Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File:                     5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier:          5QWruXBgnF7uh3hv3ZM4+bCtS7RSknkpdx6K89X4mCQ=
Subject key identifier:   65:11:B7:A3:C8:39:29:0E:92:FC:E1:08:2A:DB:46:62:DF:28:C5:9C
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer:       /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial:       28568EA8D11D75D6621061FBF7B06A83EBB971C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number:          75
Signing time:             Fri 04 Sep 2026 03:09:45 +0000
Manifest this update:     Fri 04 Sep 2026 03:04:45 +0000
Manifest next update:     Mon 07 Sep 2026 07:34:45 +0000
Files and hashes:         1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: ZSBUjce8e8d70FngY3iw1wQKG6qQiXaS46jRRSlAJAU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:56:8e:a8:d1:1d:75:d6:62:10:61:fb:f7:b0:6a:83:eb:b9:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
        Validity
            Not Before: Sep  4 03:04:45 2026 GMT
            Not After : Sep  7 07:34:45 2026 GMT
        Subject: CN=6511B7A3C839290E92FCE1082ADB4662DF28C59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:6c:98:75:f9:ce:2e:a7:a5:76:32:f4:d6:
                    0c:6d:a0:5b:5f:77:2c:07:b7:db:f7:df:ab:58:25:
                    49:07:7c:c9:e7:d7:db:00:71:ac:76:ec:6f:39:3c:
                    b5:aa:75:37:27:6a:26:f8:ed:d9:1e:d5:e4:a9:be:
                    5b:03:86:72:02:e9:11:6e:e9:a1:0d:5b:48:9b:32:
                    07:36:97:8d:bf:3a:3b:a2:1c:b0:43:c7:39:77:2c:
                    eb:69:84:0f:85:55:91:b5:40:28:41:e4:ab:41:a9:
                    e8:dc:11:89:b8:7e:21:8b:be:fb:43:db:10:66:7f:
                    37:c7:2d:b1:e7:08:79:01:b8:c7:cd:4a:74:cd:c8:
                    9e:6d:70:35:a7:c9:6d:b5:e5:bb:ca:86:76:c4:76:
                    08:f7:21:8b:7c:ba:f7:1f:b3:7b:3d:d5:9d:65:c1:
                    8d:6d:7d:9a:d7:be:c0:75:ee:ed:8f:8c:f3:5c:d9:
                    44:3f:0e:40:2c:1a:7c:ed:1d:9b:d4:bf:d6:ca:4b:
                    7d:b8:85:17:4a:70:56:e8:ea:a4:9f:29:74:5c:40:
                    5b:c4:30:83:5b:73:8e:90:74:07:78:34:0c:4d:d4:
                    65:1a:cf:01:0d:cf:2b:91:13:26:38:ad:db:7e:8e:
                    41:e0:77:3e:01:ff:67:49:1e:b9:3f:cf:e3:2f:51:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:B7:A3:C8:39:29:0E:92:FC:E1:08:2A:DB:46:62:DF:28:C5:9C
            X509v3 Authority Key Identifier:
                keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fa:b6:dc:a0:f0:1c:c6:e9:e1:b3:92:e0:d0:73:63:5f:08:
         3d:b6:f4:88:68:ab:e3:1c:92:d7:b3:d9:5c:72:c6:3b:9a:c0:
         2a:a9:4e:9d:05:7c:9e:bc:17:6a:ca:be:8e:9a:62:e6:51:76:
         a6:17:e3:b3:9d:4d:ef:62:a3:b1:c9:4e:bf:93:56:90:ac:6b:
         f5:bf:7e:8b:07:92:1a:10:02:21:3a:2c:c4:d2:81:d7:6e:00:
         82:49:70:0b:d7:14:87:71:a6:bc:9d:c9:00:4c:19:d1:41:cb:
         2a:c8:98:5a:a9:cf:1a:e2:67:5b:70:ee:6d:5c:54:54:70:d4:
         d9:5e:23:c3:fb:8e:ce:29:08:1e:33:9e:eb:6c:5e:cb:05:c1:
         77:6b:d0:e1:4b:95:5b:ce:db:52:e2:50:96:32:e2:35:b2:56:
         fe:07:fb:2f:bb:df:b4:c7:41:f2:19:3b:f5:52:91:fb:60:7f:
         a9:1d:7a:26:87:a6:e1:84:2c:16:fe:b0:fd:c1:55:9c:67:a5:
         a2:32:d9:b9:56:50:98:62:71:cf:82:28:d5:ae:f2:42:6b:2b:
         b5:63:71:89:46:c9:38:7d:d6:7d:12:35:2e:fd:c0:50:8b:8c:
         c9:b3:a8:2a:c0:26:c3:9e:fa:c2:41:e9:47:bb:d4:12:2f:f3:
         2a:59:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:24 2026 by rpki-client