Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
File:                     50296D63899E692A0BA1D29C54A95275354500E5.mft (raw, json)
Hash identifier:          2pkOgY5AHgljv91hYDaXPwZilvIkBq6WGxsQmfTfaII=
Subject key identifier:   F9:17:F2:5C:96:A9:7B:48:9D:8B:33:37:E4:94:00:B1:9B:76:E6:32
Authority key identifier: 50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5
Certificate issuer:       /CN=50296D63899E692A0BA1D29C54A95275354500E5
Certificate serial:       4DF1515A05B55A5907211612FB32666DA5258964
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
Manifest number:          21
Signing time:             Mon 12 Oct 2026 19:07:18 +0000
Manifest this update:     Mon 12 Oct 2026 19:02:18 +0000
Manifest next update:     Fri 16 Oct 2026 00:05:18 +0000
Files and hashes:         1: 50296D63899E692A0BA1D29C54A95275354500E5.crl (hash: rPs5GOJtyERuYRxbvMkG1yI7oembDJv5lyL5BGmNQ2Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:51:5a:05:b5:5a:59:07:21:16:12:fb:32:66:6d:a5:25:89:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50296D63899E692A0BA1D29C54A95275354500E5
        Validity
            Not Before: Oct 12 19:02:18 2026 GMT
            Not After : Oct 16 00:05:18 2026 GMT
        Subject: CN=F917F25C96A97B489D8B3337E49400B19B76E632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:a9:5a:9e:5e:95:47:dc:81:14:30:43:9f:
                    a9:43:9e:d8:ba:fa:59:3f:7f:01:7f:26:ec:7b:b0:
                    65:0c:35:3d:a1:96:e2:ab:56:45:f4:f0:48:0f:c9:
                    a2:35:47:43:ae:b0:30:9e:c8:0f:08:8e:aa:91:b7:
                    15:67:39:8d:23:a1:cf:7b:47:75:18:9e:26:0e:e5:
                    80:bc:09:55:ea:82:82:66:b5:3a:e8:10:cf:b2:e2:
                    0c:bc:ae:69:19:69:e6:af:62:70:95:a1:1c:18:84:
                    9f:3a:48:74:60:8c:2e:4a:d2:fb:10:a7:31:1c:16:
                    7b:0f:e7:1f:ac:32:1d:e6:32:71:93:6d:7c:43:05:
                    e0:07:8b:51:1d:19:ae:4a:00:37:b3:40:1b:b1:23:
                    fc:b2:25:b6:3e:c8:fd:f4:74:21:b0:5b:2c:8c:14:
                    81:48:a6:4b:ac:6e:ad:d6:28:a3:5b:87:58:f7:fb:
                    c8:b5:59:3f:ec:77:9f:74:b4:4a:9f:50:aa:32:0f:
                    95:68:94:5f:ac:74:28:bb:23:47:41:93:9c:3e:26:
                    86:42:8d:b0:d1:8f:9f:06:80:27:55:18:4f:06:b9:
                    2e:64:1c:a4:eb:5c:52:4f:33:ae:fe:ad:04:1b:7c:
                    20:1e:fc:07:73:59:4d:fc:d0:0c:8d:a9:9c:dc:ed:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:F2:5C:96:A9:7B:48:9D:8B:33:37:E4:94:00:B1:9B:76:E6:32
            X509v3 Authority Key Identifier:
                keyid:50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:62:34:8d:4b:9c:6f:1c:68:24:d4:b4:27:df:8c:6b:55:
         51:9b:b9:5f:5c:47:31:f5:b0:72:3f:89:1a:09:dc:70:2f:d9:
         75:31:42:c3:1a:19:0f:37:4a:b8:3a:d9:70:5b:3e:76:bb:23:
         88:29:32:f5:27:96:c5:d5:bc:20:08:43:cd:c4:5b:fc:83:3a:
         4e:46:64:4c:50:84:50:fa:d5:36:0b:4b:7d:36:2e:ab:3f:12:
         bf:cf:62:1b:05:84:97:c0:88:91:5c:63:38:2a:f5:d7:e9:5a:
         eb:2f:20:db:c1:57:99:77:15:2c:ec:a6:a9:2a:73:96:36:00:
         a8:f9:88:06:0b:ef:df:f2:cb:c6:dc:5f:3b:96:3e:65:ad:cf:
         97:e1:fe:30:54:0b:3b:66:ff:f9:e1:85:45:58:3d:40:dc:e4:
         65:09:64:56:ae:ae:40:ce:0e:87:70:31:b2:8f:8e:10:c6:6d:
         81:5c:a3:2d:3c:e6:92:6a:09:2e:a7:19:a7:6c:0e:fc:65:05:
         ad:97:b3:50:d6:7f:6e:04:a2:9e:2b:6b:b8:fa:54:7f:f9:0b:
         e6:6e:2d:02:fb:6d:57:be:51:ba:b5:2d:84:15:f4:e5:c6:11:
         04:23:1d:c1:84:9b:e8:4a:74:17:32:94:c6:cf:60:88:75:a0:
         2e:ac:66:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:34:51 2026 by rpki-client