Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
File:                     FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json)
Hash identifier:          ML3ubS0wZZRsDCvpsv0Au355fgeO8JnDUQDj7vEFRj8=
Subject key identifier:   4C:B1:A1:BC:D1:24:AE:80:6A:58:FD:05:34:35:88:76:96:59:AD:FB
Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
Certificate issuer:       /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Certificate serial:       6B2C455760307B9394B83E277DEC5A4F119E63C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
Manifest number:          CC
Signing time:             Wed 14 Oct 2026 15:34:19 +0000
Manifest this update:     Wed 14 Oct 2026 15:29:19 +0000
Manifest next update:     Sat 17 Oct 2026 17:55:19 +0000
Files and hashes:         1: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: LGOhrdQyf+MCHhH2VKf2c6awsSZdtQLcF3MmDxEC2Q8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 17:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2c:45:57:60:30:7b:93:94:b8:3e:27:7d:ec:5a:4f:11:9e:63:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
        Validity
            Not Before: Oct 14 15:29:19 2026 GMT
            Not After : Oct 17 17:55:19 2026 GMT
        Subject: CN=4CB1A1BCD124AE806A58FD05343588769659ADFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:cf:42:15:22:64:c6:f8:0f:69:95:dc:e9:
                    d4:88:c8:28:d5:45:fd:20:ce:03:94:55:51:df:8a:
                    6b:22:43:ee:4d:e4:55:00:37:58:f6:5d:31:78:56:
                    0a:7e:f8:08:40:cf:d6:20:f5:93:44:cc:32:b7:85:
                    3b:fe:ae:b7:a3:63:c1:eb:07:11:ed:42:a4:13:2e:
                    3b:3f:4a:7e:aa:2f:2f:67:90:3f:ae:68:7c:e3:a5:
                    80:58:ee:ac:22:c8:bc:b7:42:3d:ea:66:f2:0b:a5:
                    00:de:e2:c1:63:1c:20:4d:fb:8c:ce:4d:cf:b0:29:
                    61:36:4c:f7:d6:07:de:d5:66:8d:17:ec:af:41:95:
                    5c:45:3d:56:bd:9d:21:b4:4f:e2:f1:a8:d6:73:83:
                    33:d9:a1:a4:f6:25:a4:2c:eb:b5:5e:5c:3b:cc:37:
                    29:c2:5a:00:71:c3:b6:af:c4:c0:27:7f:64:bf:cf:
                    79:7a:ea:99:65:42:d2:77:a2:e5:92:38:ec:76:5c:
                    23:c2:0f:9f:88:7d:28:d0:e8:9a:83:80:df:5d:92:
                    35:b8:b8:c8:a0:64:32:e6:b6:4e:fb:8a:1b:e5:68:
                    fb:84:cb:d0:af:4a:a7:6f:88:7f:7c:f4:34:8f:64:
                    94:68:db:65:3a:e7:9d:f1:2f:99:1b:4e:d0:70:5b:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:A1:BC:D1:24:AE:80:6A:58:FD:05:34:35:88:76:96:59:AD:FB
            X509v3 Authority Key Identifier:
                keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:e7:d5:b2:b6:ba:12:4c:0f:b3:d5:ae:ed:25:9a:10:3a:
         67:59:6e:0e:82:20:b2:75:72:b8:eb:73:9f:e2:37:63:00:d8:
         b9:c4:c0:10:63:73:d9:d3:d6:23:28:ba:0f:fa:33:93:0e:8e:
         c7:4f:4d:c2:99:4f:73:8e:6e:6b:a7:30:ea:9c:a6:19:e2:3a:
         b7:ed:13:61:75:a1:13:6f:b3:c6:fe:65:2b:cb:53:8a:db:a0:
         99:a4:23:4e:42:71:f7:41:f3:c4:fb:d3:47:21:1b:e7:fa:95:
         d1:5e:1e:db:5f:30:46:33:1b:e7:c6:88:c2:24:54:25:3c:03:
         8f:90:13:0f:aa:c3:18:02:b8:22:6d:ab:04:e0:08:7c:08:f2:
         38:5e:fc:da:84:c4:44:d8:e1:9a:ff:06:2e:38:ce:ca:fd:01:
         27:a9:11:85:1d:f7:d4:8e:06:83:7a:4c:a7:93:8b:de:83:57:
         93:82:21:9e:80:51:b1:3b:60:e3:2a:4e:65:86:b2:52:76:2a:
         33:53:b8:77:e8:d1:f3:ad:10:a2:bf:08:47:0f:c8:97:23:6e:
         57:2a:3c:0d:65:c7:c9:50:ae:a0:d2:d6:fd:f2:85:49:ab:26:
         55:93:3c:38:e7:4c:a4:3e:52:00:a7:2c:d4:90:3d:ce:58:e0:
         00:58:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:50:08 2026 by rpki-client