Not After : Jul 15 04:03:17 2026 GMT
        Subject: CN=897B66FD838855DB60D686F05440EA0EB51EBC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:0b:2c:c9:bb:d1:4d:39:90:ab:01:66:a3:
                    d5:bf:43:e6:3a:3e:e7:2c:90:8b:c6:73:79:71:77:
                    ca:27:a5:0f:ac:3d:95:58:b3:e5:e0:b2:5d:1e:c6:
                    d0:65:da:f9:5b:09:66:5a:10:25:33:c7:a0:80:a9:
                    f6:b9:7d:1d:fc:1b:79:96:c6:18:20:e2:1c:03:d4:
                    be:b6:ac:30:02:ff:90:9a:66:7e:dc:3d:d0:09:76:
                    97:3e:d2:db:35:66:5b:a4:d7:3d:61:ab:4b:ca:5e:
                    34:91:24:96:1e:12:7e:bf:2f:f9:b4:5c:48:69:94:
                    49:53:e6:01:08:7f:ab:91:69:4e:1c:18:21:60:0e:
                    be:81:2e:32:7b:32:8c:98:8b:5a:fc:f2:f3:53:a1:
                    5c:f5:ea:a4:4b:e0:10:79:ae:99:cd:ee:f0:3b:c9:
                    b5:b2:d0:ac:f6:44:eb:42:c9:a0:95:ab:17:bb:f4:
                    b0:7d:dd:00:cc:9c:db:8e:73:64:74:60:21:20:67:
                    f4:74:74:a7:ba:86:1b:19:a3:b0:8f:a9:66:ef:e8:
                    8c:44:ae:73:ca:ce:ff:4c:c3:17:f4:99:af:1e:9d:
                    ed:ed:93:5b:da:8e:e4:0b:f4:be:6f:0a:da:1b:34:
                    4a:ce:db:ca:f6:3d:42:d3:bb:f3:3a:4a:3e:b4:13:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:66:FD:83:88:55:DB:60:D6:86:F0:54:40:EA:0E:B5:1E:BC:7B
            X509v3 Authority Key Identifier:
                keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:f5:45:0f:c4:85:0c:0e:9e:3d:3c:c9:85:b9:85:2b:ca:
         c7:8a:ee:5c:66:2c:02:9c:e3:ae:bd:8d:40:f8:9f:ac:e8:d9:
         db:43:3e:90:61:55:66:27:fa:f6:48:86:41:cc:38:52:cc:ed:
         ce:4d:ab:5d:1d:c8:3d:62:78:b3:1f:b4:bb:23:3c:61:f4:60:
         14:1e:ce:ee:60:83:ab:b0:ca:34:ff:4b:c8:74:5e:03:0b:bd:
         5a:bc:cf:a5:d1:33:68:18:ad:43:40:f2:a1:61:e5:be:8d:1e:
         5a:69:73:68:cf:53:58:a0:61:15:93:f8:b8:f1:e0:eb:3e:a0:
         be:6e:50:65:a9:0a:c6:43:c2:95:e3:44:20:33:bf:69:16:12:
         b8:c2:9c:ea:dd:74:5f:e4:ad:63:c1:6e:36:89:46:1d:06:fe:
         1c:c3:5c:f4:9a:2e:ce:26:9f:4b:55:83:ab:fa:c1:54:bb:87:
         4a:b7:6c:43:37:e1:ce:8e:c0:c0:96:b9:a1:54:fb:c4:23:0b:
         71:a5:d6:a9:e6:8e:30:d9:e0:dc:87:bc:e1:5b:6b:2c:13:bf:
         7f:9c:21:45:b3:2b:fe:34:fa:2e:ac:a0:f0:19:3b:06:2d:61:
         2b:f3:eb:8b:73:4f:be:88:76:43:8e:85:ce:a5:01:b5:1c:96:
         1c:4d:1c:c3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWFrdNzfJy3nxHSP6QT7DQPfgypQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2
QzM4QzE0RTAeFw0yNjA3MTQwMzAwMTdaFw0yNjA3MTUwNDAzMTdaMDMxMTAvBgNV
BAMTKDg5N0I2NkZEODM4ODU1REI2MEQ2ODZGMDU0NDBFQTBFQjUxRUJDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvQssybvRTTmQqwFmo9W/Q+Y6
PucskIvGc3lxd8onpQ+sPZVYs+Xgsl0extBl2vlbCWZaECUzx6CAqfa5fR38G3mW
xhgg4hwD1L62rDAC/5CaZn7cPdAJdpc+0ts1Zluk1z1hq0vKXjSRJJYeEn6/L/m0
XEhplElT5gEIf6uRaU4cGCFgDr6BLjJ7MoyYi1r88vNToVz16qRL4BB5rpnN7vA7
ybWy0Kz2ROtCyaCVqxe79LB93QDMnNuOc2R0YCEgZ/R0dKe6hhsZo7CPqWbv6IxE
rnPKzv9Mwxf0ma8ene3tk1vajuQL9L5vCtobNErO28r2PULTu/M6Sj60EzbZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUiXtm/YOIVdtg1obwVEDqDrUevHswHwYDVR0j
BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF
NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC
ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcD1RQ/EhQwO
nj08yYW5hSvKx4ruXGYsApzjrr2NQPifrOjZ20M+kGFVZif69kiGQcw4Usztzk2r
XR3IPWJ4sx+0uyM8YfRgFB7O7mCDq7DKNP9LyHReAwu9WrzPpdEzaBitQ0DyoWHl
vo0eWmlzaM9TWKBhFZP4uPHg6z6gvm5QZakKxkPCleNEIDO/aRYSuMKc6t10X+St
Y8FuNolGHQb+HMNc9JouziafS1WDq/rBVLuHSrdsQzfhzo7AwJa5oVT7xCMLcaXW
qeaOMNng3Ie84VtrLBO/f5whRbMr/jT6Lqyg8Bk7Bi1hK/Pri3NPvoh2Q46FzqUB
tRyWHE0cww==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:14:50 2026 by rpki-client