Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
File:                     8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json)
Hash identifier:          8j3L088hpWt7QNKhx5KK+1l27uTdXYl8kXw5NMdn4Nc=
Subject key identifier:   EF:A4:7E:3E:7D:0B:5A:66:D2:C6:82:14:99:1E:A5:75:C3:D9:E8:03
Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
Certificate issuer:       /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Certificate serial:       1ECB511D8A9EC34B3B793DB5ECB54752AEA41A35
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
Manifest number:          DC
Signing time:             Mon 12 Oct 2026 13:42:01 +0000
Manifest this update:     Mon 12 Oct 2026 13:37:01 +0000
Manifest next update:     Thu 15 Oct 2026 16:40:01 +0000
Files and hashes:         1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: 5d2EqnHEYPwjol5hp0KuhoAVLTgh5jYYWObmQJMa+/I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cb:51:1d:8a:9e:c3:4b:3b:79:3d:b5:ec:b5:47:52:ae:a4:1a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
        Validity
            Not Before: Oct 12 13:37:01 2026 GMT
            Not After : Oct 15 16:40:01 2026 GMT
        Subject: CN=EFA47E3E7D0B5A66D2C68214991EA575C3D9E803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:f0:f5:75:4d:e6:d8:93:97:73:63:94:b9:
                    eb:a2:c4:0f:b0:4b:e9:48:bd:3e:3e:37:44:78:4f:
                    7c:27:1b:54:57:e8:94:f9:f9:37:f9:2e:21:e9:df:
                    14:ac:02:d5:3b:a9:87:14:9e:0a:4e:a5:0e:95:2e:
                    8b:21:23:10:43:3b:7d:e0:e1:8d:58:fa:73:4a:42:
                    87:c7:89:c7:52:c0:b2:60:c4:9e:d6:21:11:c3:51:
                    36:6e:74:0b:38:a6:c5:7f:1f:d6:f6:eb:21:2e:ba:
                    5f:8a:da:ec:ea:cf:33:d5:76:c5:5d:1f:5c:04:54:
                    71:94:72:89:56:87:e6:45:6a:92:6e:9c:7d:31:66:
                    cd:ff:df:07:5b:a6:08:30:5e:ce:1a:a8:d1:90:77:
                    3c:ff:3b:ef:37:fb:ef:a8:91:68:69:5f:91:e4:92:
                    c8:66:40:ce:d6:5d:9c:73:5e:13:06:d5:8a:22:f8:
                    58:04:b3:f9:a7:b5:d2:9f:3c:40:f2:4a:5d:cf:71:
                    1e:55:e7:66:55:ad:e3:e9:c1:8b:8b:dc:42:71:d6:
                    0b:0a:3c:98:90:55:de:b6:db:44:b5:18:dc:f8:9f:
                    30:c9:90:ab:41:c1:66:f5:52:71:82:f6:79:d7:c1:
                    1c:2d:22:b2:59:2f:3c:4d:ab:7d:d3:e2:f8:a3:7f:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A4:7E:3E:7D:0B:5A:66:D2:C6:82:14:99:1E:A5:75:C3:D9:E8:03
            X509v3 Authority Key Identifier:
                keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:ce:f3:1f:f4:16:60:5a:c5:59:99:cc:24:0c:71:63:ca:
         ed:38:d2:b9:d3:db:77:45:b1:5b:ca:86:f3:aa:6d:11:f7:26:
         dd:f4:a9:51:6b:02:02:41:46:17:ad:12:db:63:d7:50:46:4d:
         4c:ff:c2:b6:78:0e:23:4e:e4:2e:1f:c4:5f:2e:8a:18:b6:7e:
         a4:0b:51:e1:3a:f6:f2:a1:79:cd:b7:fb:ab:07:7c:c9:ec:9e:
         00:c7:b0:03:31:9c:ae:d4:20:c0:12:db:b2:76:91:e2:33:d4:
         e0:08:9b:4b:ae:8c:90:ed:ce:84:35:d9:dd:88:44:af:de:11:
         1c:96:17:cf:c4:89:4b:5f:84:c1:5b:43:b6:07:d2:45:25:65:
         3e:59:42:cd:98:31:ed:da:a4:e3:29:fe:d6:ac:48:d9:77:43:
         25:64:cb:47:44:a6:b0:57:de:e0:c0:86:30:ce:2f:ed:e5:d0:
         0f:ae:d5:12:04:50:84:72:66:09:7c:4a:d8:3f:34:d2:cf:50:
         5a:16:2b:9d:ae:97:da:14:0d:0b:c6:06:54:b6:f0:26:0e:29:
         75:3f:35:38:47:79:11:3a:65:38:77:a0:66:4b:c3:b8:f1:1e:
         93:12:1d:1c:9b:fa:2a:67:2d:0f:96:6a:40:32:b5:16:9d:eb:
         ba:40:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:58:49 2026 by rpki-client