Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File:                     F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier:          PjLrlWpjqDryIp6PyxZFa3F0x7iiraZ6OwiO5McivWs=
Subject key identifier:   53:2F:2A:5B:B1:4A:8F:29:8B:1A:6D:44:10:BD:7E:EB:53:57:7C:F2
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer:       /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial:       7150D4DC539AACCB5B3470C16550A04FDC2086BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number:          98
Signing time:             Fri 24 Jul 2026 15:11:32 +0000
Manifest this update:     Fri 24 Jul 2026 15:06:32 +0000
Manifest next update:     Sat 25 Jul 2026 17:13:32 +0000
Files and hashes:         1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: 8Mk6U6X6Tgy4Hy3ST+bNIU2QH5ZeVsP48M+lNT9E5TQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:d4:dc:53:9a:ac:cb:5b:34:70:c1:65:50:a0:4f:dc:20:86:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
        Validity
            Not Before: Jul 24 15:06:32 2026 GMT
            Not After : Jul 25 17:13:32 2026 GMT
        Subject: CN=532F2A5BB14A8F298B1A6D4410BD7EEB53577CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:10:6c:30:75:73:33:44:32:81:26:0c:77:
                    fa:94:47:6e:1b:65:67:a8:3b:77:1c:61:0a:3a:01:
                    72:fe:c3:59:9e:b3:c9:be:f6:b4:b3:04:a2:ac:0d:
                    9c:8e:e1:71:59:c3:e2:dc:d6:86:6c:c3:cf:ff:52:
                    52:16:c8:be:f2:04:29:6e:25:3e:8e:86:c2:36:87:
                    ae:bc:92:7a:0d:6d:5a:9d:07:ea:a4:1d:27:2f:5b:
                    f1:a6:87:f8:d1:f3:68:a8:e4:0c:04:5e:0f:db:b9:
                    e1:2b:c3:28:9f:82:94:93:16:2f:b9:4f:28:37:90:
                    82:82:09:c2:da:8d:7d:3c:b6:72:10:8a:d6:09:84:
                    4e:26:6f:f9:7b:f4:f1:65:03:74:62:ab:34:74:ef:
                    93:20:02:4a:61:4a:0a:bd:9b:66:50:0d:6b:fe:f5:
                    80:56:64:5b:e6:ec:22:34:17:05:f0:0f:da:da:48:
                    cc:82:52:7c:5a:92:db:a0:4e:63:f1:8a:aa:6f:ec:
                    75:73:9c:01:36:8c:44:be:cb:e5:bb:e1:f2:70:e5:
                    e1:47:c1:06:67:25:2d:9d:0c:d8:5f:43:3d:84:b1:
                    4b:fe:48:d0:47:6c:6d:bc:20:d3:70:4b:42:5a:14:
                    36:c8:3e:4c:fe:90:f9:d6:e5:54:92:a6:bc:aa:5d:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:2A:5B:B1:4A:8F:29:8B:1A:6D:44:10:BD:7E:EB:53:57:7C:F2
            X509v3 Authority Key Identifier:
                keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:6a:5b:45:46:39:d4:e1:f3:7e:3b:b0:80:ac:06:36:88:
         20:fd:3e:26:df:b3:36:93:85:0e:26:1e:e9:00:19:fc:96:0f:
         5d:b6:02:54:a3:7b:63:c2:83:dc:19:e2:b2:87:38:bf:bf:18:
         54:d8:8a:9f:d0:7c:a6:b0:ab:50:d3:4f:90:0c:ac:87:bc:15:
         4e:ab:26:43:9b:e6:02:9e:85:d9:04:8c:74:b8:15:a1:37:0a:
         c6:37:d1:8f:36:12:8e:2d:d7:89:15:b6:a0:5c:77:a4:b6:ee:
         39:c1:d6:61:26:dc:20:5b:cb:b0:42:7e:40:8e:46:48:9f:f9:
         53:91:d9:02:2b:80:ce:46:77:6e:97:28:c4:34:fa:88:65:ce:
         b1:7a:a3:56:0e:b4:a3:73:3c:c3:30:37:b3:ef:98:29:b5:bc:
         da:84:8f:0e:95:44:2f:c6:8e:e5:34:f7:fa:14:e4:b1:89:4c:
         7a:ce:b7:fd:66:a8:c5:c2:b2:2b:55:d3:ef:26:ec:19:84:14:
         2d:34:ba:c3:91:74:92:88:62:56:56:da:73:bd:60:c5:11:7b:
         9d:44:e1:a1:60:d4:d3:2c:fc:64:62:d9:ae:d1:41:7c:af:e6:
         63:ef:fe:d7:07:e7:7b:d1:f8:3b:ef:4d:5e:ea:80:00:e2:3c:
         95:f6:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:40 2026 by rpki-client