Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File:                     8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier:          vDI8+SVa8J1uF62OW89COZ0+vnbby4HoCi9lNykyYPg=
Subject key identifier:   00:A4:EF:C9:3C:F9:D1:A3:BB:61:BE:95:74:62:C3:47:C1:8C:8C:8E
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer:       /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial:       27E36B520D875C7E7CDE38A10826FDA4CF21E465
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number:          010A
Signing time:             Mon 12 Oct 2026 23:02:32 +0000
Manifest this update:     Mon 12 Oct 2026 22:57:32 +0000
Manifest next update:     Fri 16 Oct 2026 07:43:32 +0000
Files and hashes:         1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: T3YFbNFSLH5b1dGRt6yrX880xsEonVZ05D9Tk+9TVXU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e3:6b:52:0d:87:5c:7e:7c:de:38:a1:08:26:fd:a4:cf:21:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
        Validity
            Not Before: Oct 12 22:57:32 2026 GMT
            Not After : Oct 16 07:43:32 2026 GMT
        Subject: CN=00A4EFC93CF9D1A3BB61BE957462C347C18C8C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:c0:29:88:ff:02:b1:e0:fe:43:24:16:7f:
                    4b:e5:e3:e5:cc:10:ea:a3:21:db:b9:df:e0:96:a3:
                    93:8d:05:00:ac:5b:cb:b8:1b:27:42:e6:1d:47:47:
                    df:22:d9:64:83:46:55:39:aa:7d:80:76:73:77:d9:
                    d7:fe:c0:54:de:af:9c:ed:ff:8c:88:70:9a:14:1c:
                    e5:ed:a1:c1:70:32:69:89:de:34:e5:26:1a:f0:56:
                    59:d5:c6:71:21:7c:83:1a:eb:43:d8:6f:6e:2f:f7:
                    89:4b:8a:b6:a9:22:7a:26:bf:11:6c:5c:ef:76:fb:
                    f0:e7:5e:25:7a:08:f7:7e:ab:e7:49:86:00:37:a8:
                    14:33:e0:a3:cc:4c:29:45:6f:46:1f:a1:00:5a:3c:
                    ad:a8:a0:6c:28:27:1d:36:17:64:d6:04:b0:e5:be:
                    21:34:4a:fa:c8:56:4b:02:fb:10:cf:62:53:7a:f9:
                    16:5f:47:ce:2b:7f:b9:9f:30:0f:3b:2e:5b:d9:86:
                    e3:85:b9:85:e9:0a:2e:d5:dd:d1:18:fa:cb:f9:3b:
                    10:0d:00:29:cb:52:9e:b7:81:26:c4:9a:42:b6:86:
                    f2:f7:68:84:88:3e:4a:2f:26:8f:eb:b1:1e:a6:ae:
                    96:43:ba:55:29:b0:0f:45:ff:e0:6e:14:f2:59:3b:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:EF:C9:3C:F9:D1:A3:BB:61:BE:95:74:62:C3:47:C1:8C:8C:8E
            X509v3 Authority Key Identifier:
                keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:1c:3f:89:96:4f:e8:8f:0c:00:00:e9:ed:be:75:f0:0b:
         86:73:bd:11:9a:5c:c9:a9:d0:f5:a2:c8:f0:26:31:d8:15:ae:
         ee:d7:0e:70:14:42:47:2e:21:6b:ea:0f:b3:9f:77:90:c4:13:
         28:43:e3:fb:8a:c4:ab:1f:53:5d:fe:de:2c:09:20:6d:c2:a2:
         6f:07:82:b1:f1:ca:5e:0a:59:aa:09:7b:c7:04:23:74:ed:c8:
         4f:c7:aa:ff:c0:ca:6f:ae:22:7e:65:3b:16:80:f5:8d:70:05:
         1c:72:cf:6c:a4:9a:0a:c9:01:18:7a:ed:ed:c9:ae:ab:0f:7c:
         e3:ba:8c:8e:90:28:13:f4:f1:b4:de:ae:c0:0e:40:87:63:d9:
         04:2a:a0:14:d0:c0:e7:1b:e4:d8:cf:f5:b0:38:e0:95:0f:6c:
         31:ae:54:e5:f0:3c:a7:62:ab:94:de:18:ad:60:26:f1:5a:3a:
         c6:71:f3:f8:1c:c6:7e:f3:f6:8d:b1:37:1f:99:9e:8e:0f:8a:
         49:b6:d6:a9:4e:d1:c7:c9:c0:28:a1:02:af:3a:e1:4d:a2:32:
         65:dd:b4:fd:da:0e:4f:90:df:72:b4:83:4a:cc:b4:23:c4:0a:
         a2:5b:26:d6:e8:9b:ff:e6:ea:0a:d9:fd:89:00:08:5c:1b:00:
         ed:7b:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----