Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File:                     5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier:          QOuMuaTRL02OwdJTFjE0UPQliKKUkQXjpgSCqn+r7oE=
Subject key identifier:   6F:66:22:9E:40:64:C1:FB:35:C0:91:D2:57:06:CE:85:E7:39:EA:E8
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer:       /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial:       2B689A9E1BC155E7725B8FB2DE677D7A32900BF5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number:          87
Signing time:             Wed 14 Oct 2026 23:30:48 +0000
Manifest this update:     Wed 14 Oct 2026 23:25:48 +0000
Manifest next update:     Sun 18 Oct 2026 08:44:48 +0000
Files and hashes:         1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: mBtbY/xh0maT1LOI5sqNhzf3rjhFjg2zkECvprLEp4M=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:68:9a:9e:1b:c1:55:e7:72:5b:8f:b2:de:67:7d:7a:32:90:0b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
        Validity
            Not Before: Oct 14 23:25:48 2026 GMT
            Not After : Oct 18 08:44:48 2026 GMT
        Subject: CN=6F66229E4064C1FB35C091D25706CE85E739EAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:fb:64:d4:de:27:ce:3c:c8:70:8a:9a:47:
                    cb:c7:58:19:37:1d:43:5d:e0:28:40:50:6c:a0:2d:
                    60:26:f4:1a:df:76:ea:91:18:9a:37:ca:da:19:05:
                    a4:c6:e0:c0:0f:93:b6:55:e7:61:73:95:70:9e:15:
                    4d:0a:73:73:a2:d7:29:aa:49:ea:5c:97:1d:9d:9f:
                    6a:a2:55:9a:a0:91:9d:bb:5e:e9:50:d2:ff:40:3d:
                    eb:9d:42:b3:65:66:a4:55:a8:2a:9f:4c:2b:a3:9c:
                    e4:ce:bc:33:9e:da:e0:38:e0:fa:69:93:b1:1f:de:
                    7e:a8:59:6c:1d:67:ba:56:8b:f3:29:c8:74:1a:e2:
                    55:13:0f:c4:e9:da:9f:6d:cc:6a:4f:12:ea:85:c7:
                    cd:b5:3b:71:8d:5f:85:e0:12:d9:9c:f4:47:56:31:
                    e8:32:b3:f9:03:c4:9d:f1:7d:2f:0a:1f:a7:34:98:
                    0a:95:27:9b:bd:02:61:3b:00:e1:94:ed:e3:37:2c:
                    ad:60:bb:a0:7e:03:dc:2e:82:83:ce:8e:57:bd:d8:
                    d5:30:fc:ad:95:66:95:6f:c0:10:b9:92:c7:9b:8c:
                    f7:d5:77:46:96:94:f0:64:c0:0e:e7:e8:c5:e2:cf:
                    5e:90:d3:ed:f5:49:8f:08:ce:97:31:52:98:37:14:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:22:9E:40:64:C1:FB:35:C0:91:D2:57:06:CE:85:E7:39:EA:E8
            X509v3 Authority Key Identifier:
                keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:29:26:fb:fa:f9:ca:21:93:3f:62:1c:c4:b0:4b:f1:3e:10:
         a3:65:5c:cb:4b:31:04:74:3c:c3:74:0d:a7:da:0a:0a:d1:ba:
         b8:f4:6c:82:e2:80:7a:38:5a:7b:35:6a:97:71:f3:75:ed:e8:
         d7:5c:86:1b:53:22:b3:7b:1e:06:5e:19:1d:18:af:a8:76:2f:
         8c:e7:10:ec:00:d1:82:c7:dc:81:58:72:83:f0:4d:72:26:b3:
         18:b4:f4:4e:66:3d:b6:16:c3:17:a9:b6:f1:ac:d5:99:10:3a:
         e8:11:7a:c9:4d:2e:32:ba:f9:b6:f4:ef:92:f2:a0:62:b0:de:
         8f:5d:6c:19:c5:38:66:fb:f5:cd:ba:03:53:3c:7c:c3:5b:8e:
         4d:03:0f:9d:aa:b0:85:c1:5e:28:ee:87:14:3e:39:98:5f:c0:
         eb:1f:67:d9:b3:7f:55:e7:6a:9e:4f:b9:a1:9b:1f:a0:79:3f:
         f0:12:37:78:d1:72:2c:b1:66:ea:ec:62:02:32:35:c1:e9:49:
         7e:24:90:46:3a:d0:3a:a6:27:99:23:5b:01:b8:36:3c:c5:5a:
         12:fb:19:c6:a8:f4:90:d9:3a:0f:ad:92:7f:dc:6b:8a:e3:e2:
         55:e5:f1:58:de:a3:69:1c:a0:7e:2d:8e:70:85:0a:97:54:25:
         14:71:e2:a9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUK2ianhvBVedyW4+y3md9ejKQC/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFG
QjQ0QTg4NTAeFw0yNjEwMTQyMzI1NDhaFw0yNjEwMTgwODQ0NDhaMDMxMTAvBgNV
BAMTKDZGNjYyMjlFNDA2NEMxRkIzNUMwOTFEMjU3MDZDRTg1RTczOUVBRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Wftk1N4nzjzIcIqaR8vHWBk3
HUNd4ChAUGygLWAm9BrfduqRGJo3ytoZBaTG4MAPk7ZV52FzlXCeFU0Kc3Oi1ymq
Sepclx2dn2qiVZqgkZ27XulQ0v9APeudQrNlZqRVqCqfTCujnOTOvDOe2uA44Ppp
k7Ef3n6oWWwdZ7pWi/MpyHQa4lUTD8Tp2p9tzGpPEuqFx821O3GNX4XgEtmc9EdW
Megys/kDxJ3xfS8KH6c0mAqVJ5u9AmE7AOGU7eM3LK1gu6B+A9wugoPOjle92NUw
/K2VZpVvwBC5ksebjPfVd0aWlPBkwA7n6MXiz16Q0+31SY8IzpcxUpg3FBRhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUb2YinkBkwfs1wJHSVwbOhec56ugwHwYDVR0j
BBgwFoAUWmESv3y+4V2owAqFVrd1WvtEqIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NjkxMDExMzA1MTkwMTk3Ny8xLzVBNjExMkJGN0NCRUUxNURBOEMwMEE4NTU2Qjc3
NTVBRkI0NEE4ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFGQjQ0QTg4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMS81QTYxMTJCRjdDQkVF
MTVEQThDMDBBODU1NkI3NzU1QUZCNDRBODg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ikm+/r5yiGT
P2IcxLBL8T4Qo2Vcy0sxBHQ8w3QNp9oKCtG6uPRsguKAejhaezVql3Hzde3o11yG
G1Mis3seBl4ZHRivqHYvjOcQ7ADRgsfcgVhyg/BNciazGLT0TmY9thbDF6m28azV
mRA66BF6yU0uMrr5tvTvkvKgYrDej11sGcU4Zvv1zboDUzx8w1uOTQMPnaqwhcFe
KO6HFD45mF/A6x9n2bN/Vedqnk+5oZsfoHk/8BI3eNFyLLFm6uxiAjI1welJfiSQ
RjrQOqYnmSNbAbg2PMVaEvsZxqj0kNk6D62Sf9xriuPiVeXxWN6jaRygfi2OcIUK
l1QlFHHiqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:53:43 2026 by rpki-client