Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          EgvfwsYTynCLKtbJo3mwSNm7dspHQzHE73hb323nii8=
Subject key identifier:   EA:56:8B:65:3B:32:FE:CA:6F:17:3B:43:CC:73:A6:3B:F4:E7:78:C1
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       726F94633220264469BF421552111920BA5FC00D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          8A
Signing time:             Tue 14 Jul 2026 03:30:19 +0000
Manifest this update:     Tue 14 Jul 2026 03:25:19 +0000
Manifest next update:     Wed 15 Jul 2026 07:14:19 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: ZeV4bwd8gAHyg2RbB0ihaYKAK8SAJgIob48OgMsZ1Oc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6f:94:63:32:20:26:44:69:bf:42:15:52:11:19:20:ba:5f:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Jul 14 03:25:19 2026 GMT
            Not After : Jul 15 07:14:19 2026 GMT
        Subject: CN=EA568B653B32FECA6F173B43CC73A63BF4E778C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:d9:e6:c1:cc:a7:4b:ea:62:3f:0d:0c:5a:
                    09:17:63:56:9e:3d:2a:e4:8d:2f:53:a8:13:99:1c:
                    bf:05:aa:52:9f:67:62:52:a2:4c:e7:2d:7c:05:f6:
                    45:3b:69:03:37:51:7c:86:d5:6f:38:be:87:a5:ad:
                    99:a9:ae:6a:07:dc:f9:50:eb:c0:82:c0:45:e2:0b:
                    97:2d:69:23:e3:c7:3d:75:17:f8:65:be:86:d0:4b:
                    3d:7a:7e:17:c0:16:16:2d:b4:7b:1d:1d:60:6b:7f:
                    86:5f:f1:69:37:b0:7d:bd:dd:3e:7b:d2:29:57:fa:
                    dd:0e:4e:32:38:3f:74:a5:ef:72:9b:9a:28:10:c8:
                    20:93:9d:48:75:ea:08:be:94:6a:72:c2:4e:c9:d5:
                    c1:88:fc:cf:ac:f5:70:60:65:7f:de:e3:e0:6a:81:
                    30:3c:e8:3f:2c:42:85:36:92:ee:b4:7b:6e:5c:8e:
                    52:8a:be:65:1a:c6:07:ee:b2:f3:b4:50:f1:bb:df:
                    de:33:df:3d:c3:4d:9c:af:41:a3:ec:75:6e:f9:a9:
                    b6:26:56:1c:fb:7c:a7:3a:63:64:f6:3a:24:22:9b:
                    45:c1:ba:54:e7:0f:1d:73:d9:98:89:8a:77:82:45:
                    cb:41:10:b2:e8:47:88:77:26:00:26:f8:55:8a:77:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:8B:65:3B:32:FE:CA:6F:17:3B:43:CC:73:A6:3B:F4:E7:78:C1
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:17:b0:ff:fd:55:2b:25:64:1c:2b:10:a6:c9:33:74:05:
         0f:81:e4:43:03:5b:3c:53:b9:a9:24:5d:84:73:05:9d:5b:f9:
         c4:b4:f5:84:85:39:df:75:6e:93:89:b0:39:a5:02:b6:ea:57:
         a6:c1:8c:93:38:f5:cb:fc:c0:12:42:07:bd:a6:8c:c7:58:52:
         6b:58:93:1f:66:6d:e9:34:9e:39:79:50:11:38:77:e6:71:17:
         a8:69:4f:a8:d2:19:45:cf:62:67:8f:cb:00:fd:97:c4:16:23:
         4e:9c:48:36:38:65:43:85:d5:b3:c2:06:ec:f4:c5:24:72:3d:
         9d:57:54:c6:a0:18:d1:d9:3a:fc:f8:57:9f:29:10:97:96:d3:
         63:85:b5:aa:95:48:76:2a:10:c5:32:e9:93:54:49:a6:02:1f:
         3f:aa:a1:cd:ed:88:80:31:40:0e:ad:8d:ea:9c:8e:2e:2b:47:
         ff:b6:c4:d7:56:57:35:38:2c:60:49:ac:b4:ed:3c:2c:20:13:
         90:01:83:33:3e:99:d7:09:78:fa:04:fa:a8:4b:50:18:73:1a:
         3f:e6:f6:e0:8a:2f:60:c3:17:85:ea:a5:5b:c9:af:ca:d3:b8:
         45:3d:6f:c2:e6:a1:4e:78:df:8f:8b:d1:eb:52:79:20:97:72:
         0a:08:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:10:17 2026 by rpki-client