Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
File:                     56BE48FB7406C26DE662EBF89202C679B0854CE8.mft (raw, json)
Hash identifier:          gpamdWvUvrU3Gxo17fuv+ySjqAIBNtRpDN8MqGNM1UA=
Subject key identifier:   5D:20:78:EB:22:1A:63:5F:A9:60:BD:97:26:9D:9E:8B:1A:A4:EA:F6
Authority key identifier: 56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
Certificate issuer:       /CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
Certificate serial:       19091A17C25AD60D45545A533F3C37D4A0EED0DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
Manifest number:          E3
Signing time:             Wed 14 Oct 2026 11:49:04 +0000
Manifest this update:     Wed 14 Oct 2026 11:44:04 +0000
Manifest next update:     Sat 17 Oct 2026 14:47:04 +0000
Files and hashes:         1: 56BE48FB7406C26DE662EBF89202C679B0854CE8.crl (hash: bJ+3Qyy/uESvOtX6ia1+8JX8juM4tY/bfSBptfbpbrk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:09:1a:17:c2:5a:d6:0d:45:54:5a:53:3f:3c:37:d4:a0:ee:d0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
        Validity
            Not Before: Oct 14 11:44:04 2026 GMT
            Not After : Oct 17 14:47:04 2026 GMT
        Subject: CN=5D2078EB221A635FA960BD97269D9E8B1AA4EAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:d1:7b:13:99:09:8e:75:e8:1d:96:4d:98:
                    76:fb:0f:e0:6b:f4:13:31:a3:2b:ec:b6:25:32:4a:
                    00:4f:c6:08:96:30:ac:74:fb:c3:09:5b:31:60:83:
                    29:d7:4c:19:92:1c:ac:c2:9c:ff:80:ee:01:cd:f1:
                    29:d9:a6:a3:9f:9a:67:a7:e1:1a:64:76:7d:4a:2f:
                    c2:2c:74:79:06:c3:d0:98:46:94:0c:c9:71:91:ed:
                    55:88:35:6b:7d:28:13:59:02:a8:10:4c:90:07:3a:
                    2c:b6:16:ea:58:07:a9:5b:9b:59:15:ab:72:56:8e:
                    3a:eb:3c:3f:95:73:a5:e6:37:e6:05:96:1b:a7:9a:
                    97:83:dc:36:60:70:23:36:de:c7:ab:9f:a4:0e:2f:
                    72:c8:b3:7c:a7:e5:74:5b:7f:be:6d:f7:9c:61:6b:
                    ac:b3:9a:3c:81:37:98:05:63:6e:6a:04:92:c1:81:
                    07:15:fd:64:60:83:9b:a0:46:2e:27:67:d5:9d:c7:
                    86:9c:91:bb:69:5c:e2:a3:23:b9:73:0f:69:93:7a:
                    40:8f:a6:85:7b:56:9c:4c:41:11:c4:2b:0f:66:b6:
                    fb:32:07:77:be:c4:42:92:de:4e:8c:16:40:84:9b:
                    a7:5e:11:90:d7:d4:0d:f8:56:c5:e6:0b:03:3e:29:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:20:78:EB:22:1A:63:5F:A9:60:BD:97:26:9D:9E:8B:1A:A4:EA:F6
            X509v3 Authority Key Identifier:
                keyid:56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:cd:ab:47:96:db:1b:27:12:a5:26:40:fe:40:97:f3:dd:
         10:d0:01:8b:43:55:97:84:15:ba:fa:dc:72:63:9b:5f:66:03:
         c2:ec:66:44:ee:ed:4c:c0:92:ff:57:7a:f5:ca:5b:36:cb:29:
         dc:db:0c:45:80:90:07:fb:3c:a9:ab:3f:e8:a2:d1:52:8d:80:
         f3:5d:45:69:e7:88:61:8a:2e:04:2c:d5:34:8b:42:68:07:49:
         2e:75:b0:49:43:fc:96:c2:ae:61:03:03:29:8e:90:95:39:c5:
         36:cf:0f:97:30:4b:c9:dc:73:80:5c:07:e2:ab:a6:60:a8:9b:
         cb:37:2c:a4:00:bb:2b:61:0c:a8:77:a5:af:f1:cb:ef:76:1a:
         e0:ac:39:c2:76:0a:7f:af:8b:dd:0d:39:09:ef:dc:bc:91:17:
         34:aa:45:cc:3b:71:94:dd:e6:97:6f:4f:73:92:c6:75:9d:86:
         aa:1b:21:eb:a4:b0:5f:04:42:71:3b:e8:1e:33:9a:72:ed:7b:
         83:2c:2b:b3:de:d6:eb:82:57:6e:4b:c5:98:e9:1d:d8:c7:c0:
         8e:43:67:72:a1:12:fb:b9:3f:92:1e:a1:9d:66:ce:07:b2:68:
         0c:54:e1:e0:c2:50:03:e3:32:82:be:ea:66:cc:7a:4e:3e:44:
         d8:c6:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:54:52 2026 by rpki-client