Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
File:                     8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json)
Hash identifier:          sCg7xxYkU4rAcEwkOGfGWzrXsvYLHCKhfXDR9zY4JSA=
Subject key identifier:   6B:5B:4F:08:CF:DA:6B:E2:B8:D9:FC:35:09:EF:AC:C8:B3:75:DC:77
Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B
Certificate issuer:       /CN=8A05255B735973D13F97609E45A6D000FBCD953B
Certificate serial:       132F4FA590943EB924C2AED1397680F884F2777F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
Manifest number:          C8
Signing time:             Mon 12 Oct 2026 18:32:16 +0000
Manifest this update:     Mon 12 Oct 2026 18:27:16 +0000
Manifest next update:     Fri 16 Oct 2026 06:21:16 +0000
Files and hashes:         1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: SvI+0tQBQL4OfpH6CI44pzisslTELaERIehlhCjZLzI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:4f:a5:90:94:3e:b9:24:c2:ae:d1:39:76:80:f8:84:f2:77:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B
        Validity
            Not Before: Oct 12 18:27:16 2026 GMT
            Not After : Oct 16 06:21:16 2026 GMT
        Subject: CN=6B5B4F08CFDA6BE2B8D9FC3509EFACC8B375DC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:69:ac:3a:41:34:ec:72:22:c1:75:3e:7d:
                    74:65:40:a4:49:5d:7d:86:59:d0:ce:3a:ab:84:28:
                    9a:79:f2:e5:ae:fa:ac:b8:74:4b:c1:8f:95:ef:05:
                    47:49:ef:cd:a3:50:88:4c:d4:81:d3:a3:32:5a:73:
                    57:b4:4a:57:4f:26:f3:16:88:ce:f1:f9:2e:e0:d8:
                    92:1c:fd:87:78:bb:9d:fb:c5:c6:01:10:7b:08:19:
                    8d:46:d8:21:6a:aa:d7:5f:88:64:b9:28:42:34:ac:
                    4a:95:bd:40:f2:12:e8:c0:7a:e0:91:e0:6d:10:bc:
                    45:df:5a:99:2f:a9:19:ab:11:2a:72:60:9c:2b:3e:
                    77:36:1f:b9:63:d2:6c:58:f7:ef:28:ce:d3:82:c5:
                    64:7f:f1:eb:22:99:2b:3e:ee:0e:cd:cf:31:19:49:
                    b1:6f:0c:39:05:be:1d:1b:ef:2a:fb:2e:99:41:6a:
                    9e:16:fe:7d:5f:ec:c1:ab:6c:6f:64:99:20:a9:ea:
                    49:05:6d:35:58:88:40:99:c2:94:db:d0:80:07:08:
                    5e:80:ff:36:33:76:a0:cc:19:3f:19:5d:bf:91:d1:
                    14:68:4c:39:d7:c9:0f:3c:f3:8a:55:a2:36:ee:90:
                    d5:37:2d:f6:2a:22:2f:8d:69:3a:1e:12:2d:30:9e:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:4F:08:CF:DA:6B:E2:B8:D9:FC:35:09:EF:AC:C8:B3:75:DC:77
            X509v3 Authority Key Identifier:
                keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:fe:45:9c:dc:2d:d3:9e:10:70:99:b9:95:7e:25:9b:c5:
         f9:c2:ca:92:1b:35:c3:c8:e9:eb:6f:53:47:34:92:7d:4d:a5:
         4e:b5:1c:7e:f9:37:33:f4:8d:65:66:31:13:2d:8b:06:cd:83:
         8f:82:d2:c5:aa:be:8c:c8:26:a9:f5:25:62:47:0a:1e:2a:05:
         30:42:00:62:4a:b6:fb:75:65:f5:17:fe:63:ad:0d:7b:3c:a2:
         5c:e7:cc:94:5b:fd:12:67:74:cb:7f:4c:b5:a7:76:b5:34:68:
         d1:49:c6:0b:64:b3:d1:bf:e2:fb:6c:65:5e:2f:ab:6a:0f:ee:
         83:7b:8f:08:7b:b1:81:19:04:b3:91:21:1d:c9:cd:9e:a2:ff:
         4a:d9:81:90:c4:a6:43:e7:ae:27:cf:30:bc:ad:a1:be:ed:54:
         8d:f1:ae:6d:91:90:af:62:f5:ba:93:a1:ab:fe:99:38:74:00:
         c5:0c:4e:a3:66:9f:96:3a:19:f3:f0:27:8a:5e:eb:b1:58:8a:
         35:43:b6:c8:8c:c7:53:f1:15:dd:d8:7a:e2:6c:8b:d2:3e:70:
         15:14:7b:be:e6:a8:75:9c:8a:74:12:a5:a5:27:52:6d:87:34:
         17:40:a7:73:dd:28:6f:3d:da:ee:fe:23:eb:0e:7d:7d:16:5e:
         33:28:39:d7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEy9PpZCUPrkkwq7ROXaA+ITyd38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBG
QkNEOTUzQjAeFw0yNjEwMTIxODI3MTZaFw0yNjEwMTYwNjIxMTZaMDMxMTAvBgNV
BAMTKDZCNUI0RjA4Q0ZEQTZCRTJCOEQ5RkMzNTA5RUZBQ0M4QjM3NURDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNmmsOkE07HIiwXU+fXRlQKRJ
XX2GWdDOOquEKJp58uWu+qy4dEvBj5XvBUdJ782jUIhM1IHTozJac1e0SldPJvMW
iM7x+S7g2JIc/Yd4u537xcYBEHsIGY1G2CFqqtdfiGS5KEI0rEqVvUDyEujAeuCR
4G0QvEXfWpkvqRmrESpyYJwrPnc2H7lj0mxY9+8oztOCxWR/8esimSs+7g7NzzEZ
SbFvDDkFvh0b7yr7LplBap4W/n1f7MGrbG9kmSCp6kkFbTVYiECZwpTb0IAHCF6A
/zYzdqDMGT8ZXb+R0RRoTDnXyQ8884pVojbukNU3LfYqIi+NaToeEi0wnhETAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUa1tPCM/aa+K42fw1Ce+syLN13HcwHwYDVR0j
BBgwFoAUigUlW3NZc9E/l2CeRabQAPvNlTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA3MTgxMjE1NzcwMjE0NS8wLzhBMDUyNTVCNzM1OTczRDEzRjk3NjA5RTQ1QTZE
MDAwRkJDRDk1M0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwNzE4MTIxNTc3MDIxNDUvMC84QTA1MjU1QjczNTk3
M0QxM0Y5NzYwOUU0NUE2RDAwMEZCQ0Q5NTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrn+RZzcLdOe
EHCZuZV+JZvF+cLKkhs1w8jp629TRzSSfU2lTrUcfvk3M/SNZWYxEy2LBs2Dj4LS
xaq+jMgmqfUlYkcKHioFMEIAYkq2+3Vl9Rf+Y60NezyiXOfMlFv9Emd0y39Mtad2
tTRo0UnGC2Sz0b/i+2xlXi+rag/ug3uPCHuxgRkEs5EhHcnNnqL/StmBkMSmQ+eu
J88wvK2hvu1UjfGubZGQr2L1upOhq/6ZOHQAxQxOo2afljoZ8/Anil7rsViKNUO2
yIzHU/EV3dh64myL0j5wFRR7vuaodZyKdBKlpSdSbYc0F0Cnc90obz3a7v4j6w59
fRZeMyg51w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:38:08 2026 by rpki-client