Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
File:                     951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json)
Hash identifier:          L3doXr2R+bQ86H0Ww+pv7e1/ZF0oTqypqXUD9HMuiOg=
Subject key identifier:   4F:A5:40:A0:4C:68:0D:CE:1B:4F:57:FF:D2:77:2A:12:CA:F7:33:A2
Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
Certificate issuer:       /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Certificate serial:       79AE131842F9ECA8FEA818B26AA941CAE1E069F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
Manifest number:          C8
Signing time:             Thu 15 Oct 2026 01:41:07 +0000
Manifest this update:     Thu 15 Oct 2026 01:36:07 +0000
Manifest next update:     Sun 18 Oct 2026 03:32:07 +0000
Files and hashes:         1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: aXIns7MAfcuxZrQRomfTe+Pzo5qN4yQaLa5RIwLV0z0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ae:13:18:42:f9:ec:a8:fe:a8:18:b2:6a:a9:41:ca:e1:e0:69:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
        Validity
            Not Before: Oct 15 01:36:07 2026 GMT
            Not After : Oct 18 03:32:07 2026 GMT
        Subject: CN=4FA540A04C680DCE1B4F57FFD2772A12CAF733A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:fe:75:97:7e:fb:5f:13:60:88:e7:90:34:
                    7e:e6:23:eb:37:63:77:1c:75:bb:3c:fa:41:c7:90:
                    f3:99:37:c7:2a:46:39:9e:9c:4c:25:63:01:b2:ae:
                    92:ae:3e:e4:71:cd:20:df:16:24:59:d5:7a:73:1e:
                    47:1c:4f:2a:88:01:63:c2:9f:14:89:70:f3:83:e8:
                    a4:8e:e7:81:8e:07:57:98:07:50:9b:02:dd:b0:75:
                    37:61:0b:59:3b:6d:b7:e6:4b:96:9d:b4:7f:f9:0a:
                    f9:8a:ec:f2:15:0a:95:57:a5:6d:ed:4c:19:0a:14:
                    8f:f1:11:84:8e:03:f8:30:a6:e8:20:3c:2f:17:13:
                    71:65:36:8f:1d:7a:b3:ee:89:6e:96:af:00:ad:5e:
                    d2:6c:eb:01:ba:d8:88:64:9a:a1:7d:26:d5:d8:f3:
                    34:92:01:66:c1:12:c2:df:4e:9e:63:55:14:c5:15:
                    85:a5:e4:a6:32:a5:29:b7:8e:2d:ee:70:2a:f9:95:
                    20:c8:ae:d7:34:8e:83:cd:3a:9b:a0:bb:b4:47:17:
                    76:cc:b4:13:3d:5c:41:8d:9b:45:da:83:78:be:67:
                    95:d6:4f:7e:4b:50:0e:bf:74:96:c3:a4:d9:a7:41:
                    e5:4b:8e:05:60:ee:81:18:3e:2d:35:b4:cb:d2:6d:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A5:40:A0:4C:68:0D:CE:1B:4F:57:FF:D2:77:2A:12:CA:F7:33:A2
            X509v3 Authority Key Identifier:
                keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:54:25:70:e4:c7:7d:8d:ee:53:b5:99:1a:dc:3b:d2:23:64:
         5f:9f:93:91:f4:9d:68:e7:3b:99:61:c3:db:92:db:8c:d4:05:
         25:cb:54:03:27:10:bb:91:3a:14:be:96:6e:fe:56:1f:ff:5d:
         e6:56:0a:7a:0b:f0:6a:9c:14:f4:58:75:96:b6:40:c0:b7:d1:
         b5:6b:c8:77:da:94:f2:18:5e:71:8f:0d:7c:ef:3a:b1:da:83:
         e8:f5:e5:59:8d:84:2a:0f:78:8a:80:d1:41:d2:fe:f0:2a:c7:
         18:92:2c:6c:f9:4f:ea:06:a8:f9:93:ee:a2:0d:56:0c:88:23:
         18:24:d2:ae:18:7c:e1:26:b3:27:d9:e2:74:05:99:d0:6f:8a:
         83:4c:a0:76:fb:fd:5a:ce:ae:28:3b:b5:7b:9d:28:bb:c6:b1:
         66:77:63:d4:06:73:10:9c:82:88:ad:26:a9:d4:6f:18:82:47:
         0a:93:c9:58:0b:15:42:12:55:e5:5f:0e:3c:80:00:7a:55:c5:
         77:52:c9:f8:35:23:9e:fe:17:21:1f:b7:11:58:80:db:82:77:
         13:fe:8a:9e:3f:11:c0:12:d6:47:8d:bd:a9:32:1b:f0:5c:a7:
         e6:83:d8:db:70:96:80:74:19:00:c2:56:62:09:17:4c:70:90:
         b0:9a:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:25 2026 by rpki-client