Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
File:                     8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json)
Hash identifier:          Dhb3TOygrwZrrMsgKDK7eptx1AiLhAT/OS6UF7ljD/4=
Subject key identifier:   12:A7:09:9A:28:C0:BE:9C:F1:02:42:D5:3B:DB:98:62:2E:74:A8:AA
Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6
Certificate issuer:       /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
Certificate serial:       51B777D57F93824264900AB74C5631449FC7555F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
Manifest number:          013E
Signing time:             Thu 15 Oct 2026 09:36:39 +0000
Manifest this update:     Thu 15 Oct 2026 09:31:39 +0000
Manifest next update:     Sun 18 Oct 2026 14:07:39 +0000
Files and hashes:         1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: 1lfedDXthGNn/GRtX5jOm5RVATfb4eGaaf/H0OzPszI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 14:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b7:77:d5:7f:93:82:42:64:90:0a:b7:4c:56:31:44:9f:c7:55:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
        Validity
            Not Before: Oct 15 09:31:39 2026 GMT
            Not After : Oct 18 14:07:39 2026 GMT
        Subject: CN=12A7099A28C0BE9CF10242D53BDB98622E74A8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:3e:35:e6:9e:56:54:e5:bf:2b:c5:cf:ed:
                    4e:79:97:91:84:d4:52:71:80:ed:4b:3f:40:1d:c3:
                    d2:33:4d:a7:bf:4c:df:85:42:a1:92:46:e1:70:e3:
                    92:b0:23:39:b2:16:cc:95:a4:56:f2:4e:cb:50:15:
                    f5:12:cf:51:ae:29:1e:41:17:1e:2b:f2:8d:a8:57:
                    cc:34:6b:de:a5:b4:79:e7:bd:55:ff:27:14:19:21:
                    a2:14:79:5a:f0:18:ba:c5:f4:fe:5c:5b:85:c8:ff:
                    f1:91:3d:aa:56:bb:d7:6c:ac:c0:81:3f:6a:93:40:
                    d2:b6:3c:f1:2a:49:0b:c2:59:75:98:69:86:63:7c:
                    36:3b:e5:96:a1:90:85:48:f7:69:19:f4:94:fd:19:
                    87:9f:eb:51:3f:4e:24:1e:33:80:c8:6f:ac:84:13:
                    09:8d:00:d6:89:e9:a7:c3:f9:27:4d:bb:66:38:4c:
                    52:06:d6:1b:c4:c1:68:76:06:d4:cc:c4:2e:bf:03:
                    92:35:11:41:33:91:d3:52:91:01:72:4a:94:8e:de:
                    96:0f:4a:83:ad:50:04:19:26:d2:09:c4:d6:95:70:
                    84:0b:b2:d6:98:63:a9:a3:aa:50:49:7a:58:1f:ca:
                    13:ea:1e:a7:0b:d3:35:09:b7:26:c7:64:5e:08:d5:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:09:9A:28:C0:BE:9C:F1:02:42:D5:3B:DB:98:62:2E:74:A8:AA
            X509v3 Authority Key Identifier:
                keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:19:5a:08:3e:31:fd:56:e5:9f:5b:be:e0:b4:7e:d1:dc:
         57:6a:43:16:02:01:9c:71:56:8d:08:cd:d8:29:b6:e9:95:44:
         c3:ae:69:ac:df:68:28:cd:b7:19:49:f6:12:5b:e9:92:85:01:
         ff:1a:1d:30:fd:c0:8d:16:43:48:df:d4:9d:54:5d:bb:d9:ae:
         27:14:c7:ff:6d:d6:83:6f:11:39:1f:3c:40:4e:75:53:32:3a:
         80:ba:25:18:da:47:a7:67:bc:cf:af:7b:bd:6b:c4:6b:8b:a9:
         f5:79:04:01:b4:67:e5:3c:d6:34:e5:a0:50:8c:94:18:10:ff:
         fe:3b:22:58:c0:95:f4:d2:1a:32:48:ea:86:33:6d:a2:ac:f5:
         a6:60:7a:82:94:ec:78:36:95:3d:8c:56:94:b2:a7:63:67:2b:
         59:a4:e8:e6:19:88:22:6a:51:3f:bf:41:5e:ce:35:28:3f:06:
         cf:73:ac:a8:96:f0:5c:c1:3e:04:8c:b8:c5:ff:b2:d5:f4:a6:
         97:5f:39:99:31:e3:dd:2d:43:1c:5a:7e:f5:74:64:f2:f1:27:
         29:ae:60:6b:2f:b1:0f:45:8d:fb:f8:30:5c:c1:2f:3d:bf:de:
         e7:b1:4d:64:e4:81:41:cc:9c:97:b9:3a:33:6c:a0:c4:77:3a:
         60:d1:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 13:01:09 2026 by rpki-client