Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
File:                     5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json)
Hash identifier:          9w7TqRG9GYujyrZYXZ2xXQa8aI4hQXfBIaFjeKLJdec=
Subject key identifier:   31:B3:3E:3A:C4:94:A0:D5:30:EF:54:D7:C7:E9:15:DF:E4:BE:C4:4A
Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
Certificate issuer:       /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
Certificate serial:       2EB32019AED9F33A2465B277A508091CA29DDAD8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
Manifest number:          74
Signing time:             Thu 03 Sep 2026 19:33:58 +0000
Manifest this update:     Thu 03 Sep 2026 19:28:58 +0000
Manifest next update:     Sun 06 Sep 2026 22:53:58 +0000
Files and hashes:         1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: DCB0rL4x13k3qtF2j5l7OxjIlT13ogeZCkn2gWGO8qg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 21:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b3:20:19:ae:d9:f3:3a:24:65:b2:77:a5:08:09:1c:a2:9d:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
        Validity
            Not Before: Sep  3 19:28:58 2026 GMT
            Not After : Sep  6 22:53:58 2026 GMT
        Subject: CN=31B33E3AC494A0D530EF54D7C7E915DFE4BEC44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:5e:8a:59:5a:5e:c5:f5:43:07:a2:8c:45:
                    4d:6b:59:8d:16:79:19:e4:71:c9:73:ee:1b:30:f8:
                    f3:20:e9:9b:17:4d:d5:86:98:a1:25:84:18:c4:ef:
                    bf:0d:4a:79:ef:b4:7d:b0:80:83:87:aa:ec:0a:3c:
                    c4:9c:79:3b:7d:c9:dc:7d:8d:55:9a:5a:a2:be:c2:
                    ee:77:a5:c3:54:4e:51:10:bf:ec:2f:ab:f3:cc:b8:
                    89:f9:ba:51:7f:33:b0:dd:fc:7e:b6:20:09:0c:ec:
                    74:0e:4d:0a:ea:68:87:88:4e:ba:62:05:9b:c7:46:
                    5a:3b:b7:67:a4:61:13:f0:27:8e:c0:e6:26:d4:1c:
                    50:d7:ea:f2:4c:d1:2b:b4:bf:c4:41:9c:a6:00:7b:
                    09:d6:d8:4c:a4:62:0f:c9:fb:cc:27:e8:5f:3b:1e:
                    ab:7c:0f:03:95:ff:85:e0:5a:ee:93:e7:bb:9f:51:
                    ef:4f:59:e3:cc:29:f1:75:53:8c:eb:b0:16:a8:c0:
                    35:f1:63:26:2d:fc:5e:df:b4:17:5e:db:84:77:7c:
                    ab:9a:92:a9:bf:ac:03:33:48:fa:24:4f:11:eb:80:
                    75:9b:46:15:fe:c2:31:c0:c6:f8:e1:ae:da:1f:86:
                    61:3a:14:42:1a:a0:52:fc:46:f7:df:44:d8:b0:d2:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:3E:3A:C4:94:A0:D5:30:EF:54:D7:C7:E9:15:DF:E4:BE:C4:4A
            X509v3 Authority Key Identifier:
                keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:0b:dd:f9:e1:83:75:58:55:f4:3e:ec:e9:e9:04:13:1d:
         79:4e:b1:af:e3:08:db:81:60:97:7d:35:ad:ab:9c:41:a6:7e:
         3e:d8:6f:2d:bd:af:73:cd:e7:27:4b:a7:c2:c5:c6:c0:3a:d4:
         f3:95:47:fd:88:4b:54:b5:a3:2e:82:ca:ba:00:90:5f:1e:6d:
         d5:fa:3a:6e:97:83:9c:99:33:31:a7:dc:d3:bd:d6:26:f9:73:
         a3:d0:e6:6c:e0:2b:4a:7b:d4:2f:15:cb:b6:6e:12:db:3a:62:
         f1:66:d4:d7:16:a9:7e:4c:0a:bb:2c:d7:e9:b6:0f:7f:71:d6:
         83:d4:b6:b3:6d:1b:1b:57:70:6b:c9:e0:40:0c:6a:42:df:ef:
         c2:e8:e3:c3:82:b8:1f:be:de:dc:b7:8f:b0:ba:db:13:67:29:
         05:7d:85:ff:18:57:8b:10:c6:b7:7f:c0:e8:13:1c:1a:63:87:
         86:68:3b:03:de:7a:1c:42:c4:8e:98:cf:38:ab:0b:60:2a:38:
         7d:50:f7:99:a3:ce:32:03:4c:0c:4d:b3:0b:07:7c:5a:c5:19:
         bf:3f:16:49:b8:77:47:f8:a5:f6:af:bf:e1:72:23:dd:26:4b:
         7d:d2:90:4d:ea:9c:67:7a:4c:22:56:22:73:4d:5c:e3:1c:79:
         42:24:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----