Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft
File:                     9730554E11D9B2CA574FD62DD6800C761361DAF2.mft (raw, json)
Hash identifier:          0XzEUAJuD12iRhfxJCR1swfzqiC15EQa8fk47f3zooY=
Subject key identifier:   CF:EB:93:CE:A1:F1:96:EC:E7:90:8C:B5:3A:89:24:4D:A1:CD:C5:B5
Authority key identifier: 97:30:55:4E:11:D9:B2:CA:57:4F:D6:2D:D6:80:0C:76:13:61:DA:F2
Certificate issuer:       /CN=9730554E11D9B2CA574FD62DD6800C761361DAF2
Certificate serial:       4C90B6E5548CBBF484BA268FDD889C377EBEB61A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft
Manifest number:          A5
Signing time:             Wed 14 Oct 2026 13:34:11 +0000
Manifest this update:     Wed 14 Oct 2026 13:29:11 +0000
Manifest next update:     Sat 17 Oct 2026 17:08:11 +0000
Files and hashes:         1: 9730554E11D9B2CA574FD62DD6800C761361DAF2.crl (hash: mJ3wfIrku5UIx0oXHeeDCMWmUAwG7jEXKA144l9GYlo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 17:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:b6:e5:54:8c:bb:f4:84:ba:26:8f:dd:88:9c:37:7e:be:b6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730554E11D9B2CA574FD62DD6800C761361DAF2
        Validity
            Not Before: Oct 14 13:29:11 2026 GMT
            Not After : Oct 17 17:08:11 2026 GMT
        Subject: CN=CFEB93CEA1F196ECE7908CB53A89244DA1CDC5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:45:30:be:45:e3:58:8d:e1:a1:50:10:22:
                    6c:6e:31:03:77:28:b4:9c:bf:a5:67:39:c3:12:fa:
                    a0:37:b4:2e:1b:4c:4a:1f:10:f6:37:24:c0:cb:93:
                    5b:39:6e:29:27:53:22:7d:0b:a6:0f:0c:11:b5:e9:
                    69:a3:8f:42:33:55:86:89:69:e8:23:ca:48:54:76:
                    fc:19:2d:c9:20:47:a4:66:64:88:1b:c4:d6:db:3f:
                    ad:65:f1:21:b9:ab:9f:3d:20:ec:c3:3e:40:0b:34:
                    7c:bd:41:8b:b1:92:ac:d0:fe:c7:ef:79:62:ab:be:
                    3a:cc:24:03:ee:ed:70:4f:19:de:d9:37:fc:af:c6:
                    46:61:6c:d6:14:c4:9e:6c:c7:1c:5e:5c:f0:96:e5:
                    77:15:f2:8e:ce:32:c8:41:c1:51:24:43:d3:b5:96:
                    65:21:a9:fe:08:46:91:8b:a1:3d:c0:c3:84:89:61:
                    13:4e:24:de:f0:c1:7d:e2:fa:91:75:77:ce:68:35:
                    44:85:e9:5b:0b:a1:c4:dd:49:c4:5d:31:b9:cd:79:
                    c7:66:14:63:81:ca:ff:87:cc:13:a1:5a:7b:6a:38:
                    1e:e8:dc:12:41:56:50:fc:f3:f6:9b:7d:c6:06:90:
                    95:e3:d4:db:62:f3:58:cb:9b:e0:9f:b3:5f:45:24:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EB:93:CE:A1:F1:96:EC:E7:90:8C:B5:3A:89:24:4D:A1:CD:C5:B5
            X509v3 Authority Key Identifier:
