Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
File:                     5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json)
Hash identifier:          NxRM2zlXJC5kz073CBiFDX/+Yso5vofPniMOM1Gv2w4=
Subject key identifier:   D8:D6:FB:20:FA:4C:63:C0:C8:E1:8E:A1:59:87:E6:59:24:71:38:87
Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
Certificate issuer:       /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
Certificate serial:       17DC921226A80A1211BCE99ADA951A31458A7601
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
Manifest number:          08
Signing time:             Sat 13 Jun 2026 21:22:14 +0000
Manifest this update:     Sat 13 Jun 2026 21:17:14 +0000
Manifest next update:     Mon 15 Jun 2026 01:20:14 +0000
Files and hashes:         1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: FWkwNbTqGi0tJTn/vMQpClN5JmT9ztrg2QgCr86vvAY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dc:92:12:26:a8:0a:12:11:bc:e9:9a:da:95:1a:31:45:8a:76:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
        Validity
            Not Before: Jun 13 21:17:14 2026 GMT
            Not After : Jun 15 01:20:14 2026 GMT
        Subject: CN=D8D6FB20FA4C63C0C8E18EA15987E65924713887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:8c:88:14:9b:5b:88:97:1f:5f:98:13:d6:
                    53:a1:b4:f5:fc:67:8c:0d:c9:4f:54:04:77:d3:15:
                    91:94:69:4b:df:6b:c8:07:7c:5c:6e:ab:e1:4c:49:
                    09:c3:45:1b:88:07:ba:f4:6d:f8:d3:08:3c:a4:2d:
                    df:bf:fc:7d:e1:9a:be:ff:24:3c:bd:01:fa:d0:2b:
                    43:7d:af:83:89:25:6d:e4:5f:f6:4e:da:6a:f0:ef:
                    b7:fe:47:bf:eb:9e:d8:7e:00:a7:07:53:ff:d9:08:
                    6b:f7:e6:30:bc:a9:94:64:6e:e1:fb:41:b1:5b:b8:
                    3e:04:60:a6:a7:ce:d1:d1:06:82:20:c1:6c:66:77:
                    d7:d0:d3:32:f6:99:89:b4:6d:bd:c7:bc:1d:7e:0b:
                    6d:85:77:7b:a8:b1:96:7e:ed:e2:9d:c6:47:5b:64:
                    dc:41:23:cd:1b:1c:d0:4c:13:f5:d6:31:f5:84:81:
                    b6:17:23:72:76:39:2d:92:c5:d4:81:f7:14:18:23:
                    12:48:29:23:a1:ed:7d:47:24:cd:07:26:71:47:dc:
                    4b:8f:25:39:8c:d5:14:4e:7d:f1:9d:a3:63:03:81:
                    3f:bf:b1:6a:97:b7:63:bb:46:a7:02:0a:32:7e:4a:
                    53:50:85:6f:d8:aa:51:e5:e7:82:80:a1:37:ac:d9:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:FB:20:FA:4C:63:C0:C8:E1:8E:A1:59:87:E6:59:24:71:38:87
            X509v3 Authority Key Identifier:
                keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:a4:fa:5c:bc:95:63:6e:44:b5:8b:e0:49:84:c2:55:db:
         73:46:14:83:76:86:bb:78:db:8d:ea:39:03:6b:e6:32:84:c9:
         85:80:6f:59:ad:a9:3f:7c:b4:70:5f:1c:7c:3f:da:1b:6f:54:
         c8:1a:ca:14:7f:eb:fc:b8:05:ba:08:6e:2e:3a:2b:ae:ba:ec:
         67:0f:b6:0c:dc:02:1c:36:de:fc:9a:c9:6a:37:9d:3b:65:5a:
         e3:5c:7b:15:d0:c9:38:3b:81:34:41:19:f4:a0:49:e8:e6:95:
         ec:39:46:1a:c4:47:9b:b4:c6:40:bd:20:65:c0:db:1a:1c:5e:
         c5:68:32:67:ef:07:93:ea:aa:47:08:2c:23:11:72:dd:51:fd:
         c3:b0:ee:91:7d:c3:a7:7c:9e:dd:af:1f:07:cb:82:b0:e8:1a:
         cd:94:86:c8:b5:31:db:f5:f1:d8:a3:a7:76:12:e1:13:a0:30:
         f7:2b:6f:1a:ef:ce:cb:c0:11:fd:65:fb:e8:ae:26:24:13:14:
         a0:c7:5e:c3:4e:17:4c:43:09:26:cd:b9:60:75:2f:cb:a0:b9:
         0d:d3:99:1a:1f:da:98:b8:a6:63:9b:84:55:22:62:05:c9:f9:
         00:7a:45:0a:f3:41:f2:58:7d:13:4d:dc:0d:71:6d:c5:5e:04:
         2b:ac:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:13:03 2026 by rpki-client