Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
File:                     C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json)
Hash identifier:          PV/ZYH2MO0GStU6sHl+oFKS/QdZzSdYgiXWCE2KNHkE=
Subject key identifier:   4E:43:C0:06:F0:E1:97:DA:B2:0B:5D:04:FD:B0:B8:E1:08:BB:72:0C
Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3
Certificate issuer:       /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
Certificate serial:       55C1621D3D2C52AB20F88BC24AB11CF0BEC1CB5A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
Manifest number:          D0
Signing time:             Thu 15 Oct 2026 09:11:36 +0000
Manifest this update:     Thu 15 Oct 2026 09:06:36 +0000
Manifest next update:     Sun 18 Oct 2026 17:28:36 +0000
Files and hashes:         1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: D4hgiVI3MbMKf8KmRH1qt5jlkEDvVp8QGkcg64pslvI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 17:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:62:1d:3d:2c:52:ab:20:f8:8b:c2:4a:b1:1c:f0:be:c1:cb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
        Validity
            Not Before: Oct 15 09:06:36 2026 GMT
            Not After : Oct 18 17:28:36 2026 GMT
        Subject: CN=4E43C006F0E197DAB20B5D04FDB0B8E108BB720C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:28:13:fe:55:d5:6f:05:01:c8:6c:7d:6e:
                    a9:b9:b7:b9:2e:83:f7:a2:6b:c9:c5:cd:75:9a:62:
                    7d:aa:94:c0:a0:79:f8:86:4f:1b:89:39:04:86:cd:
                    2b:f7:29:ae:05:d9:e2:2a:ab:dc:cf:f4:23:63:c2:
                    bd:98:65:17:7d:55:d3:8c:3b:3a:58:ef:9d:4c:35:
                    40:94:b7:dd:dc:e4:fa:15:07:71:dd:d1:02:5d:e9:
                    23:3c:c0:3f:34:38:15:e7:f6:33:29:9c:cd:13:bb:
                    c0:8b:41:f2:2f:f8:94:70:5c:2d:ff:bf:3d:8e:46:
                    40:cf:3c:0d:3a:82:84:75:63:cf:8d:7a:8f:be:1a:
                    19:4a:98:d5:0b:10:fa:a1:e4:c8:91:4d:ee:7c:96:
                    cc:c1:00:6f:62:83:18:a3:e7:48:b4:31:9a:5d:83:
                    04:bf:ab:0b:38:73:1d:8c:d3:dd:7e:00:f4:56:b0:
                    f0:7e:b1:b4:58:2f:9d:f5:10:53:01:78:cf:eb:5e:
                    8a:e0:11:e1:90:c6:a9:2c:91:f3:59:42:09:18:49:
                    be:f6:f7:e1:a1:82:ae:d7:e8:ab:74:78:8f:81:e0:
                    63:ca:c9:1c:93:40:fa:29:5f:56:35:c8:ff:77:36:
                    09:87:56:90:6d:90:11:98:8a:49:e2:a4:1e:5c:ee:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:C0:06:F0:E1:97:DA:B2:0B:5D:04:FD:B0:B8:E1:08:BB:72:0C
            X509v3 Authority Key Identifier:
                keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:54:8b:17:82:00:0d:e5:c5:c3:be:37:f5:19:eb:ec:48:
         3b:56:9e:8d:4f:7b:97:21:50:b4:22:5d:47:fd:d6:34:64:14:
         18:2b:21:8e:99:88:91:79:5c:48:26:48:76:4e:b1:74:d0:7d:
         0b:e7:b7:e6:7c:a1:e2:1f:5b:be:2d:81:ad:67:b3:3c:34:d1:
         c1:a8:15:a3:76:97:a7:a1:4c:33:2d:46:98:6c:6a:9a:06:82:
         fa:7f:a9:3d:2c:5f:2d:12:74:f7:ce:aa:d1:38:1e:2d:24:ef:
         1c:e2:85:00:59:c7:7c:16:fa:12:9f:fd:0a:43:6a:89:66:bb:
         2e:ee:c8:7c:4b:7c:86:e7:56:76:c4:fb:58:01:51:db:b6:c1:
         10:7d:d8:a3:89:cf:3a:c9:ab:bc:07:af:d3:2c:46:19:33:43:
         e8:b1:61:ad:c1:d6:80:f3:b7:11:a0:b7:8c:ed:c4:6c:1f:4e:
         ff:2e:cf:db:4c:05:2f:2d:93:63:7c:1f:f4:8a:e3:ae:69:84:
         25:64:b7:8d:cd:7d:0f:14:58:b5:f0:3b:8c:57:74:19:05:96:
         77:90:49:87:9f:11:06:1f:bc:20:72:f3:b3:c4:e4:70:e5:86:
         71:23:71:70:77:73:73:0d:49:21:99:2d:9a:63:6c:0c:67:d7:
         73:c5:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:42:58 2026 by rpki-client