Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
File:                     58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json)
Hash identifier:          qnGc21WgD8/77RkRhVWuvkA+203hggeXYPAFG0LDKqc=
Subject key identifier:   C7:5D:31:B6:A9:2F:B9:6B:42:39:60:23:AA:C7:54:8A:1B:E9:A2:13
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Certificate issuer:       /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial:       5453A9AB1991195D3A00652A46152ED9493FFB9B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 19:44:48 +0000
Manifest this update:     Fri 17 Apr 2026 19:39:48 +0000
Manifest next update:     Sat 18 Apr 2026 21:56:48 +0000
Files and hashes:         1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: f4MO1T2XXYyMhvBUUutifztdV3niiIOQlM+H63c77GY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:53:a9:ab:19:91:19:5d:3a:00:65:2a:46:15:2e:d9:49:3f:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
        Validity
            Not Before: Apr 17 19:39:48 2026 GMT
            Not After : Apr 18 21:56:48 2026 GMT
        Subject: CN=C75D31B6A92FB96B42396023AAC7548A1BE9A213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:72:74:d2:5f:9e:39:d2:a5:d9:46:37:e7:
                    97:e5:c1:3d:c3:68:44:b5:2e:b3:d1:25:ae:18:b5:
                    ed:7d:e9:dc:3f:f1:e4:4b:fd:17:8c:3b:53:fc:a9:
                    7f:e2:50:17:d2:68:c1:6f:e1:3e:43:f7:3c:be:73:
                    c4:b3:bb:68:95:2e:8b:9d:86:ff:b9:70:b0:35:0c:
                    8c:7f:9f:94:15:61:f3:70:ed:70:19:87:47:78:fb:
                    c0:36:1b:48:17:33:08:7a:ae:5f:dc:16:38:40:d7:
                    75:45:7b:73:a4:73:b4:eb:b2:d8:c8:33:a7:ee:78:
                    09:cf:85:0a:2c:60:48:5b:5a:5a:2f:66:19:b9:b6:
                    fc:f2:1e:4a:8f:1e:0e:67:f4:4b:6d:d5:5c:2f:85:
                    c6:c2:64:54:95:24:c5:53:b9:01:b0:83:14:d2:c3:
                    d1:42:b5:cd:36:59:28:72:68:59:98:4f:de:97:79:
                    28:90:54:98:74:9f:19:4c:92:c0:1e:ec:6e:33:f9:
                    8d:68:08:1f:ce:f7:91:94:75:9b:90:9d:bb:d1:4c:
                    36:98:aa:b6:f8:67:01:48:8f:1f:2f:70:1b:2b:9e:
                    27:46:2d:e4:fe:ff:92:0b:d3:51:6b:05:51:99:95:
                    34:77:ce:0c:46:37:37:e7:44:8f:3d:fe:5e:92:b7:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5D:31:B6:A9:2F:B9:6B:42:39:60:23:AA:C7:54:8A:1B:E9:A2:13
            X509v3 Authority Key Identifier:
                keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:07:b2:34:fd:ec:1f:34:cb:fd:c4:b6:a7:86:41:6b:94:
         d7:a9:fa:5a:1a:0c:1e:af:e7:ad:b8:ae:c5:8c:a9:09:c8:7b:
         73:e8:cc:a4:da:ad:c1:1e:f3:fa:f3:02:09:63:36:27:c5:28:
         9c:f8:0b:64:69:df:18:34:40:2c:ba:d8:5b:18:31:5d:7e:50:
         2d:02:73:07:33:3e:6d:f3:87:ab:93:4d:30:eb:eb:23:85:80:
         30:b1:6d:2a:c8:b3:9d:3f:9e:dc:db:63:7f:83:e2:62:2b:be:
         ec:c9:51:48:81:43:8c:05:bd:a1:28:51:89:f5:e6:52:2a:cf:
         05:7c:eb:77:5f:08:6e:0a:b9:20:e9:73:ca:5f:e5:8b:11:4f:
         73:d6:51:38:23:f8:0a:cd:15:af:41:03:eb:41:1e:6b:e3:57:
         35:d0:86:39:ae:6a:ef:19:3b:60:7d:f9:db:2e:44:66:7f:41:
         5f:76:64:da:af:d8:ee:81:e2:a5:63:9b:a7:68:b1:ae:cd:f7:
         b3:5d:91:3e:81:d8:4a:84:ae:08:59:2f:d5:b9:4c:aa:d6:86:
         44:5c:68:f5:1a:aa:e7:58:0b:41:38:12:44:b6:83:52:03:9d:
         ee:52:67:ee:ae:1c:ca:20:17:86:79:55:b8:e9:79:ae:1f:4e:
         b3:6b:fd:81
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVFOpqxmRGV06AGUqRhUu2Uk/+5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2
RDU4OUIzOTAeFw0yNjA0MTcxOTM5NDhaFw0yNjA0MTgyMTU2NDhaMDMxMTAvBgNV
BAMTKEM3NUQzMUI2QTkyRkI5NkI0MjM5NjAyM0FBQzc1NDhBMUJFOUEyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKenJ00l+eOdKl2UY355flwT3D
aES1LrPRJa4Yte196dw/8eRL/ReMO1P8qX/iUBfSaMFv4T5D9zy+c8Szu2iVLoud
hv+5cLA1DIx/n5QVYfNw7XAZh0d4+8A2G0gXMwh6rl/cFjhA13VFe3Okc7TrstjI
M6fueAnPhQosYEhbWlovZhm5tvzyHkqPHg5n9Ett1VwvhcbCZFSVJMVTuQGwgxTS
w9FCtc02WShyaFmYT96XeSiQVJh0nxlMksAe7G4z+Y1oCB/O95GUdZuQnbvRTDaY
qrb4ZwFIjx8vcBsrnidGLeT+/5IL01FrBVGZlTR3zgxGNzfnRI89/l6St6URAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUx10xtqkvuWtCOWAjqsdUihvpohMwHwYDVR0j
BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD
QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy
MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIwHsjT97B80
y/3EtqeGQWuU16n6WhoMHq/nrbiuxYypCch7c+jMpNqtwR7z+vMCCWM2J8UonPgL
ZGnfGDRALLrYWxgxXX5QLQJzBzM+bfOHq5NNMOvrI4WAMLFtKsiznT+e3Ntjf4Pi
Yiu+7MlRSIFDjAW9oShRifXmUirPBXzrd18Ibgq5IOlzyl/lixFPc9ZROCP4Cs0V
r0ED60Eea+NXNdCGOa5q7xk7YH352y5EZn9BX3Zk2q/Y7oHipWObp2ixrs33s12R
PoHYSoSuCFkv1blMqtaGRFxo9Rqq51gLQTgSRLaDUgOd7lJn7q4cyiAXhnlVuOl5
rh9Os2v9gQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:32:19 2026 by rpki-client