Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
File:                     4FC053560F4D1C49194F692E10C37F5A5CF08392.mft (raw, json)
Hash identifier:          AbyzXLOQlWleXAJxCEzTC+PGHhaIYmVF1STBmUHFj+0=
Subject key identifier:   D0:96:97:F2:F6:D6:3D:BF:C0:13:04:31:2D:F8:E7:69:56:52:7F:39
Authority key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92
Certificate issuer:       /CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
Certificate serial:       05A5A0A9F658A3AA64448DAF612B31F0075A6CC3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
Manifest number:          6E
Signing time:             Sat 03 Oct 2026 08:46:44 +0000
Manifest this update:     Sat 03 Oct 2026 08:41:44 +0000
Manifest next update:     Tue 06 Oct 2026 10:02:44 +0000
Files and hashes:         1: 4FC053560F4D1C49194F692E10C37F5A5CF08392.crl (hash: /SNLP5Nje8W44wHiCeFHI/esce4to3HMUIwXpXu2K68=)
                          2: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: c1jKmTjVWS1Ssy7RhbjqcS9tXZ98rv8e/VAjHzXLQos=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 10:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a5:a0:a9:f6:58:a3:aa:64:44:8d:af:61:2b:31:f0:07:5a:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392
        Validity
            Not Before: Oct  3 08:41:44 2026 GMT
            Not After : Oct  6 10:02:44 2026 GMT
        Subject: CN=D09697F2F6D63DBFC01304312DF8E76956527F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:be:14:1d:6c:e2:a3:42:de:2c:e5:8f:11:
                    ee:c1:09:96:4c:61:be:b1:6f:71:a7:4c:e0:77:bf:
                    3b:b7:6e:18:19:69:57:9b:63:a5:e1:a2:e1:6e:01:
                    a5:a2:cb:61:a9:5b:05:51:40:90:d3:f6:24:09:63:
                    92:81:52:b3:95:c6:be:7c:89:0b:4e:8c:15:36:cc:
                    0a:05:f0:54:90:d5:59:43:a4:aa:1e:45:52:ab:7c:
                    ac:ec:7e:91:ab:69:0f:ce:7e:eb:94:2c:8f:6d:d2:
                    fd:7f:87:20:61:0c:86:49:b2:36:3b:3d:38:a0:a5:
                    8a:2d:b4:41:78:93:ae:28:fd:4e:bf:42:69:27:6a:
                    9e:68:46:c9:08:0e:8e:d0:41:bf:94:2c:81:21:13:
                    45:b2:4f:c5:0e:ac:dd:50:11:15:9f:5b:9d:36:25:
                    dd:70:bb:c2:2a:68:47:99:9b:6d:cd:6a:ad:03:49:
                    7b:d7:ae:50:9e:2c:d6:91:21:74:84:93:ae:49:ef:
                    70:17:e4:fc:be:4a:4c:bf:43:bf:a9:9a:2e:85:98:
                    64:fd:39:c3:c4:8b:fb:72:57:72:6a:f3:d0:47:2b:
                    f2:cf:c0:ea:b4:05:a8:ad:aa:cf:84:77:c5:55:1e:
                    f1:f5:5c:23:4a:cb:86:55:41:92:4f:25:99:39:3a:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:97:F2:F6:D6:3D:BF:C0:13:04:31:2D:F8:E7:69:56:52:7F:39
            X509v3 Authority Key Identifier:
                keyid:4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:a0:11:ae:01:c2:70:93:b2:21:ef:65:11:f7:9f:21:03:
         b9:d9:1b:52:0a:be:32:b2:d6:14:b6:f1:ae:bd:45:ec:11:f9:
         de:bb:fc:ce:71:fa:7a:7e:a9:99:e1:73:78:52:cc:95:1e:f7:
         3d:cd:fa:99:9f:95:95:aa:01:e5:b9:43:02:86:98:44:03:59:
         ae:cc:09:47:28:04:39:31:3b:55:1b:74:51:80:54:38:94:b6:
         4c:88:aa:04:c0:ac:53:7c:5d:84:da:03:58:ac:90:99:c3:0b:
         ef:35:bd:9e:46:22:d9:7b:db:71:40:19:61:86:3f:b3:1a:f6:
         f5:bd:6d:01:ad:92:c6:71:d5:36:aa:60:de:fd:fc:02:93:18:
         c7:4c:c7:4f:de:8f:c8:75:3d:b4:0e:70:4d:81:53:86:6d:98:
         90:5f:56:47:ff:f4:1a:f3:a3:ed:4d:81:60:16:ba:25:ee:d2:
         7a:07:e8:83:92:9d:c8:ec:0a:3d:4f:a2:2f:4f:e3:4a:9e:c2:
         c7:85:e1:ce:8c:4d:f3:47:bc:81:2b:02:4b:c1:5e:d2:46:c1:
         62:46:82:07:e6:b9:9e:95:22:4e:9a:c3:e7:c3:eb:7e:29:3e:
         78:98:0c:38:bd:9d:ba:0e:21:a9:a3:7a:af:78:f9:30:69:e1:
         af:6a:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:04 2026 by rpki-client