Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
File:                     8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json)
Hash identifier:          PKXpDGVWz82UxKVIdxz41OkmT8693eqNElPhPSUEAZg=
Subject key identifier:   29:CD:8D:0D:69:BF:9E:76:E1:50:FD:0C:30:7D:B4:E8:5E:BE:8E:93
Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
Certificate issuer:       /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Certificate serial:       573D0E38A5845B9894461FF200422573EAB85466
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
Manifest number:          12
Signing time:             Wed 13 May 2026 06:41:01 +0000
Manifest this update:     Wed 13 May 2026 06:36:01 +0000
Manifest next update:     Thu 14 May 2026 06:47:01 +0000
Files and hashes:         1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: /gi+nW6HlXv0nB3YKrSU+GzhWhx//yM2dg/o7mkYABQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3d:0e:38:a5:84:5b:98:94:46:1f:f2:00:42:25:73:ea:b8:54:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
        Validity
            Not Before: May 13 06:36:01 2026 GMT
            Not After : May 14 06:47:01 2026 GMT
        Subject: CN=29CD8D0D69BF9E76E150FD0C307DB4E85EBE8E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:8d:2a:19:e8:c7:4f:78:99:3d:c6:78:b0:
                    9d:d9:23:0d:9a:25:90:f6:bb:55:af:2a:a8:18:8d:
                    75:93:d7:a3:39:7a:42:45:e7:f4:83:bc:85:83:34:
                    8d:c1:b0:f4:6a:89:65:85:18:dd:3a:df:d4:96:17:
                    1d:c8:8f:f4:51:1b:ae:da:91:9f:50:bd:f4:30:b5:
                    7c:f6:95:53:00:1d:fa:cf:ce:19:89:5f:20:a5:bf:
                    23:85:71:05:c3:79:72:4e:35:59:8f:a9:17:9a:a0:
                    52:56:a1:29:00:7a:36:40:30:f7:ee:4f:66:ff:09:
                    4e:c5:4e:d3:ed:30:df:97:01:c6:83:23:16:29:6b:
                    1d:57:d9:0b:d2:b3:9a:75:e0:45:41:f4:22:34:55:
                    4c:c5:86:d2:56:53:16:73:1f:1c:71:03:a2:5f:c7:
                    c4:f7:ae:7c:ca:ed:db:b3:d5:f0:ca:75:f1:8e:d2:
                    2a:96:38:e7:9c:1f:06:46:42:38:7e:95:ed:d7:9c:
                    cd:94:da:e6:48:22:50:32:52:94:83:e3:bc:80:97:
                    e2:f1:c9:86:c6:7d:ce:02:74:52:9e:c9:14:34:e1:
                    5f:22:b6:12:f6:e5:88:60:bc:87:22:8c:1c:c7:c0:
                    fb:8a:5f:6f:fe:86:8b:f2:bf:95:19:fb:c4:60:69:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:8D:0D:69:BF:9E:76:E1:50:FD:0C:30:7D:B4:E8:5E:BE:8E:93
            X509v3 Authority Key Identifier:
                keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:3e:a0:35:da:22:70:3d:95:a2:28:ce:2e:6c:93:92:0d:
         06:e7:ec:df:1f:e6:92:f2:77:ac:5d:97:84:cf:a5:51:e3:58:
         6b:ab:72:2f:32:84:3b:a4:e4:7d:4c:cc:f0:ec:82:5b:85:4f:
         e7:34:e3:c0:02:1d:ff:26:5b:de:f5:5d:fb:07:6a:8f:3a:ea:
         9c:24:fd:f9:2e:32:f5:e3:61:27:ec:6a:91:18:0b:48:e5:7d:
         38:4b:af:4b:04:df:bf:25:70:79:85:ab:76:95:6a:c5:f5:55:
         91:34:ba:99:71:89:86:6b:75:55:48:1e:2a:27:1a:7e:9a:0f:
         c4:9f:da:fe:9d:75:5a:aa:28:92:96:00:ed:f2:3e:e6:03:fe:
         99:cc:31:3c:ba:b3:41:47:c6:fb:38:ad:7f:02:73:1a:e3:00:
         ac:61:16:4e:36:48:d4:16:65:61:2b:19:da:5e:de:8d:15:45:
         0d:83:19:e4:7c:74:75:15:fa:94:b7:29:1d:27:1b:b5:83:c4:
         b3:7b:77:31:49:e0:96:f4:c8:86:73:60:c7:a9:63:6b:d8:91:
         78:a5:92:8e:40:8e:40:20:c8:83:5f:55:3b:7f:be:77:bc:cf:
         73:5d:42:c9:ac:42:98:cb:7e:8a:72:2d:94:d7:73:db:ec:51:
         90:9f:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:54:59 2026 by rpki-client