Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
File:                     185BC8F795FC60E163D641A01BAA510BF953C375.mft (raw, json)
Hash identifier:          en/28XxsGGmWx1wmWxp8DO/8JzFGb/EmqMLg1xpPCW8=
Subject key identifier:   75:C1:1D:96:64:95:AD:E1:63:26:74:12:BE:27:15:E0:60:A7:08:94
Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
Certificate issuer:       /CN=185BC8F795FC60E163D641A01BAA510BF953C375
Certificate serial:       40A4F331E79A776C51EF515BF60BE49166298F51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
Manifest number:          28
Signing time:             Fri 28 Aug 2026 06:47:53 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:53 +0000
Manifest next update:     Mon 31 Aug 2026 14:51:53 +0000
Files and hashes:         1: 185BC8F795FC60E163D641A01BAA510BF953C375.crl (hash: Knoi2Sk/7y9tDIAUYWKOpV7NjPwFgUqXhuUglDVHyeE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 14:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:f3:31:e7:9a:77:6c:51:ef:51:5b:f6:0b:e4:91:66:29:8f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375
        Validity
            Not Before: Aug 28 06:42:53 2026 GMT
            Not After : Aug 31 14:51:53 2026 GMT
        Subject: CN=75C11D966495ADE163267412BE2715E060A70894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:8c:61:2c:dd:9f:fd:f4:78:25:4f:92:8c:
                    79:1b:ab:01:95:c2:af:7f:d4:49:d8:d1:fe:44:d4:
                    9c:d8:bd:ba:7c:0c:21:a1:3c:a7:ed:6c:66:27:89:
                    82:8d:61:73:0b:71:42:03:23:e6:99:2b:16:47:cc:
                    f2:60:5d:f7:8e:8b:5a:b7:75:35:1c:d3:11:a1:ab:
                    f3:e5:a1:b0:db:bf:a8:a8:10:3b:8d:24:75:10:81:
                    4e:90:18:0e:95:9b:8b:64:23:5d:22:47:51:75:90:
                    c3:0d:e9:96:02:fd:44:89:88:a7:86:4c:37:ae:a0:
                    eb:6a:4d:6b:8d:8c:77:9f:41:f3:28:48:f4:e8:c0:
                    f8:87:58:4d:c1:fa:18:e6:81:c0:12:d1:0a:88:59:
                    df:8a:f8:da:8e:26:2b:56:df:57:25:f9:a5:c4:98:
                    0a:61:67:17:29:41:2f:15:8e:82:4e:22:24:83:c4:
                    ec:96:ed:ea:de:2c:40:23:80:74:b5:07:82:84:04:
                    1a:94:32:14:e3:f7:a6:dd:3f:f6:2c:92:b6:2a:b2:
                    91:c6:e6:46:b1:6a:c4:34:0c:ce:2b:41:24:1e:dc:
                    e3:b8:21:c1:5e:91:6f:54:2f:83:2c:0d:6c:7b:89:
                    6f:4a:ff:30:73:d4:09:6c:3a:d0:1b:1a:a9:4e:be:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:1D:96:64:95:AD:E1:63:26:74:12:BE:27:15:E0:60:A7:08:94
            X509v3 Authority Key Identifier:
                keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:eb:5b:10:93:59:43:5d:87:d5:ab:fb:bc:0e:79:07:04:30:
         69:cb:7b:ef:31:64:41:cd:16:a4:0a:f2:6b:f7:aa:83:7e:0b:
         3d:89:fc:17:bd:0f:8a:df:05:8a:55:31:40:d4:74:9d:88:f7:
         96:1d:d1:b2:78:d1:f8:cd:b2:e8:3f:61:de:3f:b0:46:a1:21:
         cf:c8:2b:27:a5:58:4d:eb:29:dd:e4:b1:3f:76:15:ab:41:8f:
         6d:0e:d3:a1:2b:c8:92:15:99:1f:80:a1:0c:5f:11:18:60:0b:
         87:b1:7d:95:e9:30:e7:54:fb:88:b3:43:94:3a:ca:24:bb:55:
         2d:74:b0:66:74:34:f5:a5:3f:96:a5:c8:ee:c7:08:6a:fd:3f:
         8c:37:d4:90:92:90:ce:48:40:be:e5:d5:40:0d:e2:c6:ac:c9:
         fa:19:35:ef:5a:25:a2:60:4d:aa:de:e6:fd:29:01:a6:50:f7:
         4d:cc:8a:e9:49:3c:a8:6c:c9:ed:6f:9b:97:87:65:78:f3:23:
         eb:f0:4e:d7:a8:05:46:07:75:8e:ea:8e:e1:c6:bc:df:c5:e4:
         47:de:aa:26:b5:dd:cd:e2:f4:da:97:65:e7:73:c2:14:84:7e:
         70:40:3d:e2:b6:55:1c:8b:b2:b7:c3:51:68:50:3e:6a:06:d4:
         31:f8:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:53 2026 by rpki-client