Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
File:                     53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json)
Hash identifier:          vauPg+eox/1AcHxsSuQ8GJRG3lPu8+26Aq5iSizcrl0=
Subject key identifier:   BB:32:8B:92:C9:D4:73:9E:0C:AA:2B:4D:FF:0E:DB:72:EC:95:6A:33
Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24
Certificate issuer:       /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
Certificate serial:       0B224A8DB7142103AFD9AFD142D27F080730E768
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
Manifest number:          10
Signing time:             Fri 29 May 2026 14:42:57 +0000
Manifest this update:     Fri 29 May 2026 14:37:57 +0000
Manifest next update:     Sat 30 May 2026 16:56:57 +0000
Files and hashes:         1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: YG1PIpLIb1n7R5ohZ5EGRXCLoypJ61vcfJSCgrGxJug=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:4a:8d:b7:14:21:03:af:d9:af:d1:42:d2:7f:08:07:30:e7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
        Validity
            Not Before: May 29 14:37:57 2026 GMT
            Not After : May 30 16:56:57 2026 GMT
        Subject: CN=BB328B92C9D4739E0CAA2B4DFF0EDB72EC956A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:61:63:53:cc:5c:77:af:f0:91:2b:32:e9:
                    ee:f7:59:4b:50:41:92:d1:ad:a6:ec:6c:55:d4:42:
                    c0:cc:ef:5e:06:e6:a9:05:2a:fd:41:b0:f8:18:db:
                    f0:cb:4a:ed:92:2d:e2:d6:eb:fd:12:48:50:9d:7a:
                    04:64:e0:a6:50:cd:0d:8c:a4:94:55:23:42:2b:46:
                    90:11:a2:c5:14:b4:73:ae:5c:c1:99:13:cc:8f:d3:
                    d9:a1:a4:2e:9d:2c:40:03:77:ca:65:c4:a3:bb:62:
                    99:7a:00:43:d1:93:34:11:ad:f5:be:82:ea:bb:f8:
                    fd:4b:62:eb:7b:12:e2:47:4e:63:1b:65:67:c2:84:
                    79:da:96:cd:66:59:1a:b4:03:3b:8b:e1:6a:4e:0b:
                    83:3b:6a:fe:47:b2:9f:8b:33:d6:c9:ba:ca:58:27:
                    02:2c:79:30:a9:31:b1:6c:7b:91:aa:86:21:0f:b6:
                    62:7d:22:03:eb:81:9c:77:83:1a:3b:55:82:98:c8:
                    1a:1d:c5:bd:f6:aa:a5:c9:3a:70:5e:77:fb:e9:31:
                    bc:9b:c3:c1:8f:83:40:fa:38:55:09:e0:74:4b:e4:
                    05:f7:dc:8e:1e:27:e5:b6:02:c4:3a:4b:36:57:f6:
                    e4:66:d4:c7:d8:4a:d9:e5:59:60:b6:d1:12:fa:43:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:8B:92:C9:D4:73:9E:0C:AA:2B:4D:FF:0E:DB:72:EC:95:6A:33
            X509v3 Authority Key Identifier:
                keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c2:31:a0:6b:ad:7e:b0:8f:cb:df:1c:00:44:bb:92:90:41:
         ec:08:9f:8c:76:10:60:9d:df:c8:2f:b7:4e:62:84:43:c9:b4:
         b1:ca:df:bf:83:af:2e:95:77:93:46:4b:91:e4:de:26:fa:6f:
         7e:28:e8:f6:af:fa:f2:35:d5:3e:01:0c:d9:40:0d:0f:7d:f9:
         82:ee:91:49:58:66:2f:cd:15:bd:6c:8c:52:ba:1b:8e:fa:21:
         47:f4:0e:ae:36:2b:74:c3:cc:7a:7c:3c:4c:1a:b1:35:38:96:
         c5:84:c9:b7:61:93:ae:87:ba:d0:78:a9:7d:fa:b3:d6:ab:02:
         0b:cd:bd:d4:e3:06:ee:46:7f:bf:d9:fb:26:58:ac:c1:1d:ca:
         1d:45:09:65:45:e2:81:09:fe:d5:b7:58:cd:9e:04:0c:50:3a:
         d9:82:3f:42:47:13:80:de:3c:17:10:da:ef:d6:58:89:db:7c:
         bd:34:a3:87:6a:b4:06:c6:3d:15:2a:dd:7c:32:79:57:5b:42:
         26:14:fe:50:e9:ed:41:18:bb:74:1b:5d:5c:16:f9:59:bc:d1:
         7d:29:3b:54:d0:f3:fc:9f:4b:79:32:b9:5c:01:4a:46:49:e7:
         a5:52:25:80:a8:c1:4b:8d:33:f1:6c:74:c8:95:47:ba:3d:7e:
         66:cc:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:44 2026 by rpki-client