Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
File:                     8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json)
Hash identifier:          nSNK4yrykWJAuKpGN6RzkqY9Ohm9GH6cO3zyIhdoMjk=
Subject key identifier:   78:49:8F:45:EB:AC:24:8E:36:58:EA:3F:38:1A:6A:DE:40:F5:2B:FA
Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
Certificate issuer:       /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Certificate serial:       4E9FA9523CCDCC5CB0888981CFF42EC277B4BDFE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
Manifest number:          B6
Signing time:             Fri 16 Oct 2026 00:17:03 +0000
Manifest this update:     Fri 16 Oct 2026 00:12:03 +0000
Manifest next update:     Mon 19 Oct 2026 09:30:03 +0000
Files and hashes:         1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: jlvTzPY5HEBEy6nCBYSq/eCgsdVH957UyYywmXZhvi0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 09:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:a9:52:3c:cd:cc:5c:b0:88:89:81:cf:f4:2e:c2:77:b4:bd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
        Validity
            Not Before: Oct 16 00:12:03 2026 GMT
            Not After : Oct 19 09:30:03 2026 GMT
        Subject: CN=78498F45EBAC248E3658EA3F381A6ADE40F52BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:fe:8c:66:c7:6c:f7:ae:63:b2:10:72:81:
                    55:a3:ee:9e:0b:a4:49:04:a0:ec:38:1b:d2:b4:b5:
                    0c:8d:a1:98:fa:3a:8a:43:44:f2:66:26:c9:39:6f:
                    80:af:98:fc:bd:22:55:82:a2:06:6c:61:e5:98:4c:
                    1b:6c:ee:90:52:21:7c:df:66:07:96:a0:fa:02:a0:
                    b4:76:b8:34:d8:39:76:b5:f7:00:5c:16:2d:9c:07:
                    c9:70:0f:a1:34:28:28:06:f9:d9:27:f2:17:a5:1f:
                    15:71:c3:68:29:9e:15:6d:9d:50:95:c0:c0:25:d4:
                    e1:bb:0f:a5:bb:af:39:e3:01:54:1d:61:9a:ce:ff:
                    be:07:54:ec:bb:da:dc:bb:46:bc:ad:34:d1:de:a5:
                    7b:7c:a2:c5:98:5e:c4:28:ff:d2:38:5b:13:5a:72:
                    50:7e:8e:94:32:78:dd:bd:f0:ff:93:b7:02:8b:9f:
                    fc:7f:c1:cd:2b:f6:dc:0a:7b:a8:32:89:fe:3f:3c:
                    bd:79:81:15:ad:ec:0b:59:4e:ff:1a:f3:09:cd:18:
                    ff:5b:80:b5:3d:99:1f:08:fd:d3:03:a9:88:14:b7:
                    7a:d2:21:bd:06:7a:12:38:53:16:ec:d0:eb:10:16:
                    38:a7:c6:56:43:42:00:ca:00:4a:4e:7e:27:11:44:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:8F:45:EB:AC:24:8E:36:58:EA:3F:38:1A:6A:DE:40:F5:2B:FA
            X509v3 Authority Key Identifier:
                keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:36:d5:37:ea:c5:38:1e:4a:09:52:52:bb:3d:d9:e4:be:
         19:49:36:4f:1f:08:ca:19:b5:98:74:ad:6d:e8:0c:45:c8:22:
         89:02:4c:d3:fd:93:ed:dc:6e:94:3f:9f:1b:a6:8b:16:75:ca:
         e6:fc:26:88:91:fb:ee:78:72:09:57:44:2f:c4:d7:98:fa:da:
         dc:05:7f:25:6c:ce:ce:2a:f8:17:d0:fc:ae:d0:09:f5:47:31:
         b2:f2:39:62:7e:95:d5:c3:47:95:ac:92:23:0d:f7:93:1e:18:
         0e:c7:ab:c5:6f:ca:03:e7:35:e8:b1:24:93:74:d9:60:3a:a9:
         5e:89:9c:a1:1f:cf:85:30:0e:f8:51:6f:86:75:48:fc:3c:aa:
         b4:9c:2d:e8:61:83:0f:15:5e:b9:49:3f:db:86:bd:9d:fa:69:
         c6:75:37:1e:3f:5e:ab:de:d3:bc:43:1b:76:e8:c2:62:40:8f:
         53:87:35:39:42:05:20:6c:e5:bf:ee:68:52:54:4d:16:da:a1:
         24:e6:88:5b:92:f7:2f:d4:cc:86:24:2d:90:3a:4c:9a:13:8e:
         70:c0:55:d7:84:34:f8:a0:75:cc:87:d7:92:e5:68:56:0c:75:
         bb:37:1f:db:99:c7:b8:94:02:d4:cb:28:ce:75:a7:c7:50:22:
         54:a4:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:36:35 2026 by rpki-client