Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
File:                     9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft (raw, json)
Hash identifier:          BrNCVu5lUpMlUuw/imzTwGwVVXl0ki1eB1cfi95R15s=
Subject key identifier:   0A:BA:CA:DF:2D:4F:2B:94:48:BB:7B:3D:00:73:F5:F4:11:98:79:63
Authority key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Certificate issuer:       /CN=A914EAE40000/serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Certificate serial:       48657F2EEAD2664D6C951D4A8242752EA945AFDB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
Manifest number:          036C
Signing time:             Fri 04 Sep 2026 15:35:23 +0000
Manifest this update:     Fri 04 Sep 2026 15:30:23 +0000
Manifest next update:     Sat 05 Sep 2026 18:43:23 +0000
Files and hashes:         1: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl (hash: +EhIGxbKEXXKQpwHJH3HLFqCFmgaAuYzt1rKjvxX9Zo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 18:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:7f:2e:ea:d2:66:4d:6c:95:1d:4a:82:42:75:2e:a9:45:af:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
        Validity
            Not Before: Sep  4 15:30:23 2026 GMT
            Not After : Sep  5 18:43:23 2026 GMT
        Subject: CN=0ABACADF2D4F2B9448BB7B3D0073F5F411987963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:e9:f1:51:83:58:a3:5f:11:04:37:4c:b9:
                    c8:df:a5:c4:25:86:0f:a7:c0:ec:3f:f3:84:8d:7e:
                    3d:0d:97:e5:a8:f1:d1:7f:b1:ed:4f:eb:4f:6f:d4:
                    c2:9a:e7:c1:77:57:0f:24:b0:e5:da:03:f9:d3:d3:
                    5c:91:3d:82:6b:c5:cb:fd:2c:6b:4a:7e:76:13:3b:
                    4d:37:1f:35:1e:54:7c:14:01:a2:a5:c5:16:b5:1c:
                    67:df:43:39:53:d7:1e:24:e5:11:0c:aa:fa:24:d5:
                    46:7b:76:dc:af:e2:b3:a0:5a:f5:9e:b8:61:4c:3f:
                    c0:d4:88:82:49:94:cc:19:ff:d9:ba:a5:8a:32:eb:
                    52:b5:9b:e2:9f:d4:b3:ae:9f:d5:e1:4f:68:55:34:
                    bf:2c:db:b2:6d:58:da:dd:57:84:26:f2:e4:db:0a:
                    f5:09:67:18:18:5d:6d:96:99:e1:1f:28:39:db:10:
                    ba:0a:22:2d:52:57:2d:83:54:e6:cd:93:07:4d:01:
                    8f:c7:06:36:b6:fb:48:bc:c4:e4:f7:24:3e:a9:1f:
                    96:ac:03:4f:8a:9f:8a:1d:fa:3c:41:7b:c4:00:3f:
                    20:a5:77:0a:ac:44:2e:13:87:be:ab:f7:fb:5b:b6:
                    5e:73:09:30:73:51:5d:ed:fa:f6:8a:60:46:6e:93:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:CA:DF:2D:4F:2B:94:48:BB:7B:3D:00:73:F5:F4:11:98:79:63
            X509v3 Authority Key Identifier:
                keyid:9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ae:f3:cf:ac:e8:ea:aa:58:0c:b0:f1:ae:e9:b2:c2:70:2a:
         e4:cc:59:87:8e:d7:25:2d:49:0f:44:81:1c:25:d6:7d:36:d7:
         42:e7:ed:05:a4:5f:82:3b:60:a0:c9:6b:3f:a9:68:b6:62:7e:
         5f:1d:bf:45:c5:01:51:59:d2:9f:62:7a:25:94:ee:b2:7d:04:
         05:d1:7b:7f:69:e2:be:7b:44:6b:34:65:57:3c:cc:10:07:c9:
         e8:5e:c1:28:6d:b2:19:d2:ff:07:28:b4:67:7f:95:c9:d1:e1:
         4c:7e:32:fb:01:7e:3a:24:d4:1c:20:ee:d2:cd:96:82:9f:0b:
         31:20:2c:43:09:e8:00:8c:86:5e:a8:7f:30:71:c1:59:c0:7e:
         74:50:de:73:24:ec:97:4f:61:77:d3:30:96:0e:c7:11:2a:6c:
         a5:f0:bb:37:21:7c:35:00:d7:96:4d:e4:f6:4a:14:d9:fd:c7:
         09:48:f3:db:8e:2b:59:c6:45:fd:fa:1e:fb:ce:68:d3:b6:e6:
         cc:46:8c:0b:24:df:ac:79:75:f3:b0:70:a3:a4:78:2d:ee:96:
         01:32:3c:41:99:4d:16:d1:a8:98:4e:be:ea:1f:e9:da:d6:a1:
         c5:ce:29:e3:c4:8c:9b:f7:17:20:22:61:ee:6d:90:cc:b5:5d:
         72:b2:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:32:25 2026 by rpki-client