Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
File:                     56BE48FB7406C26DE662EBF89202C679B0854CE8.mft (raw, json)
Hash identifier:          ja7Zvd8qrq0xAKTuAYdUB0IMvJgM5I/LTh02gASR1ho=
Subject key identifier:   02:86:04:F2:FF:7C:D3:92:22:6F:9B:C3:64:66:8B:7A:60:C3:93:87
Authority key identifier: 56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
Certificate issuer:       /CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
Certificate serial:       055FF8ADA88F4D0DAC10F22796FCC0BF0902DD65
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
Manifest number:          3F
Signing time:             Wed 13 May 2026 08:41:03 +0000
Manifest this update:     Wed 13 May 2026 08:36:03 +0000
Manifest next update:     Thu 14 May 2026 10:48:03 +0000
Files and hashes:         1: 56BE48FB7406C26DE662EBF89202C679B0854CE8.crl (hash: LB043uRPqwVWcIvaFQ2zTkDhZAIyQYPtMA8DEGjLdDg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5f:f8:ad:a8:8f:4d:0d:ac:10:f2:27:96:fc:c0:bf:09:02:dd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
        Validity
            Not Before: May 13 08:36:03 2026 GMT
            Not After : May 14 10:48:03 2026 GMT
        Subject: CN=028604F2FF7CD392226F9BC364668B7A60C39387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:da:a1:70:2e:5a:da:d0:03:16:e0:57:27:
                    d9:21:6e:09:de:ad:31:3f:d9:77:81:00:f7:f8:e2:
                    85:bb:ba:c2:e3:3f:a0:f3:20:fb:00:8f:0c:20:56:
                    08:51:40:17:6d:c4:0c:ba:c1:3f:f1:ee:9a:1c:01:
                    33:3c:ce:da:52:78:c3:71:15:0b:5a:9c:b3:9c:64:
                    8d:bd:12:ee:a8:b6:71:d2:e4:0c:ca:5e:2e:7f:3a:
                    2d:50:d3:72:09:08:98:f4:b3:30:c9:57:eb:e4:b8:
                    73:9a:37:75:12:21:e0:84:36:ce:68:f6:55:f4:5a:
                    7a:16:b7:3b:3d:b9:a2:96:ee:d7:00:57:75:51:51:
                    9d:5f:48:8c:41:8a:da:15:12:4e:42:31:39:53:e0:
                    70:85:e7:8c:cc:f4:96:52:af:01:4f:f5:f3:51:55:
                    56:f7:34:41:a3:f0:41:1a:a9:43:b1:e6:9c:33:df:
                    7f:c5:13:b8:d5:82:19:77:50:09:bc:2f:eb:83:21:
                    f3:eb:49:e2:fb:9a:4e:3a:c5:fd:f7:d9:2e:52:9d:
                    e3:cd:6f:dd:09:79:5a:d7:dc:14:09:5d:8e:d0:30:
                    ee:37:67:f7:90:9b:1c:10:e9:c7:60:e4:f0:1e:75:
                    93:cb:6f:b4:b8:a5:31:16:8c:c2:64:55:cb:42:1d:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:86:04:F2:FF:7C:D3:92:22:6F:9B:C3:64:66:8B:7A:60:C3:93:87
            X509v3 Authority Key Identifier:
                keyid:56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:89:38:b7:16:43:98:3d:c6:e5:1b:5b:f9:64:da:f0:df:
         d7:d9:9a:35:36:4c:b2:59:e2:8e:d7:29:94:ed:12:01:3f:69:
         b2:23:f4:2a:c5:23:16:0d:0d:68:be:c4:ec:75:3e:ce:f3:a1:
         64:53:d7:f1:65:b4:fc:0d:d2:d0:47:f2:42:6e:94:f6:15:be:
         fa:90:9e:fd:d0:db:b9:26:1c:f3:8f:2e:08:52:6e:38:5c:b1:
         1d:5a:77:be:4c:74:ac:25:d4:d6:13:d2:fc:c1:59:5a:16:71:
         63:e2:ad:75:6a:0e:4f:0e:be:29:e7:e9:ea:7d:62:ff:5d:5b:
         03:cd:99:24:9c:e9:a8:85:ce:ec:85:39:ab:c4:e2:14:f5:bf:
         8d:1e:1d:9d:a9:3b:f5:69:0a:33:9f:00:f5:82:fa:9a:d9:7a:
         2e:52:97:db:11:1a:ca:93:98:98:72:ff:fe:c9:9a:35:b9:24:
         59:80:74:af:58:5c:10:6f:71:da:9e:05:71:36:12:f7:3d:ad:
         e5:53:d7:8e:4f:41:ab:b6:bc:7c:62:64:39:45:d3:a1:12:0f:
         39:c7:20:99:b4:5f:85:fc:f9:b4:72:54:53:56:93:74:a8:71:
         79:6a:7c:82:8b:68:28:d9:5f:29:8f:98:85:0a:46:97:f1:91:
         13:7d:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:11 2026 by rpki-client