Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
File:                     5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json)
Hash identifier:          X7QJ8ZBXl9HGuPmqi6ADqoJ7sRzgSo78M/RQCkwncMs=
Subject key identifier:   2D:CD:89:57:86:C4:C8:1C:E7:EF:9C:DF:67:12:E4:6E:E6:86:4A:18
Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
Certificate issuer:       /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
Certificate serial:       079CF8F86FCD4B12928FE86FD6F2E31D3E4409EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
Manifest number:          89
Signing time:             Wed 21 Oct 2026 10:03:00 +0000
Manifest this update:     Wed 21 Oct 2026 09:58:00 +0000
Manifest next update:     Sat 24 Oct 2026 17:35:00 +0000
Files and hashes:         1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: RDvvDeT8SDd+ULr8MDE8kiJl0BgUC2cibQIRao3uxt4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9c:f8:f8:6f:cd:4b:12:92:8f:e8:6f:d6:f2:e3:1d:3e:44:09:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
        Validity
            Not Before: Oct 21 09:58:00 2026 GMT
            Not After : Oct 24 17:35:00 2026 GMT
        Subject: CN=2DCD895786C4C81CE7EF9CDF6712E46EE6864A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:74:ed:90:42:85:9c:42:04:47:bc:63:ec:
                    1e:27:30:fd:a4:da:28:49:2c:1a:f2:9d:4d:1c:f3:
                    a0:1e:ad:e6:df:88:20:29:14:a4:17:f6:8e:41:1c:
                    b0:c2:42:bc:09:ce:4c:80:40:29:a0:f3:7b:cf:24:
                    e3:75:9e:8b:37:18:18:29:d2:7d:6a:cb:4b:d2:a2:
                    5f:b4:06:4e:39:cd:9f:d8:4a:ba:d6:6d:5c:89:6d:
                    2a:59:01:26:fd:4a:a7:60:2e:c0:40:09:b3:65:b6:
                    5e:1e:35:86:44:25:d9:52:fe:ce:91:a8:c4:8a:d1:
                    e8:d6:2e:7d:78:0e:f8:dc:4e:4a:76:04:ee:41:54:
                    8d:e1:ab:d2:87:dd:70:fa:ed:08:a2:57:9a:bd:a9:
                    2c:a8:28:c7:73:35:69:b1:62:c2:e1:47:6e:0a:e6:
                    f2:73:b4:b1:35:27:ad:51:ac:d1:49:b8:b7:25:70:
                    6c:aa:08:d8:f8:0d:e9:ed:34:49:6d:d8:69:82:15:
                    21:a6:9f:06:cd:cd:88:f4:7a:df:f9:a8:22:30:38:
                    f7:7f:47:c4:9b:e7:6a:aa:d0:c2:81:49:79:28:01:
                    fc:4d:c4:5b:dd:80:da:07:0c:1e:57:f9:b0:83:aa:
                    f0:f2:49:21:53:8b:18:10:4d:24:5f:45:69:a8:89:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:89:57:86:C4:C8:1C:E7:EF:9C:DF:67:12:E4:6E:E6:86:4A:18
            X509v3 Authority Key Identifier:
                keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:02:8e:97:b5:ff:f3:7f:e2:6e:28:3e:9e:83:63:8b:c7:f0:
         59:c8:48:76:7e:5e:a6:29:23:e0:2c:9c:65:c3:83:e6:cd:2f:
         c7:80:f3:94:d2:b2:89:41:6a:8d:53:d5:21:fd:f7:32:d1:23:
         07:3c:90:88:45:f1:26:9d:0a:f7:8c:15:09:52:1e:43:63:f8:
         6f:db:eb:4e:eb:08:58:61:20:ea:ca:05:56:47:a8:39:12:a4:
         4f:7c:43:c7:85:00:3f:f6:be:76:e2:78:06:f1:df:75:a6:d8:
         30:a6:0e:60:2e:64:e8:1a:09:b0:88:fe:12:d6:b5:f6:43:35:
         63:b1:4e:f8:b5:7f:87:61:0b:30:e8:14:19:2b:a2:41:7f:2c:
         9b:bd:2b:bd:ca:99:63:da:53:37:a2:59:64:bd:ba:4c:7e:e1:
         46:d8:3e:36:b9:f7:92:27:20:c5:f4:e1:a2:91:4a:d1:ff:02:
         a1:72:56:c9:d4:5d:9a:8f:6d:00:78:8b:96:f5:4a:14:c8:6a:
         92:fc:0d:87:b9:8b:c1:93:9b:ce:a7:1d:14:4c:05:1f:d4:d3:
         00:75:04:80:95:05:e0:75:45:6d:91:92:94:04:31:49:8b:58:
         66:f3:7f:c7:96:7f:2b:21:cc:f1:9e:9e:64:86:85:64:cc:70:
         17:d8:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----