Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
File:                     E31DF68687AB9050D1CF11727D6D9D126E30704C.mft (raw, json)
Hash identifier:          JKoNX1MWHydStUGadbpYXP24V1sedH8gLgMY8gRUWwo=
Subject key identifier:   6C:1C:0C:AC:04:22:4D:F6:B7:6D:8F:DA:8C:7A:F7:08:D4:26:38:79
Authority key identifier: E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
Certificate issuer:       /CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
Certificate serial:       6B8655B23C83602AA45D573FFA51AF67D897F784
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
Manifest number:          30
Signing time:             Fri 28 Aug 2026 06:47:45 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:45 +0000
Manifest next update:     Mon 31 Aug 2026 11:19:45 +0000
Files and hashes:         1: E31DF68687AB9050D1CF11727D6D9D126E30704C.crl (hash: DROSt374H/B59Mgjd5JHmgaW9k0/bPaRFHmJypJWQwc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 11:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:86:55:b2:3c:83:60:2a:a4:5d:57:3f:fa:51:af:67:d8:97:f7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
        Validity
            Not Before: Aug 28 06:42:45 2026 GMT
            Not After : Aug 31 11:19:45 2026 GMT
        Subject: CN=6C1C0CAC04224DF6B76D8FDA8C7AF708D4263879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:84:06:2f:6a:10:b5:a5:c5:74:ce:05:0e:
                    9e:af:d2:70:b1:b1:e6:f2:2b:40:5b:b8:2e:28:36:
                    04:7b:ae:78:48:ac:50:90:36:2a:b0:bf:9a:97:62:
                    10:78:fc:d1:97:eb:6c:8e:0a:3c:bc:3f:50:ca:2e:
                    19:d6:6f:31:1f:75:ca:66:8d:dc:37:ff:b0:3b:de:
                    54:29:93:c1:0b:8a:6e:97:14:61:ce:72:ff:94:aa:
                    f6:32:52:d3:9f:b9:a5:36:ef:05:d3:5f:29:38:f1:
                    dd:94:d4:ec:1e:6e:4c:88:ec:0b:eb:d4:70:5b:bb:
                    75:2c:8e:23:43:db:8f:ae:c8:7a:9d:5a:46:92:6f:
                    27:8c:98:41:ee:8a:37:39:b2:f2:d8:26:0e:9d:ec:
                    c8:b2:91:f1:db:44:1c:90:05:43:79:dd:30:17:9e:
                    aa:e2:eb:18:2e:da:71:7e:c4:34:5c:51:ef:97:d1:
                    c6:d5:51:a4:10:d4:73:9d:aa:32:d4:a4:a5:c7:0c:
                    0f:8f:15:e9:f3:d1:d1:7a:04:b4:27:08:63:3d:aa:
                    3f:1a:06:8d:70:6b:4b:a2:67:c4:07:a6:04:39:a9:
                    3b:04:e4:91:52:3f:53:80:b2:a6:4c:f5:8a:3d:8f:
                    0b:ad:16:78:61:33:69:98:53:a0:f6:95:8f:e7:eb:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1C:0C:AC:04:22:4D:F6:B7:6D:8F:DA:8C:7A:F7:08:D4:26:38:79
            X509v3 Authority Key Identifier:
                keyid:E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:9d:f6:05:f7:75:3d:41:6e:f7:6b:3a:02:d0:1a:88:87:
         48:04:46:13:d0:e0:d1:57:a1:5b:9e:f4:08:86:47:50:aa:37:
         d4:0f:d1:21:7d:80:ed:e9:d3:56:a3:46:b9:c4:a8:b0:f2:d0:
         ca:9a:8b:9a:05:29:67:63:db:d4:24:e2:49:d4:1e:90:75:d7:
         99:17:8f:47:aa:4d:53:1f:d0:af:74:be:76:b3:96:ab:c8:9c:
         29:62:62:1b:46:66:a4:2c:73:a3:7c:1b:ec:b4:2f:0b:51:f3:
         f2:2f:f4:e8:98:d9:8e:56:7e:eb:89:8b:d7:96:81:6f:c0:0d:
         d8:98:57:0b:3e:b6:b3:97:04:ed:cc:48:5a:ea:3d:c8:74:05:
         f8:6c:a7:3c:6b:97:27:f9:01:12:e0:ea:a2:92:5b:9e:b4:49:
         34:8d:7f:16:f3:a3:b7:4e:db:f1:ac:f6:a6:f6:ce:35:da:ae:
         19:61:df:60:0b:ff:87:ce:e0:67:15:15:eb:e3:eb:f9:11:2a:
         6d:10:b6:87:79:73:c9:7a:75:c6:f9:52:4a:92:93:ec:05:c6:
         29:67:1e:33:cc:a5:a5:75:4e:8f:63:db:3c:5c:40:c8:87:37:
         3c:27:67:a3:e9:70:cf:15:bb:16:c0:c4:e0:c0:d3:09:ea:57:
         d6:2d:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:52 2026 by rpki-client