                keyid:97:30:55:4E:11:D9:B2:CA:57:4F:D6:2D:D6:80:0C:76:13:61:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106855389879599123/0/9730554E11D9B2CA574FD62DD6800C761361DAF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:1b:ca:56:31:21:7f:a0:c2:8f:5b:5a:78:60:a8:87:57:
         b1:93:33:f7:41:da:29:85:e5:8c:4a:6c:01:53:ae:e2:8a:36:
         26:21:d6:b4:d2:2f:77:ef:6f:ec:d9:52:0e:bf:6f:7c:90:32:
         db:67:bb:0e:59:ec:a1:0f:d3:c1:c1:dc:c9:89:82:41:61:61:
         1c:cd:82:74:d1:77:38:69:0c:22:9b:7a:79:99:c6:37:d9:0b:
         82:f6:18:d1:cb:26:f7:b3:93:5d:d0:a5:24:9c:43:ce:94:6f:
         69:fc:65:e6:81:bd:ac:04:d1:ba:d7:77:0c:6a:63:bc:3c:ba:
         c9:38:cf:59:a4:b6:e4:9d:d4:c2:e0:ae:22:c5:7c:79:66:fe:
         21:bc:37:8f:aa:57:cd:25:5f:ca:76:3d:09:5d:c8:b0:7d:7f:
         63:11:bb:fd:c1:48:42:21:7a:41:8a:eb:0a:02:74:79:0b:c5:
         f5:ba:cc:c1:02:53:c6:90:25:11:73:e7:c4:2b:5c:16:47:63:
         f6:f6:3b:e9:38:26:98:f7:c1:c7:76:fd:68:ef:02:d8:8b:75:
         51:c2:1a:f5:e7:df:a0:3d:9a:2b:97:6a:87:6e:49:1e:3f:d4:
         e8:84:2e:bb:ea:7d:36:b4:f0:82:a4:0d:66:c0:35:2a:8f:5e:
         bd:02:9c:a7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTJC25VSMu/SEuiaP3YicN36+thowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDU1NEUxMUQ5QjJDQTU3NEZENjJERDY4MDBDNzYx
MzYxREFGMjAeFw0yNjEwMTQxMzI5MTFaFw0yNjEwMTcxNzA4MTFaMDMxMTAvBgNV
BAMTKENGRUI5M0NFQTFGMTk2RUNFNzkwOENCNTNBODkyNDREQTFDREM1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1UUwvkXjWI3hoVAQImxuMQN3
KLScv6VnOcMS+qA3tC4bTEofEPY3JMDLk1s5biknUyJ9C6YPDBG16Wmjj0IzVYaJ
aegjykhUdvwZLckgR6RmZIgbxNbbP61l8SG5q589IOzDPkALNHy9QYuxkqzQ/sfv
eWKrvjrMJAPu7XBPGd7ZN/yvxkZhbNYUxJ5sxxxeXPCW5XcV8o7OMshBwVEkQ9O1
lmUhqf4IRpGLoT3Aw4SJYRNOJN7wwX3i+pF1d85oNUSF6VsLocTdScRdMbnNecdm
FGOByv+HzBOhWntqOB7o3BJBVlD88/abfcYGkJXj1Nti81jLm+Cfs19FJKbvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUz+uTzqHxluznkIy1OokkTaHNxbUwHwYDVR0j
BBgwFoAUlzBVThHZsspXT9Yt1oAMdhNh2vIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1NTM4OTg3OTU5OTEyMy8wLzk3MzA1NTRFMTFEOUIyQ0E1NzRGRDYyREQ2ODAw
Qzc2MTM2MURBRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvOTczMDU1NEUxMUQ5QjJDQTU3NEZENjJERDY4MDBDNzYxMzYxREFGMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4NTUzODk4Nzk1OTkxMjMvMC85NzMwNTU0RTExRDlC
MkNBNTc0RkQ2MkRENjgwMEM3NjEzNjFEQUYyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcMbylYxIX+g
wo9bWnhgqIdXsZMz90HaKYXljEpsAVOu4oo2JiHWtNIvd+9v7NlSDr9vfJAy22e7
DlnsoQ/TwcHcyYmCQWFhHM2CdNF3OGkMIpt6eZnGN9kLgvYY0csm97OTXdClJJxD
zpRvafxl5oG9rATRutd3DGpjvDy6yTjPWaS25J3UwuCuIsV8eWb+Ibw3j6pXzSVf
ynY9CV3IsH1/YxG7/cFIQiF6QYrrCgJ0eQvF9brMwQJTxpAlEXPnxCtcFkdj9vY7
6TgmmPfBx3b9aO8C2It1UcIa9effoD2aK5dqh25JHj/U6IQuu+p9NrTwgqQNZsA1
Ko9evQKcpw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:58:14 2026 by rpki-client