Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
File:                     C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft (raw, json)
Hash identifier:          VZ8g0/rklHadXBTxcZwWL6+cRnVE2WzYUQjMcCi3LK0=
Subject key identifier:   F3:E3:C9:7F:21:57:70:0F:B3:06:02:5A:4E:F5:0B:3D:58:2D:B6:32
Authority key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B
Certificate issuer:       /CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B
Certificate serial:       0F35AED97E22319451EE813AD41B18F14D20BCC1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
Manifest number:          7E
Signing time:             Mon 12 Oct 2026 11:41:55 +0000
Manifest this update:     Mon 12 Oct 2026 11:36:55 +0000
Manifest next update:     Thu 15 Oct 2026 16:55:55 +0000
Files and hashes:         1: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl (hash: S1UEcQ1uqsJCTQVesnNutBXaz2poWfEyW1zRCbFMl8Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:ae:d9:7e:22:31:94:51:ee:81:3a:d4:1b:18:f1:4d:20:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B
        Validity
            Not Before: Oct 12 11:36:55 2026 GMT
            Not After : Oct 15 16:55:55 2026 GMT
        Subject: CN=F3E3C97F2157700FB306025A4EF50B3D582DB632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:3d:5e:97:60:12:d1:8f:e9:59:48:6f:e4:
                    1f:0b:3a:fd:26:ef:5f:f9:23:ca:f6:88:f2:a7:d9:
                    8e:98:1a:81:0f:8d:94:75:40:44:b8:bb:73:0a:62:
                    d8:aa:67:28:b4:9b:6b:68:cb:f4:10:c2:4b:5e:6c:
                    6f:67:d0:65:c6:6f:c5:66:c1:da:a0:e9:c6:53:08:
                    9a:a4:6f:49:f8:dd:15:fc:ef:85:d7:93:25:6e:bc:
                    10:ce:72:31:db:cd:ab:3f:78:cb:c1:d4:16:c5:86:
                    e8:1a:94:c3:7a:3b:60:02:d6:0a:3d:88:a6:ec:df:
                    39:ec:86:40:0e:53:17:6e:a1:6d:97:39:71:a0:6a:
                    8d:8b:ca:45:95:c6:c2:37:a1:6a:cf:1d:76:b0:0e:
                    5c:2f:50:be:0c:fb:ba:4c:b1:d7:7c:80:4b:7c:d5:
                    43:2b:b2:98:37:de:d7:94:81:4c:55:77:a3:2a:2f:
                    e7:1f:31:2f:90:59:70:ca:ca:ea:46:9b:e9:38:66:
                    03:02:40:dd:e4:a5:3e:bf:0e:76:70:06:ca:ec:1e:
                    54:cd:91:58:99:de:5b:c6:10:6b:c2:18:21:76:81:
                    d7:af:a6:e1:c5:ba:4e:a3:78:b0:57:ff:1c:ba:ef:
                    0f:8d:3c:19:96:67:7a:15:31:aa:bf:18:52:ae:65:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:C9:7F:21:57:70:0F:B3:06:02:5A:4E:F5:0B:3D:58:2D:B6:32
            X509v3 Authority Key Identifier:
                keyid:C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:70:44:c6:da:af:d9:b1:8f:7c:e9:3e:85:55:4c:71:7f:
         0a:ff:d2:7d:48:3e:d4:39:93:d8:01:b5:2d:d6:3e:f3:ba:19:
         4d:15:8f:c7:c5:e8:0a:79:44:fc:c0:b0:af:cd:a1:d4:09:30:
         4f:6b:df:aa:ea:2a:bf:26:e7:a3:02:6e:58:e6:02:59:31:ba:
         61:7e:49:c9:bf:8c:98:b1:b3:fe:1e:b0:93:56:91:9b:46:f4:
         fa:96:85:b1:32:f8:49:b3:4d:32:ab:f7:d6:ec:b0:22:b4:de:
         64:84:90:14:be:a5:36:d6:46:be:a2:a2:68:5f:41:b4:f0:a1:
         c7:ad:65:d0:24:23:b5:46:5e:41:ab:ee:bf:30:af:2a:bf:cd:
         01:be:7d:8c:5d:28:7e:f2:c8:7e:60:5c:17:75:be:b2:ff:cf:
         98:dd:c5:39:b2:9e:9f:02:4d:5f:a9:a3:9a:10:dd:9b:f9:9d:
         21:00:ca:e6:22:bc:0d:3c:88:e2:59:6d:cc:a2:7e:03:ea:5f:
         fd:88:8b:64:3d:b4:a5:b1:f9:67:8b:da:1c:1c:57:d5:53:55:
         47:09:96:8b:4a:3d:60:cb:b2:b1:8e:2d:aa:46:51:a6:3c:7e:
         63:85:43:0e:29:df:5a:5d:4b:25:4c:c2:67:9d:5d:c3:19:85:
         38:16:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:52:53 2026 by rpki-client