Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
File:                     0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft (raw, json)
Hash identifier:          rvv9vTdf7h02mR/dGgo9ST3d9NrL6ewBqOECj65Caaw=
Subject key identifier:   7B:A8:44:AE:63:62:62:CB:F4:94:3B:90:46:A4:41:07:43:58:73:DB
Authority key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3
Certificate issuer:       /CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
Certificate serial:       647B63005617376F27CEFEFF78A1479E131805AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
Manifest number:          47
Signing time:             Wed 28 Oct 2026 02:30:34 +0000
Manifest this update:     Wed 28 Oct 2026 02:25:34 +0000
Manifest next update:     Sat 31 Oct 2026 12:44:34 +0000
Files and hashes:         1: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl (hash: jU8Yk3P0mBNhLR3CgZhFnRSWvDVKewVi/eJ5sLuvyaU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 10:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7b:63:00:56:17:37:6f:27:ce:fe:ff:78:a1:47:9e:13:18:05:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
        Validity
            Not Before: Oct 28 02:25:34 2026 GMT
            Not After : Oct 31 12:44:34 2026 GMT
        Subject: CN=7BA844AE636262CBF4943B9046A44107435873DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:fe:8d:21:a7:05:d8:c4:a2:b9:da:c9:4a:
                    29:bb:32:ba:22:bf:cb:a5:5e:a1:b8:d8:e3:ce:38:
                    02:cd:54:1f:ef:6c:ae:29:64:06:8b:a1:b7:ff:af:
                    13:7d:b9:ab:f9:67:b3:18:86:e2:f3:c8:62:40:41:
                    3d:4d:81:e3:2c:0f:e0:4d:cb:d5:43:e2:1f:c3:1a:
                    84:28:96:47:aa:a0:a6:af:19:d9:14:f0:ac:4e:d4:
                    2f:6f:7a:83:5e:03:0e:88:da:0f:55:a9:40:29:49:
                    44:43:63:1d:70:f9:c8:75:36:63:9e:27:44:df:bb:
                    9f:72:3a:aa:5f:93:5c:1e:57:ea:3c:cf:0a:e0:e7:
                    e4:81:dd:97:1c:a2:45:b1:0a:a0:da:3c:0d:cd:7b:
                    3a:72:fb:dc:26:61:cb:58:23:e7:4a:8a:7a:85:91:
                    6a:73:93:0f:72:f9:72:9f:3f:a0:bb:6e:0a:21:ce:
                    a3:08:f4:18:3b:9f:03:8c:24:a8:9c:15:4b:02:9c:
                    bd:ce:3b:5e:61:26:c7:d8:96:5f:16:3b:93:89:08:
                    be:f6:99:40:d6:3d:62:78:0c:27:b0:ea:61:76:d6:
                    de:05:ba:fb:f9:ee:c2:02:6c:b3:65:6d:da:1e:0f:
                    50:27:d9:ab:3a:85:37:da:af:f5:04:a8:81:48:85:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:44:AE:63:62:62:CB:F4:94:3B:90:46:A4:41:07:43:58:73:DB
            X509v3 Authority Key Identifier:
                keyid:00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:88:fe:ab:2b:89:a9:8f:41:79:ba:b3:6a:41:58:43:28:
         ab:c0:7a:52:a8:cd:37:35:88:7e:e4:e0:de:0d:82:ce:f8:b4:
         3e:44:f5:99:d5:95:e6:85:2c:d5:11:21:aa:55:3d:b0:2c:bd:
         db:95:86:b9:79:0c:69:c0:cd:9b:b5:77:66:cd:28:62:4f:33:
         ca:8c:d1:43:e2:94:2b:ab:be:57:73:eb:41:60:df:7c:ff:cf:
         52:34:d2:94:73:f5:8c:fc:72:50:da:81:f4:7c:a0:14:b1:8e:
         d5:f0:60:68:54:49:f4:4a:60:bc:73:31:45:07:ca:63:69:ed:
         1c:30:d9:bd:73:fd:ec:01:21:54:60:21:6d:6c:ad:f8:89:c0:
         14:19:4f:bd:cb:2f:06:ac:c0:6f:3d:29:12:f1:7f:fb:45:35:
         a2:ac:ec:7c:c7:cf:30:52:78:5f:1f:e0:a5:d1:f9:10:e8:4b:
         08:66:c7:ce:6d:67:9e:78:e3:21:a3:e9:80:9d:f5:a6:42:ea:
         2a:27:2a:dc:97:cf:82:55:d0:ee:53:1c:70:92:61:e1:09:36:
         ee:c0:56:bd:e2:94:39:6a:72:17:d9:da:24:ff:6f:dd:8d:22:
         b3:1d:a4:a4:e7:d8:12:e6:8a:ae:8a:0c:56:2e:41:85:8a:83:
         30:2b:68:46
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZHtjAFYXN28nzv7/eKFHnhMYBa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxNUZDREE1NDFGRkY1RUUyNjc3MEM3OEUzMEI1RUE4
OTQ0MjFFMzAeFw0yNjEwMjgwMjI1MzRaFw0yNjEwMzExMjQ0MzRaMDMxMTAvBgNV
BAMTKDdCQTg0NEFFNjM2MjYyQ0JGNDk0M0I5MDQ2QTQ0MTA3NDM1ODczREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Pf6NIacF2MSiudrJSim7Mroi
v8ulXqG42OPOOALNVB/vbK4pZAaLobf/rxN9uav5Z7MYhuLzyGJAQT1NgeMsD+BN
y9VD4h/DGoQolkeqoKavGdkU8KxO1C9veoNeAw6I2g9VqUApSURDYx1w+ch1NmOe
J0Tfu59yOqpfk1weV+o8zwrg5+SB3ZccokWxCqDaPA3Nezpy+9wmYctYI+dKinqF
kWpzkw9y+XKfP6C7bgohzqMI9Bg7nwOMJKicFUsCnL3OO15hJsfYll8WO5OJCL72
mUDWPWJ4DCew6mF21t4Fuvv57sICbLNlbdoeD1An2as6hTfar/UEqIFIhePTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUe6hErmNiYsv0lDuQRqRBB0NYc9swHwYDVR0j
BBgwFoAUABX82lQf/17iZ3DHjjC16olEIeMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk5MzkzMTI3NjU4MjkxNC8xLzAwMTVGQ0RBNTQxRkZGNUVFMjY3NzBDNzhFMzBC
NUVBODk0NDIxRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDAxNUZDREE1NDFGRkY1RUUyNjc3MEM3OEUzMEI1RUE4OTQ0MjFFMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMS8wMDE1RkNEQTU0MUZG
RjVFRTI2NzcwQzc4RTMwQjVFQTg5NDQyMUUzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn82I/qsriamP
QXm6s2pBWEMoq8B6UqjNNzWIfuTg3g2Czvi0PkT1mdWV5oUs1REhqlU9sCy925WG
uXkMacDNm7V3Zs0oYk8zyozRQ+KUK6u+V3PrQWDffP/PUjTSlHP1jPxyUNqB9Hyg
FLGO1fBgaFRJ9EpgvHMxRQfKY2ntHDDZvXP97AEhVGAhbWyt+InAFBlPvcsvBqzA
bz0pEvF/+0U1oqzsfMfPMFJ4Xx/gpdH5EOhLCGbHzm1nnnjjIaPpgJ31pkLqKicq
3JfPglXQ7lMccJJh4Qk27sBWveKUOWpyF9naJP9v3Y0isx2kpOfYEuaKrooMVi5B
hYqDMCtoRg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:50:07 2026 by rpki-client