Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
File:                     0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft (raw, json)
Hash identifier:          pF5KTAobG9GAHqEpOZAI1DGuLV+owkYmB66HqnJWd1Y=
Subject key identifier:   12:19:66:01:31:50:1D:A4:BE:5B:45:49:C1:E9:F9:A4:86:52:C9:98
Authority key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3
Certificate issuer:       /CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
Certificate serial:       0DFD7FD084333FE9B507ECB7B50CF4AC1F336771
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
Manifest number:          42
Signing time:             Sat 17 Oct 2026 06:28:34 +0000
Manifest this update:     Sat 17 Oct 2026 06:23:34 +0000
Manifest next update:     Tue 20 Oct 2026 08:29:34 +0000
Files and hashes:         1: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl (hash: PFDAM0lpM42vCHRklI8YRpM4DcUzEodOTitB8aUTa/o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 20:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fd:7f:d0:84:33:3f:e9:b5:07:ec:b7:b5:0c:f4:ac:1f:33:67:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
        Validity
            Not Before: Oct 17 06:23:34 2026 GMT
            Not After : Oct 20 08:29:34 2026 GMT
        Subject: CN=1219660131501DA4BE5B4549C1E9F9A48652C998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:06:d1:b1:79:b6:79:ef:da:0b:1d:01:27:
                    c6:84:2a:3d:cc:5d:b3:69:b6:3e:2d:28:65:34:6a:
                    c0:9f:f0:47:ed:d6:9d:28:c0:b9:c5:70:20:de:63:
                    b8:1f:c2:a8:ec:58:c3:bc:b1:35:e1:33:c9:8c:e5:
                    b6:68:c5:bf:60:59:c8:fa:6f:83:2b:15:a9:10:be:
                    32:69:99:ca:93:bc:f3:27:83:ba:1f:56:4b:91:cd:
                    2e:d1:18:86:36:1d:2a:9b:c8:c2:4c:d8:91:3c:e8:
                    d1:06:1e:a2:80:e0:f4:90:4a:4b:ee:f5:b0:1f:35:
                    e3:0f:8a:a7:13:70:2a:42:dd:f7:aa:b1:c2:4d:4d:
                    af:58:b2:a0:8d:84:af:6c:19:8e:c5:b3:73:e8:a4:
                    4a:1d:be:cf:cf:4f:d1:b7:ce:a9:ed:2a:d4:83:c3:
                    cf:bf:53:a7:6e:67:1f:4d:45:0e:6c:cf:d3:f2:58:
                    38:8e:be:87:98:a9:0c:31:62:04:40:7e:28:ba:4e:
                    0a:d4:b5:27:d0:4e:eb:16:75:d2:5c:8a:4d:c9:07:
                    60:88:36:70:2a:21:e6:27:ec:c1:ed:e0:76:40:43:
                    9a:e3:60:79:db:a7:04:22:db:5a:75:77:03:c3:6b:
                    16:c2:46:53:86:b0:28:d4:2c:11:b6:76:00:96:93:
                    87:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:66:01:31:50:1D:A4:BE:5B:45:49:C1:E9:F9:A4:86:52:C9:98
            X509v3 Authority Key Identifier:
                keyid:00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:1f:2b:87:91:94:3e:bb:ae:5b:c4:c2:b6:ee:6a:23:5b:
         12:2f:84:a7:58:1d:e2:b3:2f:b5:88:b9:f1:dc:f7:40:e1:3e:
         f4:09:8d:b4:07:90:08:18:b1:27:b5:ba:b4:03:cc:c9:91:c6:
         02:77:37:a5:cd:c1:24:e7:ad:5d:06:1b:27:de:aa:67:5c:84:
         a2:2e:d7:a6:cc:d0:54:7b:0f:d6:e0:c2:59:9e:c9:47:a1:37:
         28:df:c8:da:31:6d:96:2b:e1:d0:a0:ff:9c:93:a3:63:82:d5:
         d5:07:8b:43:f0:8d:d9:2b:2b:c8:ef:0c:ab:45:39:11:6f:c6:
         f0:68:db:37:49:f8:d2:91:16:56:2b:44:d3:ff:80:9f:f7:41:
         84:2b:b3:e9:fc:70:40:74:08:1e:50:e7:05:52:05:3d:60:ef:
         2b:98:ce:d6:d9:c3:22:73:e5:ec:29:7f:12:ff:30:37:c2:b9:
         06:7e:fe:78:2b:3a:ef:c1:75:4b:8d:8d:19:49:98:c6:02:d4:
         37:92:9c:a3:0a:3c:70:79:48:4c:73:1d:7c:1d:bb:3f:23:bd:
         6f:ed:58:ad:51:b0:7e:b4:5d:a9:a7:68:41:76:7e:4f:e4:21:
         85:a2:d8:72:03:54:56:97:b8:23:84:c7:11:89:06:ac:00:c0:
         05:5d:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:25:47 2026 by rpki-client