Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
File:                     5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft (raw, json)
Hash identifier:          OuYsysnUOnCFVSEMestUIZoy5lrg4PaxXYzi2MwxmkM=
Subject key identifier:   AA:CD:59:9F:7F:72:53:A7:3D:44:2D:B9:AE:CF:42:53:F1:21:E0:5F
Authority key identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E
Certificate issuer:       /CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
Certificate serial:       03EA48DDCCF556CC7B58D3D3435D5A898A5355CB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
Manifest number:          8B
Signing time:             Tue 13 Oct 2026 23:33:20 +0000
Manifest this update:     Tue 13 Oct 2026 23:28:20 +0000
Manifest next update:     Sat 17 Oct 2026 03:00:20 +0000
Files and hashes:         1: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl (hash: hHK4TSXgnyHox/2Crl/nRR6N/OaBVLN1+hN3xRPjTfc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:48:dd:cc:f5:56:cc:7b:58:d3:d3:43:5d:5a:89:8a:53:55:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
        Validity
            Not Before: Oct 13 23:28:20 2026 GMT
            Not After : Oct 17 03:00:20 2026 GMT
        Subject: CN=AACD599F7F7253A73D442DB9AECF4253F121E05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:58:21:9b:ee:d9:67:b2:e4:80:1d:0c:fc:
                    a3:79:99:5d:43:5a:6c:43:57:c5:d9:74:d2:93:01:
                    2c:c8:9b:29:0b:2a:f8:5e:c2:c9:d4:e6:58:08:ed:
                    e7:84:81:ee:03:37:d5:83:7c:e0:57:91:1a:39:31:
                    60:ea:69:5b:d9:b2:15:43:08:5a:fb:b1:76:d1:5c:
                    76:08:75:3b:dd:b2:0e:13:bd:3e:79:01:2b:83:64:
                    fe:7c:86:2a:23:04:0b:e4:b5:5a:e5:bd:70:aa:74:
                    1c:0b:62:6a:1f:26:02:cb:15:87:fa:72:0b:46:56:
                    2a:70:fe:a8:9a:a2:79:73:aa:d4:8f:63:e7:1a:4a:
                    6d:c3:7a:f2:0b:dc:48:6c:8d:ca:fa:e8:ab:7b:40:
                    9e:57:c8:6d:32:e0:e3:1c:f9:b3:33:c0:46:7e:35:
                    12:b6:59:44:1c:57:e4:1b:70:7a:9c:63:a9:7a:5b:
                    67:6a:80:ba:b9:d5:5d:12:8e:b3:07:1f:69:87:5f:
                    81:80:29:2e:e8:b2:b0:21:c0:32:28:00:a1:c0:79:
                    35:a3:eb:08:6c:83:ed:5f:83:9a:4d:59:b4:bc:02:
                    ef:3d:f0:d5:ec:d9:5f:0f:18:e7:04:cc:55:29:f7:
                    96:64:1c:ca:f7:b5:d6:70:b5:af:d9:ff:bb:0e:45:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:59:9F:7F:72:53:A7:3D:44:2D:B9:AE:CF:42:53:F1:21:E0:5F
            X509v3 Authority Key Identifier:
                keyid:5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cf:32:8d:28:60:a9:b0:50:a5:56:2a:93:a0:54:04:e5:ca:
         8a:35:22:c3:a2:52:6e:c9:dc:62:90:59:ca:2b:69:7d:7f:4d:
         41:36:0a:f2:b7:51:ab:46:82:7b:ea:d8:dd:c7:09:9c:12:3d:
         4b:e6:3c:02:c6:e8:c9:75:32:61:8f:ca:b7:5a:b4:73:a1:21:
         43:7b:1b:fe:5c:76:25:ee:74:93:08:27:3b:05:74:96:56:9d:
         92:ad:02:cd:ee:77:1d:dd:66:1f:d2:3a:5c:4f:3e:a1:b6:55:
         56:30:b4:4c:f2:0e:7e:1e:c9:ee:e3:5a:32:85:af:5f:80:aa:
         32:98:4b:9a:63:40:be:aa:13:34:37:45:dc:c5:77:5c:ba:44:
         0d:95:1e:f5:9a:11:af:1c:0a:97:20:a2:cf:77:5d:e0:2c:02:
         24:88:ca:3a:0f:a6:35:99:27:4f:43:a1:d6:38:ae:6b:8e:e1:
         9c:7a:7b:9b:b0:85:89:11:7c:29:87:1e:70:37:d8:be:1d:a2:
         fa:1f:b9:4c:6d:ba:8f:5b:9d:ce:1e:c4:cc:54:68:ed:0f:8d:
         7e:f2:f3:9a:d4:94:64:f9:c1:f3:1a:30:55:e1:66:62:c3:5d:
         03:4c:ce:bb:a7:6a:da:ef:c2:9d:34:4b:10:6a:ae:25:b9:bd:
         c0:a4:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:20:07 2026 by rpki-client