Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
File:                     F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json)
Hash identifier:          FLtBVO0wrxaVyY/yOntx7BW8BaMiicm61p+goNoecm8=
Subject key identifier:   6D:50:7D:7A:42:86:26:C2:73:09:69:56:94:A1:21:A3:B1:C1:C0:D0
Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43
Certificate issuer:       /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
Certificate serial:       3814FAAF46B6CEB2D7F15B6DB768D08C5C44386B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
Manifest number:          8F
Signing time:             Fri 28 Aug 2026 06:47:35 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:35 +0000
Manifest next update:     Mon 31 Aug 2026 07:58:35 +0000
Files and hashes:         1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: JKHdFROUsGKbVVOWah1Lz8z+u3/Dd/9fsZd0uYvtvLU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 07:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:fa:af:46:b6:ce:b2:d7:f1:5b:6d:b7:68:d0:8c:5c:44:38:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
        Validity
            Not Before: Aug 28 06:42:35 2026 GMT
            Not After : Aug 31 07:58:35 2026 GMT
        Subject: CN=6D507D7A428626C27309695694A121A3B1C1C0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:b0:28:88:92:6f:99:dc:cf:ac:3b:38:5b:
                    4c:58:99:20:a5:c0:c0:96:d4:11:f0:c5:05:85:71:
                    56:ac:e5:b9:33:5c:c1:cf:78:3a:c9:df:20:65:4b:
                    ac:f0:4c:78:c2:b4:61:7c:f6:f1:02:fc:8e:e2:f6:
                    9c:c8:a6:bc:4b:0a:cf:cd:7f:c4:0b:49:1e:fe:fa:
                    72:72:bd:09:ea:2a:27:f3:68:a1:af:f6:2d:02:fd:
                    e2:8d:ca:b7:ee:3c:48:f5:fe:64:fc:88:17:43:32:
                    d7:fc:7b:bf:fa:7e:29:f7:be:93:f5:55:6f:ca:97:
                    7d:df:a0:86:f8:25:a4:1e:5e:b2:5c:48:a6:01:98:
                    f3:bd:cf:44:e9:a2:fd:00:ea:45:db:e8:42:01:54:
                    f9:13:6b:07:6b:96:aa:42:0d:d1:3d:5f:96:48:18:
                    8d:cb:d2:88:56:39:28:d1:ab:11:4a:cd:62:72:c2:
                    50:64:39:e5:85:74:87:85:1d:ee:88:43:34:81:a8:
                    c2:9f:24:ba:d7:1e:e3:cf:db:2f:1e:04:e8:32:7d:
                    af:c6:c1:d9:22:11:49:69:36:d7:69:85:46:8d:86:
                    08:58:38:b9:ec:1d:8f:0d:50:70:4c:dd:6c:57:40:
                    92:9e:82:d8:b7:28:c2:60:67:9f:27:aa:47:e1:1a:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:7D:7A:42:86:26:C2:73:09:69:56:94:A1:21:A3:B1:C1:C0:D0
            X509v3 Authority Key Identifier:
                keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:77:e5:da:e0:c6:8d:75:06:bc:32:41:1e:ec:58:f8:aa:75:
         b6:7c:88:32:88:5d:2c:7d:d1:9b:56:c6:78:4a:21:5f:7e:f7:
         1e:8b:35:5c:37:1f:56:95:b3:46:b9:6b:e9:59:92:74:68:ea:
         d8:33:33:91:db:6c:b1:aa:f0:4e:3a:34:e0:25:af:4a:6f:6a:
         8a:33:b7:cd:28:e5:f3:c9:3a:50:9d:46:8d:a4:61:ab:25:cd:
         01:82:30:38:c0:9f:ae:d3:83:f3:cc:22:12:11:e8:88:c4:cf:
         23:94:52:df:3c:84:1d:46:83:fa:1d:21:ff:c8:5c:00:45:32:
         4a:97:4c:f4:fb:52:6e:58:f6:77:8a:b6:7a:88:33:cb:35:2c:
         23:56:5a:86:d0:87:d0:e1:94:89:b1:fd:69:ed:a1:06:cf:23:
         e1:c7:df:e7:7e:cf:eb:52:30:60:3e:88:fa:5d:1d:81:ae:37:
         5f:3d:58:9e:c9:98:09:17:90:31:a0:27:61:f4:37:61:8a:e0:
         c9:7a:bb:9a:d0:30:4f:1e:44:4c:e8:f8:22:ce:97:23:5e:44:
         f7:1e:c1:ff:05:1c:63:f1:3c:01:bf:25:b0:ea:fd:1e:43:08:
         5f:43:61:7f:b7:6e:27:14:67:c6:57:a1:22:93:41:cf:b6:75:
         6d:6c:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:45:07 2026 by rpki-client