Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
File:                     E31DF68687AB9050D1CF11727D6D9D126E30704C.mft (raw, json)
Hash identifier:          WIXjiG3v0LleXMNaewbCK6ez56TIEOl74wsMV5+CHWw=
Subject key identifier:   90:44:76:EA:1A:32:E9:AA:0A:58:E5:DD:BE:A3:CC:DD:6D:97:AB:EE
Authority key identifier: E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
Certificate issuer:       /CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
Certificate serial:       029AD4546B19ABF58E35A4026DD5EEF76432540F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
Manifest number:          47
Signing time:             Sun 18 Oct 2026 19:30:10 +0000
Manifest this update:     Sun 18 Oct 2026 19:25:10 +0000
Manifest next update:     Wed 21 Oct 2026 21:12:10 +0000
Files and hashes:         1: E31DF68687AB9050D1CF11727D6D9D126E30704C.crl (hash: GnILx208n+ZVv8JX1EoCqajayjseFLm5zRTU+0G4zYA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 21:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:d4:54:6b:19:ab:f5:8e:35:a4:02:6d:d5:ee:f7:64:32:54:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
        Validity
            Not Before: Oct 18 19:25:10 2026 GMT
            Not After : Oct 21 21:12:10 2026 GMT
        Subject: CN=904476EA1A32E9AA0A58E5DDBEA3CCDD6D97ABEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:f3:d9:51:bf:0f:a5:6d:53:3c:73:f4:e0:
                    69:8f:c7:b4:25:d8:73:de:c8:b2:e4:ce:0d:92:f4:
                    0a:b7:ca:83:f7:7b:cc:8f:48:f6:df:23:8d:94:17:
                    1c:94:3a:ff:81:24:b7:73:42:3d:7d:98:ee:5f:55:
                    22:4b:6b:42:0b:29:ea:f3:d4:b8:3b:82:b5:db:4a:
                    85:cd:a1:19:27:24:08:41:4b:4b:4f:3c:bd:6f:dc:
                    5e:d5:e8:4f:b6:c5:22:80:12:1c:82:26:85:07:ac:
                    25:94:8c:45:40:f4:bd:48:60:cc:4d:e3:6f:dd:9a:
                    89:65:00:b3:44:b1:cd:a9:ac:bb:39:e1:2b:21:1a:
                    0e:a7:9c:ed:a3:22:32:f9:56:2b:ea:a1:dd:e7:9a:
                    88:fc:9f:9e:68:9e:9b:39:09:50:35:3a:66:b3:39:
                    bc:ae:39:cd:3f:b6:66:7b:31:10:2d:d9:e4:e9:4f:
                    f9:a5:7c:55:89:d2:82:b7:b5:44:06:15:ed:ca:57:
                    b7:66:a0:4f:9d:03:77:ad:1d:40:66:99:d4:bb:38:
                    b9:08:d0:d5:10:16:a5:4b:92:1f:60:c0:ab:15:fa:
                    75:55:3c:bc:e0:17:13:25:c2:96:e3:6b:c6:c4:6e:
                    7d:df:d4:31:d7:72:11:49:4a:4a:08:5e:20:3e:d4:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:76:EA:1A:32:E9:AA:0A:58:E5:DD:BE:A3:CC:DD:6D:97:AB:EE
            X509v3 Authority Key Identifier:
                keyid:E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:6e:9f:6e:57:17:20:19:9c:6c:cb:fc:ba:0e:41:e4:b8:
         3b:31:12:d0:b0:28:34:78:13:2f:76:a1:a1:da:a8:e9:3d:2d:
         7b:b6:3b:a6:fe:b1:e9:6a:88:01:f9:92:8f:d6:ee:a1:8e:e0:
         87:73:b0:87:15:90:93:4e:31:2b:79:61:75:c1:68:54:4e:ce:
         43:5c:1a:c9:c2:ce:4c:8b:75:81:d8:b1:d8:ef:07:47:67:87:
         19:8d:b0:23:a0:07:32:d0:88:02:d8:35:bd:03:18:ec:0c:4e:
         3f:ad:a9:35:e9:93:a8:ce:0c:7c:06:33:3e:40:79:3c:fe:52:
         48:56:fe:a1:d3:27:7a:33:8c:02:cc:c1:57:5d:74:16:af:3b:
         71:a9:1d:4d:6b:54:8d:a0:70:4c:aa:11:c4:39:da:2e:70:a2:
         de:24:5d:98:b8:ed:68:ff:f3:ae:53:cc:72:d4:9f:76:78:ae:
         12:52:01:f5:ed:a7:39:ad:a2:cd:dc:1b:f8:f5:bb:50:bc:50:
         3b:9b:53:5f:04:79:75:5f:22:da:49:48:69:ec:8d:a0:3b:4f:
         a1:a5:03:1b:ea:3f:45:fb:31:27:b5:9e:ae:16:8a:92:c1:5f:
         bd:cd:8f:7f:b5:a6:af:55:6b:05:82:91:27:46:a8:84:3c:c8:
         13:d2:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:50:54 2026 by rpki-client