Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
File:                     5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft (raw, json)
Hash identifier:          l5ml4AXolmzXil8wfaGw50hcLIWiE4c7iA/3KHDQGFI=
Subject key identifier:   F3:19:DD:51:11:EA:B0:93:9E:00:2C:4E:7C:0C:C8:F1:DA:4B:1D:B6
Authority key identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E
Certificate issuer:       /CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
Certificate serial:       73074FAA130EE58EACF38555776B6E9347F6862A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
Manifest number:          48
Signing time:             Fri 24 Jul 2026 10:05:57 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 10:08:57 +0000
Files and hashes:         1: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl (hash: on0k+FL6k+tvuwDKYt1Ga+FgrE+tJ/GQ+YsgyRjzqYM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 10:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:07:4f:aa:13:0e:e5:8e:ac:f3:85:55:77:6b:6e:93:47:f6:86:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
        Validity
            Not Before: Jul 24 10:00:57 2026 GMT
            Not After : Jul 25 10:08:57 2026 GMT
        Subject: CN=F319DD5111EAB0939E002C4E7C0CC8F1DA4B1DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:59:f3:5d:87:9d:10:9f:e9:4c:2b:52:56:
                    e7:f7:bc:ca:b6:5c:50:3e:c2:db:71:a8:bb:06:ff:
                    cf:92:23:e0:32:84:e5:61:33:64:d5:c1:47:86:0e:
                    b6:04:93:20:cf:ec:94:c3:6d:70:63:49:03:96:8a:
                    03:b4:f5:33:99:e2:47:1b:4a:13:40:f3:1a:30:c7:
                    ac:8c:dc:5c:9d:01:1b:cc:fa:5a:de:2c:c4:f0:ea:
                    6f:ee:c6:ae:37:a7:5e:96:d1:91:84:23:34:79:39:
                    94:18:73:8b:86:07:47:75:95:0d:4e:ba:6d:42:5c:
                    0f:3d:98:3e:10:30:3c:29:27:fc:83:81:ad:5d:a6:
                    ec:67:42:ad:15:a2:a1:41:10:43:29:55:0f:a4:8f:
                    11:95:44:02:2e:70:19:6c:13:3f:6f:6c:02:3b:39:
                    ed:37:ef:a3:22:79:5b:cc:3e:5f:ac:50:4d:60:0d:
                    c9:2a:3b:ee:66:16:d0:38:e0:09:34:2d:18:11:6f:
                    4e:f5:52:fc:ac:85:83:23:8a:a0:13:34:13:03:b8:
                    03:66:ac:de:04:1e:85:d0:ee:dc:a4:56:35:5e:05:
                    8b:a4:d0:69:ca:7a:6e:c4:35:47:c6:d7:cf:df:4c:
                    15:ee:cd:27:a9:d2:d4:b3:2f:67:a6:76:34:7b:26:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:19:DD:51:11:EA:B0:93:9E:00:2C:4E:7C:0C:C8:F1:DA:4B:1D:B6
            X509v3 Authority Key Identifier:
                keyid:5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:28:93:77:70:af:ca:9a:fd:98:ab:f6:3a:fb:17:10:3e:
         b3:58:85:ae:9c:7b:d1:9b:cf:64:ec:0a:33:43:f4:03:b2:30:
         39:8c:ed:03:07:c6:f6:96:db:55:f4:4d:e6:89:fb:3a:b9:93:
         c4:10:4b:dc:6d:5f:02:2d:33:a2:a6:bf:c6:03:9c:65:ff:66:
         01:51:d1:12:b7:62:84:05:1e:ad:09:a7:ab:b4:ed:c3:24:31:
         39:e3:58:e4:85:99:70:37:37:d3:e2:d5:f3:13:1d:7e:0d:7b:
         35:42:47:32:18:09:e8:e5:34:1e:ad:1a:ae:2e:12:a9:4a:c4:
         e2:75:7c:52:5e:78:44:55:00:5a:9d:43:b8:21:4a:73:ee:3f:
         1e:89:de:57:2f:7c:60:e8:40:14:b1:70:42:01:1b:cb:e1:5d:
         ac:92:6b:0f:e9:55:fd:56:dc:ab:b0:4d:69:72:d9:09:ba:b4:
         f1:60:bb:99:cb:3e:1d:08:f4:af:bc:83:9a:e8:4e:d8:be:ff:
         c7:17:e1:ce:e8:b5:d6:7f:68:20:f2:79:d7:0b:9b:4a:96:a6:
         69:7b:1c:16:1e:af:29:43:a3:f3:f7:8e:b7:0f:e8:0f:e6:9d:
         37:aa:ca:c4:06:2a:01:78:04:cb:26:44:2a:aa:a8:3d:21:f3:
         c8:92:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:04 2026 by rpki-client