Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
File:                     58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json)
Hash identifier:          07twd0EFGA4e5fM+u5ZM0qoeL412AZCb1cdGGu1camk=
Subject key identifier:   86:11:1F:D3:DF:12:95:5D:5A:19:63:20:05:AE:DD:D4:28:2C:FF:A6
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Certificate issuer:       /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial:       57B22915CB8BFF07E02719E3284C71134A84AB6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
Manifest number:          9A
Signing time:             Wed 13 May 2026 18:46:06 +0000
Manifest this update:     Wed 13 May 2026 18:41:06 +0000
Manifest next update:     Thu 14 May 2026 19:29:06 +0000
Files and hashes:         1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: mRXBVL7oLKfuHB19NuN4MFC+ixnwL2pQf3CCqdp9CjI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:29:15:cb:8b:ff:07:e0:27:19:e3:28:4c:71:13:4a:84:ab:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
        Validity
            Not Before: May 13 18:41:06 2026 GMT
            Not After : May 14 19:29:06 2026 GMT
        Subject: CN=86111FD3DF12955D5A19632005AEDDD4282CFFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:ed:b2:ab:8f:c4:a8:55:51:e4:4d:4e:7a:
                    e9:48:1d:0c:58:93:55:ef:9c:d7:1b:ec:fb:d6:b5:
                    8f:9d:a5:2c:05:35:d8:85:86:8c:2e:e0:f9:e8:ee:
                    f8:6c:3e:ae:fb:90:ef:23:06:31:e1:ac:7d:cc:dd:
                    a4:b9:9d:ad:38:b5:86:53:3a:c7:e3:23:fb:0d:cf:
                    4e:a6:a9:d6:06:87:b6:5c:dd:30:85:ce:25:74:f2:
                    b4:0a:ea:79:1b:39:f6:06:b2:e3:5a:0d:7a:83:0a:
                    be:31:23:a6:b7:60:4c:f7:e6:29:b6:d5:87:e3:7f:
                    ea:a8:c4:4a:0e:00:3d:cf:ff:4b:cf:0d:df:bf:d0:
                    82:e5:98:68:36:8f:55:20:14:b5:d8:02:df:9b:38:
                    4b:34:24:a6:17:1f:97:e3:5a:a3:35:61:55:fe:fb:
                    ca:f0:7e:87:a2:b4:99:73:04:f6:f7:a2:cf:c7:a0:
                    fb:77:0a:7e:81:b5:e7:e7:fc:37:bb:4f:1c:ee:de:
                    dc:6a:3f:22:9b:a6:ce:2a:7f:02:10:4e:07:31:7e:
                    5c:c6:36:04:a4:51:01:2e:c4:03:07:f0:8f:8f:33:
                    eb:4b:d0:32:a1:df:fb:6d:00:24:8d:48:3e:97:d3:
                    1e:ed:1b:99:77:59:b2:05:04:de:46:2e:e3:cb:f2:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:1F:D3:DF:12:95:5D:5A:19:63:20:05:AE:DD:D4:28:2C:FF:A6
            X509v3 Authority Key Identifier:
                keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:77:9d:8d:fe:12:b4:ab:07:87:55:be:b7:08:bc:0f:7e:aa:
         fe:96:19:a2:06:4b:cd:6b:42:d8:47:bd:8c:25:ed:d9:9a:0e:
         a6:d3:2f:f7:64:e0:87:c2:8e:be:f4:10:0e:9c:32:b0:58:54:
         fe:4b:6d:4e:f4:ff:ba:0f:ab:31:83:4e:2e:6f:8a:53:ed:4b:
         50:e0:a2:54:cd:48:af:ad:34:d9:1a:35:7d:34:6d:dd:e1:76:
         ce:25:19:d6:aa:8e:c3:64:d3:9c:5f:51:13:47:c0:56:68:03:
         70:c3:63:f5:4f:aa:61:13:a0:5f:b9:b8:dc:9a:b4:42:11:de:
         ae:0b:a4:68:61:ce:78:06:00:2d:d0:06:3f:20:6a:00:99:c2:
         5f:31:58:a1:0d:00:a5:35:8c:7d:55:1d:59:ba:72:e6:c6:bf:
         79:f0:ea:83:50:c7:e9:91:d6:1b:a8:8f:ad:42:46:a0:27:85:
         a2:f0:1b:bf:2c:51:20:79:87:d0:f3:29:4d:77:32:2f:a5:39:
         6b:69:1f:0c:de:cc:4f:5a:bd:9b:88:33:9b:97:f4:71:cb:38:
         c4:12:e0:78:ec:df:a0:c7:3e:52:31:1a:dd:2a:d3:aa:1d:4c:
         04:6c:0a:4e:fb:fc:cf:a6:f3:98:b5:67:02:1a:84:79:45:51:
         08:c3:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:33:06 2026 by rpki-client