Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          Tb/F7oBY+jPRSW1aVBmjVQN2l0o968c3b123xCb/QO4=
Subject key identifier:   5B:11:A2:06:1C:96:79:9D:01:6F:AE:C9:A0:D5:99:77:2F:30:23:A8
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       1F241DABC8F01797DC5864F1F32BB43C9FC47CA3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          DB
Signing time:             Tue 13 Oct 2026 00:07:33 +0000
Manifest this update:     Tue 13 Oct 2026 00:02:33 +0000
Manifest next update:     Fri 16 Oct 2026 10:20:33 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: jQWUmeqNOv4wPGNy6fEzRZR6OE96rkOzYp7NTdJs7Uo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:1d:ab:c8:f0:17:97:dc:58:64:f1:f3:2b:b4:3c:9f:c4:7c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Oct 13 00:02:33 2026 GMT
            Not After : Oct 16 10:20:33 2026 GMT
        Subject: CN=5B11A2061C96799D016FAEC9A0D599772F3023A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:83:bd:86:8b:19:64:b3:8d:9c:7e:6b:b9:
                    33:19:5d:2f:56:f5:18:c4:af:2c:94:d6:f6:f9:2f:
                    9f:82:b2:23:e2:5d:bb:d8:2e:5d:43:d5:97:e5:4f:
                    ed:41:62:eb:85:d2:8e:f1:6d:24:85:c7:74:ea:b4:
                    5b:92:cd:d9:bd:a4:17:93:d3:b7:95:26:d3:c1:78:
                    6d:d7:f6:43:c2:af:68:89:12:c4:6e:b2:cc:74:81:
                    ee:48:dd:01:ba:71:d7:1c:64:85:c4:38:8d:98:55:
                    b5:e4:8c:97:2a:e7:48:5f:c4:39:5a:c1:9c:2a:78:
                    0d:97:64:e5:5c:51:54:d0:49:34:cd:82:66:f9:8b:
                    78:aa:ba:98:42:6e:6b:4d:0f:ad:9e:55:54:76:72:
                    8b:4e:29:85:f9:2c:95:a6:88:dd:6d:a6:ce:83:11:
                    f6:76:aa:86:89:5d:f0:87:f2:5e:89:81:e2:4d:5f:
                    36:24:7c:f0:87:40:d2:dd:86:66:5b:ac:fb:52:b5:
                    98:b0:a9:bd:b5:ce:8f:5f:25:0e:58:f4:fe:f2:08:
                    04:66:5c:7e:17:e1:5d:d1:be:e7:fd:34:14:a7:34:
                    55:c5:f0:fb:3f:cc:0a:b2:b9:ab:a0:9f:2b:4d:3b:
                    c3:98:96:10:11:30:62:31:bc:53:98:f0:93:42:51:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:A2:06:1C:96:79:9D:01:6F:AE:C9:A0:D5:99:77:2F:30:23:A8
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:0a:b9:2e:dd:a2:9e:09:59:bb:76:0b:c0:90:6a:ef:40:
         c0:c5:68:a7:b8:2e:72:6c:8a:2e:bd:38:82:03:81:75:43:2f:
         19:79:4a:34:bb:69:48:44:fa:83:78:50:a8:5f:84:42:ac:7d:
         75:de:80:a8:a0:03:dc:ce:7e:a2:b6:26:b6:ee:f0:ce:ce:23:
         92:12:c2:90:49:5a:8c:36:42:19:bd:2e:09:68:4a:8f:c2:24:
         3e:38:8c:e4:38:e8:c2:5a:e6:b7:9e:2f:cd:8e:9e:3c:b7:39:
         74:04:09:6d:97:cc:c8:3a:53:aa:60:4a:25:9a:cc:a8:f2:ad:
         3a:c4:71:b9:ca:fa:83:8e:61:aa:d4:38:96:0c:70:af:ba:12:
         df:cd:0f:b8:cf:96:56:13:53:dc:0c:8e:9e:0b:42:9c:85:a3:
         8c:3c:a5:1c:28:d2:3c:3e:b3:45:ef:3a:77:8d:5b:84:d5:36:
         f3:61:27:03:a9:a9:86:31:05:eb:ff:75:e7:b1:bd:cb:f6:a8:
         62:b8:29:1c:66:ba:95:49:fe:a2:6e:4e:66:e4:79:f0:44:eb:
         d8:34:02:23:61:92:35:51:88:f7:e2:f1:14:df:04:5d:5d:80:
         4a:2e:bb:e6:39:56:92:6b:33:8b:7c:0b:e9:c5:21:20:10:e6:
         de:a6:16:2d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHyQdq8jwF5fcWGTx8yu0PJ/EfKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlE
ODZFMjhBNTAeFw0yNjEwMTMwMDAyMzNaFw0yNjEwMTYxMDIwMzNaMDMxMTAvBgNV
BAMTKDVCMTFBMjA2MUM5Njc5OUQwMTZGQUVDOUEwRDU5OTc3MkYzMDIzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1YO9hosZZLONnH5ruTMZXS9W
9RjEryyU1vb5L5+CsiPiXbvYLl1D1ZflT+1BYuuF0o7xbSSFx3TqtFuSzdm9pBeT
07eVJtPBeG3X9kPCr2iJEsRussx0ge5I3QG6cdccZIXEOI2YVbXkjJcq50hfxDla
wZwqeA2XZOVcUVTQSTTNgmb5i3iquphCbmtND62eVVR2cotOKYX5LJWmiN1tps6D
EfZ2qoaJXfCH8l6JgeJNXzYkfPCHQNLdhmZbrPtStZiwqb21zo9fJQ5Y9P7yCARm
XH4X4V3Rvuf9NBSnNFXF8Ps/zAqyuaugnytNO8OYlhARMGIxvFOY8JNCUQGDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUWxGiBhyWeZ0Bb67JoNWZdy8wI6gwHwYDVR0j
BBgwFoAU8xgpf34rHJSEmku2ehDwKdhuKKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjE3NDk3Ny8wL0YzMTgyOTdGN0UyQjFDOTQ4NDlBNEJCNjdBMTBG
MDI5RDg2RTI4QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlEODZFMjhBNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIxNzQ5NzcvMC9GMzE4Mjk3RjdFMkIx
Qzk0ODQ5QTRCQjY3QTEwRjAyOUQ4NkUyOEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi8KuS7dop4J
Wbt2C8CQau9AwMVop7gucmyKLr04ggOBdUMvGXlKNLtpSET6g3hQqF+EQqx9dd6A
qKAD3M5+orYmtu7wzs4jkhLCkElajDZCGb0uCWhKj8IkPjiM5Djowlrmt54vzY6e
PLc5dAQJbZfMyDpTqmBKJZrMqPKtOsRxucr6g45hqtQ4lgxwr7oS380PuM+WVhNT
3AyOngtCnIWjjDylHCjSPD6zRe86d41bhNU282EnA6mphjEF6/9157G9y/aoYrgp
HGa6lUn+om5OZuR58ETr2DQCI2GSNVGI9+LxFN8EXV2ASi675jlWkmszi3wL6cUh
IBDm3qYWLQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:11:08 2026 by rpki-client