Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
File:                     48394F266C145173319F25807E0F7F0C02A6894A.mft (raw, json)
Hash identifier:          LvvAc2G2oVsk2GTpERl3ZJ87tiXpB4BuyUWlAXjmA0I=
Subject key identifier:   A8:76:43:24:D6:96:EA:7A:4B:46:2B:EF:FC:61:A9:7A:48:CA:32:D6
Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
Certificate issuer:       /CN=48394F266C145173319F25807E0F7F0C02A6894A
Certificate serial:       67AE21F4D19C26DB641EFEFD1D40F26BDB8AEAFB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
Manifest number:          04
Signing time:             Fri 17 Apr 2026 19:34:48 +0000
Manifest this update:     Fri 17 Apr 2026 19:29:48 +0000
Manifest next update:     Sat 18 Apr 2026 19:34:48 +0000
Files and hashes:         1: 48394F266C145173319F25807E0F7F0C02A6894A.crl (hash: MMZUSDCsLAoU2oeQtEahax0xwyeYzRQ8cKXLOpjCow0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ae:21:f4:d1:9c:26:db:64:1e:fe:fd:1d:40:f2:6b:db:8a:ea:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A
        Validity
            Not Before: Apr 17 19:29:48 2026 GMT
            Not After : Apr 18 19:34:48 2026 GMT
        Subject: CN=A8764324D696EA7A4B462BEFFC61A97A48CA32D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:52:18:72:dd:ad:c6:a7:de:13:e7:12:d3:
                    e6:d4:8b:a4:4f:ef:d4:08:e5:29:9d:bb:e4:de:c7:
                    5f:ee:5d:e5:d2:56:41:2b:e0:8b:6d:09:f6:08:34:
                    b0:aa:12:9a:53:4b:99:c8:96:d2:6c:c0:1d:23:fc:
                    e8:ec:71:2c:76:e2:b5:15:8a:69:bc:d9:6d:b0:04:
                    79:42:c8:72:74:5c:b6:51:6e:1d:32:83:58:ec:7f:
                    7a:7b:1c:8b:d6:76:bc:0c:2a:dc:84:a8:61:7e:05:
                    27:1b:4f:a8:cc:62:15:aa:b3:32:a6:f3:f9:58:55:
                    2c:e6:71:78:dd:26:1b:8d:cc:14:41:61:78:e3:72:
                    bf:f8:ca:e8:75:a1:3d:c2:fe:53:cd:49:31:46:1b:
                    8a:45:b7:98:e6:f2:28:8f:7a:7a:bd:b1:e3:fe:02:
                    f0:c9:34:a0:77:2b:83:24:e7:f9:f1:5f:55:57:2e:
                    7c:5b:3a:b8:86:8c:51:2a:55:82:00:b6:66:29:b7:
                    90:52:bf:11:a7:8a:06:67:6b:4a:b8:c0:7e:a9:1b:
                    1a:d0:61:e8:87:5f:f3:6e:b6:d3:3a:5a:99:aa:1c:
                    2b:50:a2:e7:ed:98:a3:13:c2:10:d1:b5:38:8e:ed:
                    99:ec:20:c2:11:9e:03:96:b1:eb:5b:b5:3e:70:01:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:76:43:24:D6:96:EA:7A:4B:46:2B:EF:FC:61:A9:7A:48:CA:32:D6
            X509v3 Authority Key Identifier:
                keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:d8:0a:a6:e4:52:e0:b0:1d:0d:68:ea:f6:de:64:b4:d5:
         d4:f2:99:db:9c:4c:4a:8d:a0:da:dc:40:1b:44:9a:55:55:9b:
         52:5b:0c:55:6a:4b:1f:eb:36:7b:bf:bd:b8:3b:2c:2e:45:23:
         5c:51:48:0b:d8:b1:6e:be:65:f6:9a:0a:c4:ea:00:51:7b:c6:
         25:41:0f:0c:36:c2:50:50:da:00:5a:e7:7f:3b:8f:f7:b1:5c:
         ea:cb:e5:15:de:e5:23:30:b4:50:65:ee:f5:07:10:fb:6e:fa:
         b5:4e:ae:ac:06:71:0a:92:f3:4a:3d:bd:78:4b:f5:e0:89:a5:
         39:e8:ed:89:6e:6d:9c:ef:db:b8:48:62:ea:3a:b6:95:1d:b2:
         60:47:2e:d6:da:94:4e:c5:17:b9:71:04:4e:7b:0f:7f:a3:c7:
         fb:ee:6f:cf:03:83:b5:03:9a:57:ec:cb:6c:8c:ec:41:a5:c7:
         65:7f:04:5d:f2:31:e4:de:af:04:2c:81:ce:b1:4e:59:ed:35:
         6f:49:53:4d:5c:32:87:24:0a:b1:65:8c:dd:bd:3d:b9:9b:73:
         09:e5:02:bf:cd:b7:61:c9:cf:6c:ec:aa:c0:1f:f5:e8:e8:df:
         e3:32:ff:da:e1:f5:0c:ce:4a:e5:cb:a0:87:8b:1f:2f:88:76:
         24:54:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:03 2026 by rpki-client