Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
File:                     951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json)
Hash identifier:          zTsNLOuqMhQ2sqQcXP5oDIWHVkiNYKR+z6ulPM4f3gM=
Subject key identifier:   98:92:0D:16:89:13:00:21:89:33:A4:12:C3:49:43:9F:22:9D:23:73
Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
Certificate issuer:       /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Certificate serial:       7DB2EEF7BED95E6B51675F48A20585E9A22604D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
Manifest number:          8B
Signing time:             Wed 29 Jul 2026 06:28:43 +0000
Manifest this update:     Wed 29 Jul 2026 06:23:43 +0000
Manifest next update:     Thu 30 Jul 2026 08:44:43 +0000
Files and hashes:         1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: W/KRiNYTBEsBAFL/YwHI+neMoTR3QqGXaK80uTqU8FE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b2:ee:f7:be:d9:5e:6b:51:67:5f:48:a2:05:85:e9:a2:26:04:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
        Validity
            Not Before: Jul 29 06:23:43 2026 GMT
            Not After : Jul 30 08:44:43 2026 GMT
        Subject: CN=98920D16891300218933A412C349439F229D2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:89:a4:84:a0:1f:b9:92:28:cc:a6:62:5b:
                    77:47:8a:24:44:c0:41:aa:9c:b9:9c:94:38:17:a9:
                    88:7c:71:c5:89:a4:87:c5:aa:cf:cc:96:93:92:5f:
                    74:07:1f:cf:78:70:a2:ce:0c:01:f9:cf:66:47:d8:
                    1d:3d:30:a2:45:88:fd:63:d6:f5:2e:31:32:e4:18:
                    f0:b9:4d:f4:6c:53:53:ec:ef:65:50:e5:fa:80:e1:
                    d0:a4:9f:ab:a6:11:d5:14:eb:ac:13:39:4c:0e:86:
                    bb:06:0c:b5:b3:d8:e0:1e:8f:65:18:d6:29:49:c2:
                    38:81:3e:1e:62:db:41:e3:63:d4:e3:6c:3a:25:ef:
                    8f:c8:38:19:dd:5d:05:b5:05:73:66:73:cb:56:a5:
                    15:aa:ef:17:76:79:89:d1:fa:e1:48:7e:f8:ac:67:
                    09:b0:db:b1:bb:77:87:96:da:10:3c:5d:52:92:eb:
                    3e:90:3c:bd:65:89:07:a2:45:d8:f5:a3:74:b5:9c:
                    e1:43:70:de:37:b3:96:1e:5d:9a:5c:d7:06:23:b1:
                    c6:ec:6a:5b:db:f0:ab:76:d7:03:26:42:0b:10:d5:
                    b3:74:ea:77:bf:1b:92:46:98:27:94:26:4f:6f:d5:
                    5c:d1:b1:45:1c:7e:4e:59:a8:6e:0e:b6:66:c1:a7:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:0D:16:89:13:00:21:89:33:A4:12:C3:49:43:9F:22:9D:23:73
            X509v3 Authority Key Identifier:
                keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:fe:d5:70:a9:ae:81:e9:02:58:5b:c6:95:dc:b2:ee:f6:
         5c:d5:fc:69:b5:8d:11:77:ee:cb:97:28:3d:81:71:9e:5d:4d:
         03:56:9a:2b:23:c5:d2:80:b5:08:5c:87:19:59:64:32:81:41:
         0e:87:60:a0:4b:36:8a:1b:c2:db:d5:59:67:1c:01:27:8f:4f:
         93:6c:b2:3a:1a:5f:bb:0b:3b:65:52:e4:23:21:65:3a:78:6f:
         4e:d4:46:f4:ed:ee:2d:99:a6:cc:9e:10:9a:99:f3:95:2c:7a:
         0e:83:98:84:bf:d4:a0:2f:7a:31:9e:fe:f5:79:b1:58:34:b1:
         d1:c8:27:27:13:df:d7:e3:32:3c:21:7a:f9:79:15:f0:3d:12:
         77:f6:81:58:d3:54:78:5f:cc:e1:a0:a9:5e:ee:02:39:49:ba:
         e8:c7:03:14:58:07:2e:32:32:02:b4:d1:04:bb:b5:e7:48:51:
         f8:5a:a9:e4:5c:13:0c:7d:06:dd:c8:d4:33:a8:61:1f:0c:c4:
         6c:64:4a:2f:cd:1b:36:a2:ef:63:17:c2:dc:bc:5d:a7:e4:8b:
         e0:8e:8a:31:db:06:57:d3:2d:42:8b:23:63:80:82:fa:8a:06:
         c6:92:d7:d7:77:e0:c1:ff:3f:4c:0f:91:78:fe:e4:ed:b3:de:
         a4:52:11:ad
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfbLu977ZXmtRZ19IogWF6aImBNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVC
QkNGM0RDNDAeFw0yNjA3MjkwNjIzNDNaFw0yNjA3MzAwODQ0NDNaMDMxMTAvBgNV
BAMTKDk4OTIwRDE2ODkxMzAwMjE4OTMzQTQxMkMzNDk0MzlGMjI5RDIzNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWomkhKAfuZIozKZiW3dHiiRE
wEGqnLmclDgXqYh8ccWJpIfFqs/MlpOSX3QHH894cKLODAH5z2ZH2B09MKJFiP1j
1vUuMTLkGPC5TfRsU1Ps72VQ5fqA4dCkn6umEdUU66wTOUwOhrsGDLWz2OAej2UY
1ilJwjiBPh5i20HjY9TjbDol74/IOBndXQW1BXNmc8tWpRWq7xd2eYnR+uFIfvis
Zwmw27G7d4eW2hA8XVKS6z6QPL1liQeiRdj1o3S1nOFDcN43s5YeXZpc1wYjscbs
alvb8Kt21wMmQgsQ1bN06ne/G5JGmCeUJk9v1VzRsUUcfk5ZqG4OtmbBp4xXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmJINFokTACGJM6QSw0lDnyKdI3MwHwYDVR0j
BBgwFoAUlRgw+utT+Al8E18WKS4plbvPPcQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzM2NjA4MjEyNzEzNDcyMy8wLzk1MTgzMEZBRUI1M0Y4MDk3QzEzNUYxNjI5MkUy
OTk1QkJDRjNEQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTczNjYwODIxMjcxMzQ3MjMvMC85NTE4MzBGQUVCNTNG
ODA5N0MxMzVGMTYyOTJFMjk5NUJCQ0YzREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/z+1XCproHp
AlhbxpXcsu72XNX8abWNEXfuy5coPYFxnl1NA1aaKyPF0oC1CFyHGVlkMoFBDodg
oEs2ihvC29VZZxwBJ49Pk2yyOhpfuws7ZVLkIyFlOnhvTtRG9O3uLZmmzJ4Qmpnz
lSx6DoOYhL/UoC96MZ7+9XmxWDSx0cgnJxPf1+MyPCF6+XkV8D0Sd/aBWNNUeF/M
4aCpXu4COUm66McDFFgHLjIyArTRBLu150hR+Fqp5FwTDH0G3cjUM6hhHwzEbGRK
L80bNqLvYxfC3Lxdp+SL4I6KMdsGV9MtQosjY4CC+ooGxpLX13fgwf8/TA+ReP7k
7bPepFIRrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:59:34 2026 by rpki-client