Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
File:                     C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft (raw, json)
Hash identifier:          srbIF8mc2noa7BkpMO/RGQcXyHs7zXJhebie8xXkt50=
Subject key identifier:   4E:6A:FC:02:D5:F3:33:CF:23:12:4E:43:81:58:00:24:A8:08:11:BA
Authority key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B
Certificate issuer:       /CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B
Certificate serial:       0E1776D3CD8A7ED3D9F95D12D4BA517FDD89C2DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
Manifest number:          84
Signing time:             Sun 25 Oct 2026 19:22:56 +0000
Manifest this update:     Sun 25 Oct 2026 19:17:56 +0000
Manifest next update:     Thu 29 Oct 2026 02:03:56 +0000
Files and hashes:         1: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl (hash: MU+SJqOaT7MG1R2PXDnQvby3YlsFTTJhfrpVno3/eX0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 02:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:76:d3:cd:8a:7e:d3:d9:f9:5d:12:d4:ba:51:7f:dd:89:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B
        Validity
            Not Before: Oct 25 19:17:56 2026 GMT
            Not After : Oct 29 02:03:56 2026 GMT
        Subject: CN=4E6AFC02D5F333CF23124E4381580024A80811BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ed:38:d6:0e:a3:ee:11:77:62:57:31:60:ab:
                    6c:5c:eb:e5:ca:0d:b2:f5:a5:2e:97:0b:02:62:88:
                    23:5b:81:50:c9:5c:55:93:1e:66:67:84:cc:9e:20:
                    a5:b1:1b:9e:ac:c4:d4:66:fa:18:27:e0:99:2d:b5:
                    be:ec:e5:f4:bc:c7:82:dd:4b:09:b9:8d:a3:4a:84:
                    ac:76:69:da:2c:2f:da:eb:17:6d:f9:29:e4:09:32:
                    5b:ea:75:7c:d4:f0:f2:1f:33:0f:d0:c1:63:47:a3:
                    fc:f8:86:df:28:df:42:fb:dd:c1:d6:6e:02:2e:b8:
                    91:94:08:05:04:2d:8d:4c:82:1c:04:9c:00:5c:a9:
                    56:64:e3:39:37:ca:83:78:52:39:0e:0f:ed:26:a0:
                    a1:d7:54:88:01:64:09:e9:ca:93:31:97:72:2b:6c:
                    7b:b8:89:fa:57:c9:6c:13:9d:fd:d5:c3:93:2f:31:
                    31:2b:f4:ba:ae:74:71:e3:6e:7d:86:f1:0a:70:0d:
                    d3:75:d8:1a:c5:2b:be:63:df:a4:80:c5:4b:27:0a:
                    11:b4:b1:70:5c:80:23:15:2e:68:32:f2:ab:f1:9c:
                    e4:71:2b:9f:16:62:02:48:5c:67:e0:a4:e9:02:18:
                    0e:a2:32:99:80:18:17:93:91:e9:08:bb:7a:78:5b:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6A:FC:02:D5:F3:33:CF:23:12:4E:43:81:58:00:24:A8:08:11:BA
            X509v3 Authority Key Identifier:
                keyid:C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:51:86:13:d6:2d:61:bc:c1:48:af:55:d4:57:06:4b:d5:c7:
         a0:ee:9b:84:a7:7e:5b:e4:3a:07:6c:31:9f:68:91:bc:67:70:
         f4:e2:50:1c:af:de:79:4e:8d:25:74:19:bd:93:a9:3a:35:5c:
         d9:8f:47:5f:bb:8e:82:96:25:27:48:5e:12:22:45:a5:27:a9:
         d7:ae:2b:95:f3:de:bf:66:fb:b9:5f:6b:c5:c8:01:d0:97:4a:
         1b:84:a1:1b:62:3d:70:b9:26:cf:f4:7f:0c:04:50:61:1f:05:
         09:32:30:02:75:7e:59:4a:c7:75:56:2d:4c:17:10:ef:70:57:
         1f:bb:34:a3:9d:ff:56:a4:14:e0:5b:89:15:62:dc:a9:c7:a7:
         4e:a7:f5:45:01:d2:e9:5c:b7:c3:1e:3c:f8:f0:c9:a2:45:43:
         e8:f2:b4:4f:b9:f7:34:21:32:ae:db:82:a1:ce:69:4c:93:17:
         bc:be:fc:ec:66:63:6c:a6:8a:b3:0e:d6:5a:83:e1:2e:aa:5a:
         d1:62:69:30:d0:56:68:93:37:27:02:13:ba:e4:10:0f:7a:18:
         08:af:58:48:09:4d:8f:f5:45:a4:37:6e:82:5e:83:a4:d0:f9:
         f7:f0:89:1c:a5:d8:55:a6:8c:24:02:0c:97:1e:66:59:69:2b:
         b6:41:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:23:04 2026 by rpki-client