Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
File:                     5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft (raw, json)
Hash identifier:          qHhNRzezCRd6laI38ST44yPu7EvMn2s+NKre+TluLlQ=
Subject key identifier:   D6:97:E2:1B:51:27:DC:C7:B4:1D:F8:3E:36:DE:61:BA:AC:4F:FB:13
Authority key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
Certificate issuer:       /CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
Certificate serial:       2BA1664828EB0173A746450717E15535F13BD4C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
Manifest number:          88
Signing time:             Sun 18 Oct 2026 22:30:16 +0000
Manifest this update:     Sun 18 Oct 2026 22:25:16 +0000
Manifest next update:     Thu 22 Oct 2026 09:59:16 +0000
Files and hashes:         1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl (hash: zMJDwfH//R1edYQRjzXu5NveoMDuFd5gzMyv4uJYoPU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:66:48:28:eb:01:73:a7:46:45:07:17:e1:55:35:f1:3b:d4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
        Validity
            Not Before: Oct 18 22:25:16 2026 GMT
            Not After : Oct 22 09:59:16 2026 GMT
        Subject: CN=D697E21B5127DCC7B41DF83E36DE61BAAC4FFB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:43:da:cb:30:48:97:f3:25:28:5e:d7:16:
                    40:6f:70:54:25:a3:d8:65:23:4a:1f:2d:bd:cc:06:
                    e1:ec:43:59:9a:5c:a6:1a:f7:4b:2f:e0:59:45:50:
                    08:14:d6:0d:bb:de:98:84:79:c1:dc:98:95:92:ff:
                    c2:d3:7a:3e:73:d9:3d:ed:d7:ca:4e:55:57:6b:3b:
                    f4:01:cd:4c:46:4d:fe:97:42:13:06:e6:a4:b3:45:
                    3b:4d:27:32:7a:b6:e3:24:c1:12:2a:7d:9a:3a:c5:
                    84:48:b0:6d:b7:13:f2:36:8c:b7:c2:33:9e:2d:8e:
                    10:2b:9c:86:77:81:a1:e0:4e:ca:a6:a0:90:fc:00:
                    09:e0:18:f4:2b:db:8f:8a:3b:69:bd:f5:53:63:8c:
                    a2:57:d5:1e:0b:9e:1a:20:e1:65:5c:aa:0c:b8:1c:
                    71:33:28:f7:e7:bc:75:ba:48:b0:bb:c1:0f:a9:a6:
                    da:59:2d:f8:e6:da:bd:0d:07:08:3a:22:32:d3:e6:
                    f6:da:4c:fc:18:1e:d7:45:24:57:be:16:2f:2e:c8:
                    a3:a2:57:fb:c8:69:ac:0f:22:14:7a:6d:fd:3d:d8:
                    ed:ca:20:68:7e:3e:60:6c:2d:3f:e5:a5:0e:c1:22:
                    03:75:d2:64:03:47:bb:06:4f:fb:9a:bb:40:bc:d8:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:E2:1B:51:27:DC:C7:B4:1D:F8:3E:36:DE:61:BA:AC:4F:FB:13
            X509v3 Authority Key Identifier:
                keyid:5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:cf:ca:22:01:a1:bf:4b:6d:3d:2f:65:66:38:f5:4d:d8:
         f2:2f:05:09:d4:26:68:03:5a:92:fb:8c:6d:04:7d:53:58:3a:
         fb:98:ab:9d:83:28:aa:91:4d:83:7f:60:39:a7:26:ac:ed:a4:
         c0:87:eb:f6:99:b4:f9:3d:1e:fd:8f:43:39:28:ec:54:84:b6:
         02:38:67:fa:fa:64:45:f5:ce:1a:31:4d:d1:bf:3b:83:19:42:
         ca:83:ee:76:e8:e2:1c:c1:88:fc:1e:8b:4c:15:69:92:01:f4:
         c2:9b:df:79:77:db:46:b1:64:67:f4:57:2a:f6:5b:33:d0:13:
         34:ca:59:33:01:7c:06:69:2b:6f:02:2b:b5:b1:19:20:e6:01:
         28:90:33:55:f4:e9:15:27:3e:29:5d:c2:24:2d:8c:ac:74:ba:
         b3:ea:6f:c7:88:07:d0:fe:33:73:96:e6:4f:ac:02:ee:90:11:
         86:63:ec:c9:ad:c7:be:3a:d8:75:d1:93:4a:0c:94:46:93:13:
         3a:06:7f:50:12:fe:93:3c:2a:e1:fc:69:22:8c:5e:f7:59:f9:
         c2:27:34:5e:03:5a:d0:6b:9d:ed:19:64:a7:62:9d:55:21:d5:
         51:6e:cb:41:75:d8:b4:73:cc:8d:ec:af:bb:59:99:58:92:8c:
         f6:ae:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----