Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
File:                     F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json)
Hash identifier:          GgLsNc4ugd75DFM0CaGhxUVpCLJ1P3J2TUpqD/T83X0=
Subject key identifier:   6A:6F:1C:50:81:93:36:C2:FB:DB:34:0F:32:B7:B4:6E:00:1B:EC:D4
Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A
Certificate issuer:       /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
Certificate serial:       6BE809849EE0C056E124615E9FA2BCD1EE186D03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
Manifest number:          0127
Signing time:             Wed 14 Oct 2026 03:38:30 +0000
Manifest this update:     Wed 14 Oct 2026 03:33:30 +0000
Manifest next update:     Sat 17 Oct 2026 06:19:30 +0000
Files and hashes:         1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: CANpZoP/v3mvyJV2HWBtTf/ZKe2H1X5CXgPVkteckQY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 06:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e8:09:84:9e:e0:c0:56:e1:24:61:5e:9f:a2:bc:d1:ee:18:6d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
        Validity
            Not Before: Oct 14 03:33:30 2026 GMT
            Not After : Oct 17 06:19:30 2026 GMT
        Subject: CN=6A6F1C50819336C2FBDB340F32B7B46E001BECD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:6d:82:39:e5:b3:5f:ba:5f:3f:47:d8:b0:
                    f3:93:45:77:fa:4c:ec:63:40:ee:8f:f4:c4:6b:aa:
                    b7:07:31:ab:6d:00:68:d1:16:9e:b0:5c:df:57:56:
                    fb:3d:fd:b7:e8:0c:51:a1:0d:9c:19:88:d4:52:09:
                    1c:fc:0a:15:96:e5:bd:81:ab:bc:7b:fd:31:8b:be:
                    71:06:5c:3d:bd:6d:31:66:2f:2d:d3:04:81:99:bb:
                    2a:af:32:2d:f0:bb:04:1b:2c:f5:e8:ee:24:34:08:
                    b2:fc:de:af:8f:43:e9:61:ff:ad:d2:1f:b9:26:b3:
                    f0:0c:d9:92:3c:58:12:a0:d2:65:b1:f8:40:8b:67:
                    8a:16:a3:fe:a7:79:0a:dc:a6:5f:3d:f2:d0:ec:a8:
                    21:3e:9d:8d:c5:3f:01:c6:bf:c8:ff:36:f4:0e:13:
                    89:5b:64:46:ba:9a:7b:51:89:c2:73:2c:92:03:6b:
                    f1:b6:d3:5a:c3:fe:5c:74:56:05:ba:95:97:04:e6:
                    d6:6e:94:69:1c:cf:89:b9:b4:3a:1c:c3:5d:76:54:
                    9a:c4:d2:2f:00:f3:e0:d5:1a:34:05:f8:11:39:89:
                    9a:ed:2e:17:a3:22:1e:1f:d6:b3:d7:12:ad:d9:13:
                    24:f3:8b:14:47:2a:ef:c1:e7:dd:48:81:9c:20:77:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:1C:50:81:93:36:C2:FB:DB:34:0F:32:B7:B4:6E:00:1B:EC:D4
            X509v3 Authority Key Identifier:
                keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:95:05:07:19:6a:6c:c1:6d:8e:87:d4:f0:ca:19:16:6c:f5:
         9d:b0:b9:2c:f9:5a:f0:68:8d:8d:11:cb:7b:0d:b6:39:44:e9:
         4f:55:fe:9c:56:d6:a4:5b:09:51:61:3c:3b:4a:69:65:1c:d2:
         b5:a4:9c:e0:a6:41:e2:32:3d:6b:5a:8d:73:e5:36:94:e7:7d:
         90:2a:b1:f2:e6:f7:21:19:20:00:d6:74:56:c1:0a:51:b4:37:
         d1:16:05:60:f4:37:f1:9d:97:8f:b4:7d:9b:6c:9e:48:8e:a3:
         06:45:f0:4f:80:62:0a:6b:7d:4d:93:ad:d0:2e:8a:00:4e:be:
         b0:ee:09:b0:b1:24:77:ac:11:b4:83:b5:5b:1e:d3:ed:cd:ea:
         05:a6:c8:3b:9d:08:25:2b:cc:65:a8:5f:19:a3:e2:64:ec:9b:
         da:a2:48:8f:bc:e8:1a:bf:ec:68:e5:70:c7:eb:ae:eb:c9:28:
         e4:7f:71:57:3a:2d:98:c8:f2:09:eb:33:04:db:ad:cb:9f:23:
         ed:d8:0e:75:8e:e8:af:10:7a:45:eb:ae:88:11:02:82:93:b5:
         e4:3a:22:73:1e:f4:29:cf:71:39:54:bf:ca:48:03:be:b5:0b:
         55:77:7f:03:20:37:cd:12:cf:52:e0:57:3a:b1:44:ef:a2:ca:
         bf:9a:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:11 2026 by rpki-client