Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
File:                     0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json)
Hash identifier:          m+N/Q1HJ3mB2sYY6XkhQs+2tk6801b/BMU7Pi2FH3Bs=
Subject key identifier:   9D:99:50:7B:B6:71:B2:2B:FF:C8:C9:9E:D9:28:1C:7C:DA:4A:97:C8
Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
Certificate issuer:       /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Certificate serial:       39B4C89466A22C515722D7DD25C65B2B5A4572BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
Manifest number:          D1
Signing time:             Sat 17 Oct 2026 06:38:34 +0000
Manifest this update:     Sat 17 Oct 2026 06:33:34 +0000
Manifest next update:     Tue 20 Oct 2026 14:32:34 +0000
Files and hashes:         1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: WNEEFDAAxpkJsMzC685f0JIhbpaAozjeUih9YBKAut4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 14:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b4:c8:94:66:a2:2c:51:57:22:d7:dd:25:c6:5b:2b:5a:45:72:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
        Validity
            Not Before: Oct 17 06:33:34 2026 GMT
            Not After : Oct 20 14:32:34 2026 GMT
        Subject: CN=9D99507BB671B22BFFC8C99ED9281C7CDA4A97C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:be:94:50:5a:b4:a7:59:ee:bd:5a:e8:7a:
                    59:a4:86:9e:6c:52:e7:b2:ec:38:68:d8:bb:57:27:
                    8e:d3:51:b8:b7:3d:ad:89:c0:4a:a3:44:b4:7d:ce:
                    91:a1:fc:d3:d8:8a:90:55:a9:17:1b:b2:52:b3:58:
                    01:dc:22:99:d1:d4:e1:73:fe:59:03:bc:5b:5a:2b:
                    4a:4a:de:fd:cf:65:a6:df:6c:39:56:ca:ea:94:fa:
                    ae:bc:c0:0a:bc:b9:05:46:33:d0:c0:41:74:43:66:
                    8a:0d:b3:bc:4d:c4:23:ab:30:30:c7:39:93:cd:24:
                    f7:18:a6:5b:86:ba:3d:e3:d6:65:13:0b:9f:39:a6:
                    16:cb:79:92:a2:2f:5e:27:e1:53:f5:99:78:e6:92:
                    fe:cf:fd:4d:fc:fc:73:17:f6:b7:91:9d:a9:a0:36:
                    6f:2e:8c:62:e2:2b:70:a7:eb:fa:77:d1:dd:f8:17:
                    ff:f2:07:4c:c0:a7:0b:96:ab:ef:eb:0a:7f:41:4e:
                    3b:5b:ae:56:1c:7f:55:34:6b:36:c7:46:35:2c:3b:
                    05:e6:90:e4:30:e7:24:7e:b0:bd:4b:ad:13:db:37:
                    30:b7:40:98:53:67:a5:75:0e:77:a6:2c:fa:b2:fc:
                    88:e4:64:55:fb:b5:97:17:a2:39:fe:8d:de:a7:5c:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:99:50:7B:B6:71:B2:2B:FF:C8:C9:9E:D9:28:1C:7C:DA:4A:97:C8
            X509v3 Authority Key Identifier:
                keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:38:37:bb:f2:ae:da:bf:3f:c9:ae:0f:ad:e5:3b:90:e8:76:
         0d:ea:52:f8:84:65:55:20:0b:fc:46:c3:07:8a:0b:69:a9:cf:
         d7:45:8b:4d:99:35:cf:2f:98:8a:1b:69:73:b6:e0:d9:dd:3b:
         5c:99:77:27:40:d8:8f:8f:ab:10:9a:46:c4:d9:cf:0e:57:c8:
         bd:42:21:b8:5a:96:bd:05:42:33:c9:2c:8f:b0:e5:46:31:6b:
         5a:f0:91:92:7a:a9:d6:d0:81:fe:48:ec:35:43:9e:71:2c:04:
         de:7d:d6:bb:4f:ca:23:60:87:1f:95:18:87:d2:ec:79:fe:12:
         45:b0:a5:07:e7:b6:81:d2:f6:dc:78:9c:b3:67:65:d3:43:22:
         97:9a:7a:33:88:4c:93:f9:12:68:29:5c:d4:fd:38:1e:f9:e7:
         db:87:7b:2e:6c:4f:c1:39:c2:e0:35:bf:29:43:2c:89:68:ff:
         54:2a:07:cc:4f:e4:d1:e6:42:4b:95:84:6c:c0:c9:b9:03:02:
         b3:84:fb:c2:0b:ee:48:8e:53:5f:7a:63:55:56:f3:11:b3:5d:
         61:2f:ea:26:e4:c4:1a:1b:40:5a:68:29:47:54:76:64:ee:f7:
         69:ab:c7:f6:13:7b:c7:1e:fe:33:6a:60:71:d5:91:1b:d6:43:
         a6:3b:dc:30
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUObTIlGaiLFFXItfdJcZbK1pFcrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG
Mjk0MjVBRDAeFw0yNjEwMTcwNjMzMzRaFw0yNjEwMjAxNDMyMzRaMDMxMTAvBgNV
BAMTKDlEOTk1MDdCQjY3MUIyMkJGRkM4Qzk5RUQ5MjgxQzdDREE0QTk3QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+76UUFq0p1nuvVroelmkhp5s
Uuey7Dho2LtXJ47TUbi3Pa2JwEqjRLR9zpGh/NPYipBVqRcbslKzWAHcIpnR1OFz
/lkDvFtaK0pK3v3PZabfbDlWyuqU+q68wAq8uQVGM9DAQXRDZooNs7xNxCOrMDDH
OZPNJPcYpluGuj3j1mUTC585phbLeZKiL14n4VP1mXjmkv7P/U38/HMX9reRnamg
Nm8ujGLiK3Cn6/p30d34F//yB0zApwuWq+/rCn9BTjtbrlYcf1U0azbHRjUsOwXm
kOQw5yR+sL1LrRPbNzC3QJhTZ6V1DnemLPqy/IjkZFX7tZcXojn+jd6nXKtjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUnZlQe7Zxsiv/yMme2SgcfNpKl8gwHwYDVR0j
BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF
OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5
QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDg3u/Ku2r8/
ya4PreU7kOh2DepS+IRlVSAL/EbDB4oLaanP10WLTZk1zy+Yihtpc7bg2d07XJl3
J0DYj4+rEJpGxNnPDlfIvUIhuFqWvQVCM8ksj7DlRjFrWvCRknqp1tCB/kjsNUOe
cSwE3n3Wu0/KI2CHH5UYh9Lsef4SRbClB+e2gdL23Hics2dl00Mil5p6M4hMk/kS
aClc1P04Hvnn24d7LmxPwTnC4DW/KUMsiWj/VCoHzE/k0eZCS5WEbMDJuQMCs4T7
wgvuSI5TX3pjVVbzEbNdYS/qJuTEGhtAWmgpR1R2ZO73aavH9hN7xx7+M2pgcdWR
G9ZDpjvcMA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:14:58 2026 by rpki-client