Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
File:                     0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json)
Hash identifier:          RQwDlWssdn3pNTHVrzD4sCRKzq3uWSCXiGIrM2qlavg=
Subject key identifier:   31:C6:C7:F8:C5:8F:EB:0F:92:00:D4:42:15:47:1C:3F:71:DE:23:AC
Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
Certificate issuer:       /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Certificate serial:       360198EA5C47BEB8B53FE1BA241EDA3D20DA37E2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
Manifest number:          47
Signing time:             Wed 03 Jun 2026 22:13:56 +0000
Manifest this update:     Wed 03 Jun 2026 22:08:56 +0000
Manifest next update:     Thu 04 Jun 2026 22:59:56 +0000
Files and hashes:         1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: q87JTHF11ucRza9Y78D8QLEvDwSrQCH7gmoEonqJe0o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 22:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:01:98:ea:5c:47:be:b8:b5:3f:e1:ba:24:1e:da:3d:20:da:37:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
        Validity
            Not Before: Jun  3 22:08:56 2026 GMT
            Not After : Jun  4 22:59:56 2026 GMT
        Subject: CN=31C6C7F8C58FEB0F9200D44215471C3F71DE23AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:86:3f:ea:6a:36:aa:e9:e7:25:c9:04:01:
                    dd:d3:c9:31:de:93:61:89:2b:4c:aa:cb:c7:87:f3:
                    ea:16:b2:4a:c4:cf:f4:1a:8c:3e:1b:8f:5c:1b:9c:
                    56:06:2c:48:fa:a5:00:c5:20:af:2a:fa:3e:74:47:
                    30:b5:9e:f3:59:d6:98:95:4a:0a:82:da:f8:7c:61:
                    b2:54:28:ca:8b:7f:91:cc:e5:86:98:db:22:4c:b8:
                    30:3d:f3:23:4f:96:8f:b6:9d:45:00:49:60:be:08:
                    47:ca:51:5b:3e:a0:9a:fd:45:81:a6:75:0f:59:39:
                    3e:5d:6e:f8:c2:e9:91:f6:5d:4f:67:e7:c2:d7:1c:
                    32:30:72:e2:da:37:72:b6:73:28:11:eb:77:7a:35:
                    f9:36:01:86:3d:39:3f:ec:2b:15:01:5a:cb:11:89:
                    04:d5:3d:f3:f3:fe:29:4a:43:56:45:e5:dc:08:e8:
                    80:c4:59:f1:71:82:ef:e9:40:49:1f:de:7f:44:ae:
                    cf:97:c6:fc:bd:50:3e:fa:33:3d:45:47:f6:1f:e4:
                    82:b7:2b:5a:d2:41:7e:4c:5b:81:73:2e:4f:8a:c1:
                    ab:60:fa:75:b3:ef:b9:10:50:2e:a0:79:05:2a:b6:
                    08:b8:87:96:38:6b:05:e0:2d:a6:f0:73:d3:12:36:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:C7:F8:C5:8F:EB:0F:92:00:D4:42:15:47:1C:3F:71:DE:23:AC
            X509v3 Authority Key Identifier:
                keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cb:3e:f9:0b:9b:68:4e:ea:c8:12:ec:c8:ba:bc:b4:fd:e3:
         14:14:7b:46:5c:8d:ab:d1:63:fa:eb:0f:34:33:29:40:be:08:
         b5:5a:b4:d1:aa:63:e1:c0:06:ea:5d:87:51:11:d7:55:db:8c:
         ec:70:8d:ca:a7:4e:5f:d7:96:cd:ca:76:95:d3:2a:7b:a5:e8:
         7b:3a:cd:c0:0e:0a:c9:ba:ef:b5:0b:ea:02:3e:0d:96:86:c4:
         4e:22:f7:d0:6e:55:14:80:2b:e5:a3:05:b2:b7:41:f1:66:1f:
         78:24:ed:b2:d7:fc:c5:f0:34:d4:93:95:75:3f:92:6a:fd:9b:
         a5:a2:95:43:7c:7d:d9:2b:41:75:93:68:82:24:72:f2:44:d2:
         39:7a:ad:32:99:a4:44:d4:6f:ca:ac:5d:31:a5:33:fd:76:d9:
         d9:dd:41:3c:7b:30:6e:e0:d5:30:54:a9:d5:f2:fe:b9:69:34:
         09:de:5b:cf:a5:ad:d5:09:fe:e5:27:a7:80:7e:78:8d:24:ce:
         8e:d8:c5:38:6c:44:bd:0a:96:75:b9:40:de:47:9c:57:cb:e8:
         75:6a:10:d7:44:10:d6:ac:ad:10:71:a5:fe:69:d5:59:d3:53:
         79:bb:e2:16:73:38:07:56:b6:26:4b:eb:36:b7:08:f9:03:08:
         f8:bd:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:18:15 2026 by rpki-client