Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
File:                     0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft (raw, json)
Hash identifier:          2RrlkX9/Qy4SEBfe1m+g4i0ONughMk5C4Mippif2C40=
Subject key identifier:   FA:40:9D:67:FF:81:61:EB:2E:CD:BA:18:08:10:EE:EE:79:79:F4:DE
Authority key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3
Certificate issuer:       /CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
Certificate serial:       1799CE4133978683CC3AC7916F1C04B92914DCBF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
Manifest number:          41
Signing time:             Thu 15 Oct 2026 03:46:15 +0000
Manifest this update:     Thu 15 Oct 2026 03:41:15 +0000
Manifest next update:     Sun 18 Oct 2026 06:28:15 +0000
Files and hashes:         1: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl (hash: du+7gJK0g6wuKCZ02XjU+oq2odk5bhPl2/rEPBfu/6I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:99:ce:41:33:97:86:83:cc:3a:c7:91:6f:1c:04:b9:29:14:dc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
        Validity
            Not Before: Oct 15 03:41:15 2026 GMT
            Not After : Oct 18 06:28:15 2026 GMT
        Subject: CN=FA409D67FF8161EB2ECDBA180810EEEE7979F4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:54:e0:e0:66:8f:7e:a0:1f:09:06:d2:07:
                    ba:c2:7a:20:50:41:f5:ea:f4:49:67:f0:7d:db:27:
                    9b:5a:0f:f0:6b:ac:af:e0:68:d6:7c:bb:06:f4:a1:
                    e1:91:44:23:5e:d8:60:a8:79:8a:a8:53:24:58:9d:
                    21:1e:67:a2:46:ce:31:0b:c7:20:34:61:0b:3f:2e:
                    1c:a7:8f:a7:cc:7d:8d:95:7c:40:fb:34:c2:00:31:
                    eb:30:a2:20:73:b8:f7:dc:ba:54:dc:c5:85:5b:5b:
                    89:24:4d:f7:ad:95:21:01:27:d1:67:9c:83:6d:a7:
                    c7:df:4e:04:b4:27:e8:ed:90:15:dd:22:1b:5b:3d:
                    0e:9b:d5:23:bc:5a:a0:6b:40:6d:ac:69:c6:9a:6c:
                    ea:be:cd:bd:40:50:98:28:96:55:b6:a3:b9:b2:dc:
                    99:15:1b:5b:b5:fd:d0:02:51:a7:95:9a:f9:44:ed:
                    85:59:30:ae:29:6e:ea:9d:6f:f8:c6:92:b9:32:53:
                    72:49:a4:c0:9c:1d:2c:8a:f3:8a:8d:cd:61:1c:13:
                    12:cd:de:94:59:68:d4:b4:3c:6f:97:6d:c3:56:08:
                    e3:5b:30:56:96:13:47:bd:ee:e7:01:66:3d:a3:62:
                    9a:d0:16:78:d4:69:88:81:6c:87:56:4b:a4:02:12:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:9D:67:FF:81:61:EB:2E:CD:BA:18:08:10:EE:EE:79:79:F4:DE
            X509v3 Authority Key Identifier:
                keyid:00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:02:3d:fa:5e:08:78:76:8b:ad:63:be:e9:a0:9e:d0:54:
         7e:59:99:2f:08:b9:35:2d:9d:2d:17:db:9b:55:e9:66:05:7c:
         7f:71:96:eb:1f:ee:67:d5:03:61:54:77:21:37:01:68:e8:96:
         a6:ce:60:ff:d8:d8:1e:d4:ac:91:f8:08:81:fe:b7:9f:66:2a:
         a0:90:0a:b6:59:88:44:ce:59:e6:55:93:60:81:57:68:6e:af:
         d0:b3:78:f3:df:06:dd:aa:d6:a2:aa:71:ee:0c:41:c4:c2:7b:
         b7:b0:09:32:e0:ca:81:d5:24:70:06:e9:f0:f8:1a:42:52:ec:
         54:51:20:5f:ba:3a:d6:9b:08:2d:ef:b2:b7:04:52:f3:19:9a:
         a3:db:64:5d:73:cf:78:22:ef:9d:b0:3f:2c:4f:63:c4:5b:68:
         f4:32:de:00:e1:92:ad:74:6e:bd:36:c5:60:a5:ae:b8:a1:b3:
         32:0f:ab:23:0c:aa:2e:fd:5e:e5:48:16:62:97:16:68:4b:78:
         27:f4:de:80:77:83:5a:d8:47:bd:b8:4c:d4:16:f8:f4:31:98:
         46:89:7f:2e:bc:3b:27:a3:87:49:b5:c4:31:56:bd:8d:32:23:
         52:74:5d:67:12:0d:07:21:63:7b:8c:75:e1:e6:2f:b6:e5:5a:
         51:ab:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:49:06 2026 by rpki-client