Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File:                     5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier:          y7c/aNXniE+VDx7Lo9z0Z2jtZmeAa0bQi0D8M6Hds9c=
Subject key identifier:   E6:71:11:D3:04:85:F7:37:2B:05:E3:FE:5D:2B:50:6D:3F:C0:DA:79
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer:       /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial:       29230CEB47F6D6EE26AC75EFB248686A6B649300
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number:          8C
Signing time:             Mon 26 Oct 2026 02:38:21 +0000
Manifest this update:     Mon 26 Oct 2026 02:33:21 +0000
Manifest next update:     Thu 29 Oct 2026 13:35:21 +0000
Files and hashes:         1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: AO32isvuvljokN1QUitVGq5ZGKNt4FUK9jJeP3ltoKI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 13:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:23:0c:eb:47:f6:d6:ee:26:ac:75:ef:b2:48:68:6a:6b:64:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
        Validity
            Not Before: Oct 26 02:33:21 2026 GMT
            Not After : Oct 29 13:35:21 2026 GMT
        Subject: CN=E67111D30485F7372B05E3FE5D2B506D3FC0DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:f6:e4:b8:dd:b4:f6:bb:a5:bc:4f:05:32:
                    9d:1b:56:d3:56:d1:f0:9b:b9:02:f9:a3:f1:77:0b:
                    f0:d5:f8:87:75:92:e8:d8:dc:c3:18:8b:ba:d4:a1:
                    1e:c0:64:27:28:7a:1c:0c:4b:f6:0e:59:0e:2e:e0:
                    af:c2:18:3c:82:19:2a:00:66:05:5f:5a:f7:30:5e:
                    6d:da:e8:55:4e:ce:d9:8a:47:4b:cb:bf:d2:8b:b9:
                    7c:c2:28:a7:ba:33:e2:55:e2:77:7e:ae:3c:20:62:
                    64:50:e7:17:52:2b:4e:26:ae:c2:b3:5f:05:99:6c:
                    e0:74:1a:ad:0d:de:db:6e:0f:8e:77:f5:a0:ff:3e:
                    8f:d8:ee:46:45:d1:a5:31:f8:0f:ff:b6:7c:c6:cd:
                    42:53:29:a8:77:a5:64:7d:1f:98:de:c5:7e:1f:e1:
                    82:0a:5a:05:18:5c:96:43:93:62:45:20:63:e7:a3:
                    d7:12:3c:2f:70:35:40:1a:6d:7e:d7:f3:a5:5d:98:
                    83:b9:c7:e5:15:c0:fb:79:0d:6d:63:81:49:98:08:
                    2f:34:c1:ba:cc:16:e9:b0:f3:3d:2f:97:cd:9e:45:
                    a7:03:4e:e5:89:a4:2a:84:69:1f:b2:e3:0b:17:f2:
                    c0:06:af:7e:0a:17:a3:68:1a:5d:e5:9c:49:33:e9:
                    3d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:11:D3:04:85:F7:37:2B:05:E3:FE:5D:2B:50:6D:3F:C0:DA:79
            X509v3 Authority Key Identifier:
                keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:35:f4:a3:46:fc:d7:2e:cb:97:60:08:36:a6:1b:38:b9:a0:
         2a:5f:20:36:90:99:18:56:cd:f3:ca:69:c4:f4:81:27:c6:ba:
         00:0f:3f:95:c5:b6:36:a9:94:96:f7:ac:f9:61:fa:8c:0f:f4:
         af:72:72:01:f8:9d:61:f9:30:b4:a4:45:59:2e:82:46:94:83:
         ee:5e:6e:fe:a4:57:c1:14:1d:54:c8:2c:55:2f:fb:fd:12:01:
         25:99:68:3d:ec:6d:16:41:00:d3:81:a2:f3:15:29:3d:2d:b0:
         6d:36:7d:d0:57:8a:40:55:dc:8a:41:b9:ab:88:b1:8a:76:24:
         2d:2f:6f:f5:bf:03:56:b3:d8:86:9f:7b:b7:70:c3:38:33:e1:
         1d:7b:93:90:5c:b5:1d:8b:c8:91:39:3f:41:0b:06:9c:83:3a:
         e4:64:2a:56:1c:e0:2b:81:af:97:b8:90:d4:44:74:70:8f:bb:
         8e:bb:5c:cc:c1:a4:fa:a0:98:25:7a:c6:ca:c0:71:9a:79:e9:
         1e:be:c0:d3:b1:2c:62:cf:97:f6:34:99:49:f6:5a:7a:93:9b:
         f9:2e:98:f9:81:af:44:4f:1f:e9:ee:9d:22:c0:86:d9:17:3c:
         17:2b:9a:29:42:15:63:78:6f:77:9d:06:3f:1f:03:cd:77:49:
         21:d9:77:3e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKSMM60f21u4mrHXvskhoamtkkwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFG
QjQ0QTg4NTAeFw0yNjEwMjYwMjMzMjFaFw0yNjEwMjkxMzM1MjFaMDMxMTAvBgNV
BAMTKEU2NzExMUQzMDQ4NUY3MzcyQjA1RTNGRTVEMkI1MDZEM0ZDMERBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI0vbkuN209rulvE8FMp0bVtNW
0fCbuQL5o/F3C/DV+Id1kujY3MMYi7rUoR7AZCcoehwMS/YOWQ4u4K/CGDyCGSoA
ZgVfWvcwXm3a6FVOztmKR0vLv9KLuXzCKKe6M+JV4nd+rjwgYmRQ5xdSK04mrsKz
XwWZbOB0Gq0N3ttuD4539aD/Po/Y7kZF0aUx+A//tnzGzUJTKah3pWR9H5jexX4f
4YIKWgUYXJZDk2JFIGPno9cSPC9wNUAabX7X86VdmIO5x+UVwPt5DW1jgUmYCC80
wbrMFumw8z0vl82eRacDTuWJpCqEaR+y4wsX8sAGr34KF6NoGl3lnEkz6T3jAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU5nER0wSF9zcrBeP+XStQbT/A2nkwHwYDVR0j
BBgwFoAUWmESv3y+4V2owAqFVrd1WvtEqIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NjkxMDExMzA1MTkwMTk3Ny8xLzVBNjExMkJGN0NCRUUxNURBOEMwMEE4NTU2Qjc3
NTVBRkI0NEE4ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFGQjQ0QTg4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMS81QTYxMTJCRjdDQkVF
MTVEQThDMDBBODU1NkI3NzU1QUZCNDRBODg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1jX0o0b81y7L
l2AINqYbOLmgKl8gNpCZGFbN88ppxPSBJ8a6AA8/lcW2NqmUlves+WH6jA/0r3Jy
AfidYfkwtKRFWS6CRpSD7l5u/qRXwRQdVMgsVS/7/RIBJZloPextFkEA04Gi8xUp
PS2wbTZ90FeKQFXcikG5q4ixinYkLS9v9b8DVrPYhp97t3DDODPhHXuTkFy1HYvI
kTk/QQsGnIM65GQqVhzgK4Gvl7iQ1ER0cI+7jrtczMGk+qCYJXrGysBxmnnpHr7A
07EsYs+X9jSZSfZaepOb+S6Y+YGvRE8f6e6dIsCG2Rc8FyuaKUIVY3hvd50GPx8D
zXdJIdl3Pg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:03 2026 by rpki-client