Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
File:                     8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json)
Hash identifier:          +rLMXfiqzlaA7ItzED7OhP5B1cE1ahrSRE7eGflBXRw=
Subject key identifier:   FC:72:52:0C:6B:92:19:6D:D4:8F:86:2A:3E:A6:D0:9D:F7:27:AF:B4
Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
Certificate issuer:       /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Certificate serial:       2931698344A81D1BD19A8CEFF0809E5B10ECCFA5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
Manifest number:          A0
Signing time:             Wed 29 Jul 2026 11:34:16 +0000
Manifest this update:     Wed 29 Jul 2026 11:29:16 +0000
Manifest next update:     Thu 30 Jul 2026 14:32:16 +0000
Files and hashes:         1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: dvl/H2AJcpc5a3tomerVFVeEyXInk6E+hw/q5l4r31A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 14:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:69:83:44:a8:1d:1b:d1:9a:8c:ef:f0:80:9e:5b:10:ec:cf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
        Validity
            Not Before: Jul 29 11:29:16 2026 GMT
            Not After : Jul 30 14:32:16 2026 GMT
        Subject: CN=FC72520C6B92196DD48F862A3EA6D09DF727AFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:75:9e:7c:22:3d:f8:b4:c8:41:22:7b:44:
                    c7:f7:5f:d9:82:e8:f4:35:6a:5f:ad:54:b5:b1:23:
                    6e:44:39:a0:5c:0f:19:ed:44:7b:83:73:7b:d9:59:
                    ee:b0:ee:9b:07:b3:e9:58:76:24:fb:0b:79:05:c2:
                    b4:07:08:05:02:4b:36:6a:41:d5:9e:90:b2:b7:c9:
                    32:7f:49:3f:36:2d:05:d8:8f:09:90:e6:c8:35:28:
                    03:e7:6f:a7:db:8c:cd:2b:62:53:19:2f:00:15:a6:
                    02:39:ee:1d:16:a6:a4:16:5a:d4:97:13:66:3a:2a:
                    db:55:6a:7a:2c:11:71:43:44:ee:d8:ba:ba:ea:98:
                    16:12:03:62:56:7c:8b:24:c1:70:e1:ba:af:3e:3e:
                    e2:47:de:3f:c3:ae:5b:68:8a:59:ed:83:42:6f:88:
                    65:b5:78:5f:0c:68:62:69:e0:4f:23:da:23:f4:65:
                    5a:e3:fc:94:88:04:62:d2:53:c3:ee:61:2f:e0:a9:
                    4c:e1:e0:6e:89:cc:04:4d:d5:6e:36:32:5d:72:d2:
                    35:14:c1:ac:88:98:89:8c:3f:80:c4:ab:b0:e4:cf:
                    a3:8f:bf:12:fa:0a:67:86:2e:85:b5:07:62:f2:cb:
                    07:fc:5d:d2:82:4b:c0:f7:f3:10:38:1c:d3:93:83:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:72:52:0C:6B:92:19:6D:D4:8F:86:2A:3E:A6:D0:9D:F7:27:AF:B4
            X509v3 Authority Key Identifier:
                keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:62:a0:0b:21:23:fe:ca:4a:dc:0c:47:4e:64:e6:0b:a5:ea:
         4b:44:f9:4f:8c:3b:43:68:20:93:cd:7a:0c:86:67:50:56:72:
         e1:7d:a6:38:15:70:7b:98:3c:d3:15:56:a0:c5:35:17:7f:9b:
         d4:61:10:b0:65:f2:7d:b9:fa:2f:c9:d1:ae:a5:5b:de:58:a8:
         76:56:5d:59:1a:39:48:70:23:bf:5d:7f:68:3d:d7:0b:1e:95:
         bc:01:8c:20:58:1a:86:9c:19:db:b5:e5:8f:35:df:7f:3b:ba:
         bb:34:63:0c:68:19:80:94:81:d4:b6:e7:68:7e:d8:ca:a1:3e:
         6b:4b:e0:a2:16:24:f9:d5:f4:0a:4c:69:48:a7:15:8a:d2:53:
         3a:5b:2f:91:9f:37:78:9a:33:87:b2:8e:a6:07:da:85:21:7a:
         e8:52:ed:c1:b3:15:88:00:03:95:4a:9c:30:4d:3c:e4:b8:f4:
         9a:db:27:33:d9:d5:6b:e7:a2:36:13:8f:e7:c5:49:ce:55:e9:
         11:d0:dc:9a:32:9e:69:5b:8a:6b:42:a7:90:84:aa:de:c3:73:
         e5:6d:0c:1d:9a:93:66:a6:3b:30:a4:70:0b:b4:81:ed:dc:82:
         d6:18:9d:9c:78:0b:8e:8c:ae:b0:15:e3:09:f6:da:b6:d4:ca:
         f3:05:94:93
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKTFpg0SoHRvRmozv8ICeWxDsz6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2
QzM4QzE0RTAeFw0yNjA3MjkxMTI5MTZaFw0yNjA3MzAxNDMyMTZaMDMxMTAvBgNV
BAMTKEZDNzI1MjBDNkI5MjE5NkRENDhGODYyQTNFQTZEMDlERjcyN0FGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWnWefCI9+LTIQSJ7RMf3X9mC
6PQ1al+tVLWxI25EOaBcDxntRHuDc3vZWe6w7psHs+lYdiT7C3kFwrQHCAUCSzZq
QdWekLK3yTJ/ST82LQXYjwmQ5sg1KAPnb6fbjM0rYlMZLwAVpgI57h0WpqQWWtSX
E2Y6KttVanosEXFDRO7YurrqmBYSA2JWfIskwXDhuq8+PuJH3j/Drltoilntg0Jv
iGW1eF8MaGJp4E8j2iP0ZVrj/JSIBGLSU8PuYS/gqUzh4G6JzARN1W42Ml1y0jUU
wayImImMP4DEq7Dkz6OPvxL6CmeGLoW1B2Lyywf8XdKCS8D38xA4HNOTgxTpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/HJSDGuSGW3Uj4YqPqbQnfcnr7QwHwYDVR0j
BBgwFoAUjGL79IdXuIqBsrRws6nmtGw4wU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTU1ODY3MDYwMjMzODMwNy8wLzhDNjJGQkY0ODc1N0I4OEE4MUIyQjQ3MEIzQTlF
NkI0NkMzOEMxNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTE1NTg2NzA2MDIzMzgzMDcvMC84QzYyRkJGNDg3NTdC
ODhBODFCMkI0NzBCM0E5RTZCNDZDMzhDMTRFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGKgCyEj/spK
3AxHTmTmC6XqS0T5T4w7Q2ggk816DIZnUFZy4X2mOBVwe5g80xVWoMU1F3+b1GEQ
sGXyfbn6L8nRrqVb3liodlZdWRo5SHAjv11/aD3XCx6VvAGMIFgahpwZ27XljzXf
fzu6uzRjDGgZgJSB1LbnaH7YyqE+a0vgohYk+dX0CkxpSKcVitJTOlsvkZ83eJoz
h7KOpgfahSF66FLtwbMViAADlUqcME085Lj0mtsnM9nVa+eiNhOP58VJzlXpEdDc
mjKeaVuKa0KnkISq3sNz5W0MHZqTZqY7MKRwC7SB7dyC1hidnHgLjoyusBXjCfba
ttTK8wWUkw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:50 2026 by rpki-client