Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
File:                     315716FC30019F539EC77C931D00EAAABC7835C2.mft (raw, json)
Hash identifier:          9xfujsHZ7kruEPnlZLgIt+wwT02QifS40J+mzURW5A8=
Subject key identifier:   25:C7:D3:51:06:D3:33:BF:91:17:E1:53:98:28:AA:38:4D:9D:31:71
Authority key identifier: 31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2
Certificate issuer:       /CN=315716FC30019F539EC77C931D00EAAABC7835C2
Certificate serial:       26B9ED768F5D44FB74F5624A2E8560F11053DD56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
Manifest number:          1D
Signing time:             Thu 03 Sep 2026 20:19:03 +0000
Manifest this update:     Thu 03 Sep 2026 20:14:03 +0000
Manifest next update:     Mon 07 Sep 2026 07:47:03 +0000
Files and hashes:         1: 315716FC30019F539EC77C931D00EAAABC7835C2.crl (hash: 3W4u0rDM7dyYJjwoROW6JnwE7vmNcQlyKDV7bP4D/nM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b9:ed:76:8f:5d:44:fb:74:f5:62:4a:2e:85:60:f1:10:53:dd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315716FC30019F539EC77C931D00EAAABC7835C2
        Validity
            Not Before: Sep  3 20:14:03 2026 GMT
            Not After : Sep  7 07:47:03 2026 GMT
        Subject: CN=25C7D35106D333BF9117E1539828AA384D9D3171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:2d:a2:5f:19:71:f4:17:04:81:14:98:49:
                    55:a4:7e:7d:1e:cb:cc:0c:b7:a5:ab:5e:2e:a6:75:
                    0c:64:15:94:8d:ff:5c:85:e9:9f:25:0e:60:a6:ed:
                    70:ad:6e:cb:32:db:1f:ae:2f:2f:d8:e0:34:7d:94:
                    99:54:c9:87:e5:50:13:c2:b6:4d:a2:6c:e8:7e:eb:
                    22:c7:ad:7e:03:fa:dd:99:6a:07:d0:7f:65:ef:bc:
                    33:b0:d2:4e:fe:0e:3b:6e:19:2a:d6:82:5d:7d:7b:
                    d2:6c:0d:51:f8:2c:22:df:80:d3:da:8a:5c:94:91:
                    3a:1d:eb:00:ef:0c:a9:4d:da:43:e9:9e:3c:79:63:
                    e0:c8:b4:43:2c:7a:d9:be:a2:c7:c3:7c:7a:fa:81:
                    a9:0b:05:9e:72:bf:6b:3b:99:18:4d:d7:d0:6e:db:
                    df:a8:f0:fb:1c:5a:cc:20:bd:aa:b3:84:d5:0d:77:
                    91:1d:ab:eb:2e:c4:20:d0:5e:a2:32:d3:4e:f2:31:
                    22:cb:9f:7a:5f:b0:d6:97:62:6a:a0:60:c9:c3:d5:
                    fe:f0:14:e2:3a:6f:3a:4b:41:14:df:93:11:d8:5e:
                    99:cc:cc:80:f2:db:38:52:f2:f3:1c:bd:9e:a8:cc:
                    17:22:96:7f:bd:1c:2b:e5:ac:31:e1:d0:3a:e2:08:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:D3:51:06:D3:33:BF:91:17:E1:53:98:28:AA:38:4D:9D:31:71
            X509v3 Authority Key Identifier:
                keyid:31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:f4:bd:83:32:dd:9d:c8:34:66:fe:df:24:66:a4:bc:d8:
         e3:b5:f9:bc:93:9c:d7:75:16:65:05:15:19:4a:1f:da:71:d5:
         05:f9:06:63:31:2d:f1:1b:cd:71:ca:38:64:65:86:cf:6b:94:
         80:09:fc:72:6b:6d:2f:7a:66:61:14:c8:d8:7e:44:63:18:d5:
         0a:1e:fa:65:52:22:eb:90:fe:5f:a2:af:a1:b2:74:83:b1:44:
         40:3e:62:e0:cd:05:a6:03:3e:d0:3c:4b:8b:d4:28:81:3e:ef:
         a5:11:ca:73:17:d2:94:2d:4e:ca:1c:85:78:d3:7e:6d:81:a6:
         93:39:37:b3:65:a8:47:05:51:4d:57:a0:16:4b:fa:d3:8b:db:
         03:93:32:2f:3a:12:4e:ec:95:42:4f:aa:26:36:6a:1c:af:d1:
         b0:6b:89:d2:05:c2:e8:a7:df:5a:eb:f1:5a:5a:cf:a3:07:50:
         89:4c:e6:ed:51:6e:39:7f:c5:dc:4f:a8:92:3b:a0:87:52:71:
         e5:28:17:44:91:f2:8d:96:9f:ac:15:6d:a0:c1:09:02:21:73:
         ad:2b:44:8b:9e:3c:29:72:9a:ed:f9:92:96:f4:b5:ec:3e:c6:
         61:59:a6:3d:9f:4b:8f:b5:0e:c5:ca:48:70:ec:42:e0:be:1e:
         62:7b:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:27 2026 by rpki-client