Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          nsmLNoc3UmQPnGPFXB7YFNaXCnZV9bByS8g5knoyxkc=
Subject key identifier:   46:B8:52:F7:4A:CD:23:F0:C4:2F:8C:97:AF:CC:9B:0B:8E:FA:F1:DD
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       556F99A4F6BD32E1C0E955B335345C751AD3BF6B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          DE
Signing time:             Mon 19 Oct 2026 20:26:14 +0000
Manifest this update:     Mon 19 Oct 2026 20:21:14 +0000
Manifest next update:     Thu 22 Oct 2026 23:34:14 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: dGMgwY3Ti1g1YtT1NZYF5gGJuw3VZiumWAu7CrR8JMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 18:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6f:99:a4:f6:bd:32:e1:c0:e9:55:b3:35:34:5c:75:1a:d3:bf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Oct 19 20:21:14 2026 GMT
            Not After : Oct 22 23:34:14 2026 GMT
        Subject: CN=46B852F74ACD23F0C42F8C97AFCC9B0B8EFAF1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6c:12:73:d6:c0:d2:16:f7:e2:4a:6e:98:78:
                    95:1c:49:5f:9f:46:cb:52:1b:8e:7e:09:ec:65:8c:
                    53:88:e7:d8:30:d8:c7:b1:72:2c:f7:64:62:53:69:
                    58:c1:5d:e2:e6:38:9a:80:9c:f7:b8:01:c1:83:a1:
                    95:5b:d3:a4:85:80:8e:be:7d:fc:4c:54:e1:a5:e9:
                    dc:c4:5b:80:16:09:22:7c:79:13:c6:02:13:13:5e:
                    a7:9f:62:23:91:82:55:ba:a8:10:b1:4e:46:2b:ec:
                    56:84:61:47:95:2e:f9:e5:6c:cd:e7:81:f3:02:0c:
                    5f:0c:55:15:b3:70:39:c4:be:e3:4b:5b:e9:d4:35:
                    4c:e7:d7:a3:04:58:33:50:a1:f8:1a:c8:6a:90:f1:
                    0c:9e:3b:97:cc:6c:38:ef:6e:84:70:da:e3:ab:30:
                    12:a0:14:06:38:d0:34:46:15:21:fd:9d:75:d0:03:
                    43:13:43:29:d5:76:b3:01:cb:d2:87:3c:22:29:17:
                    42:b9:35:11:5d:a5:67:f6:28:87:78:9e:69:82:bd:
                    5b:e8:40:68:88:1d:3a:80:e3:ba:64:28:2a:e5:64:
                    4c:00:a0:41:94:24:b6:e6:19:1d:9e:89:94:8d:40:
                    01:8d:9d:13:f0:86:0b:4d:9f:bc:f5:be:ca:2e:fd:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:52:F7:4A:CD:23:F0:C4:2F:8C:97:AF:CC:9B:0B:8E:FA:F1:DD
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:62:98:04:b4:de:a2:33:f8:98:bb:b6:f2:8f:00:b1:f4:5f:
         8a:c8:36:36:b2:ae:40:57:43:56:13:05:35:5e:04:ea:32:93:
         61:4a:c9:bf:3a:82:ea:16:43:8b:c3:a4:e2:09:fc:c7:21:7b:
         5a:25:16:f0:11:c0:9d:1e:5c:db:96:e5:3b:28:2e:36:f3:cd:
         9e:2d:ad:bf:e6:13:06:67:8a:16:44:bd:3e:be:6b:ee:fe:16:
         0f:14:0c:ce:21:a1:aa:43:c0:fb:56:62:6c:3c:59:3b:05:98:
         0e:ec:3c:9f:e8:a6:1e:53:b3:55:91:d3:c6:bd:92:f7:5c:43:
         f4:8b:8a:89:66:29:f3:a4:14:5b:00:72:3b:31:1c:4e:90:a3:
         3a:04:33:b4:f6:aa:9f:b0:b9:c6:0f:a4:45:c1:a9:b0:cf:79:
         be:41:be:62:67:a0:9e:67:82:fb:73:ff:3a:a7:3e:95:b3:f9:
         34:4b:30:f0:93:d4:60:df:3f:fe:d8:b4:6c:6c:65:63:6c:aa:
         0b:4b:56:39:ee:a8:91:4c:2a:d5:a0:9e:86:68:55:03:cb:2f:
         02:7f:32:b1:6a:38:fe:08:dd:e7:15:b7:b5:a7:c3:1b:42:f1:
         6f:6f:2d:07:c0:ed:e9:6c:92:9a:f4:2c:98:51:87:b5:36:96:
         bc:b0:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:01:22 2026 by rpki-client