Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File:                     5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier:          1lNbModiBHhuhrPFuOqmC/J6TRCKVT0f7SZKm3AcrG4=
Subject key identifier:   89:52:B6:37:D1:44:0E:7D:EC:5C:D1:70:7A:13:17:11:52:57:BE:0D
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer:       /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial:       05C55D9FC38F3CAC28FB61C3415914224D38309E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number:          44
Signing time:             Fri 24 Jul 2026 20:12:02 +0000
Manifest this update:     Fri 24 Jul 2026 20:07:02 +0000
Manifest next update:     Sat 25 Jul 2026 21:47:02 +0000
Files and hashes:         1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: MzKpbetEb6T0b3GYDUtGmesrWkmj51Ui5fQb5KsmFrk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 20:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c5:5d:9f:c3:8f:3c:ac:28:fb:61:c3:41:59:14:22:4d:38:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
        Validity
            Not Before: Jul 24 20:07:02 2026 GMT
            Not After : Jul 25 21:47:02 2026 GMT
        Subject: CN=8952B637D1440E7DEC5CD1707A1317115257BE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:7c:49:79:3b:92:19:04:2c:1f:d0:1b:ae:
                    92:bf:33:0e:84:98:5f:55:51:85:7c:2f:57:f9:60:
                    55:ec:6e:b9:8d:48:b5:5a:4e:6f:9a:ec:70:38:f7:
                    f4:60:96:79:f5:8e:42:6d:f8:a3:d2:1b:33:44:20:
                    a1:2b:eb:19:d2:5f:29:9f:32:59:c9:fe:86:d9:9f:
                    a8:36:20:76:76:d1:1f:8e:4d:81:b1:97:c4:07:18:
                    6f:8a:88:74:f3:d6:a3:af:75:15:cf:1c:43:ca:a1:
                    4a:54:0b:0d:96:be:db:20:45:0b:b2:8a:f8:a1:56:
                    87:12:f0:79:60:ec:7d:98:fa:96:77:1b:20:a8:94:
                    79:70:17:f1:ef:8d:7c:31:34:76:52:93:af:e0:3b:
                    27:79:88:bd:e8:98:49:1f:a0:64:59:da:28:a7:cc:
                    0e:5f:67:01:b2:b1:1a:0e:32:e0:50:d0:f4:c8:79:
                    cc:74:60:e6:f7:0e:2e:1d:bc:55:52:af:31:1f:fb:
                    c7:77:84:e9:87:b0:43:f3:fd:3d:e3:0f:b5:5f:12:
                    f6:31:3e:b5:b3:48:f5:4e:07:a3:1a:6e:b1:09:7d:
                    66:e2:1f:43:e7:22:a8:c3:46:18:eb:ac:75:72:66:
                    74:83:d6:36:00:7d:30:32:ee:bb:8d:b5:cf:0e:42:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:B6:37:D1:44:0E:7D:EC:5C:D1:70:7A:13:17:11:52:57:BE:0D
            X509v3 Authority Key Identifier:
                keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:4c:6e:8f:9a:7b:31:4f:67:82:82:d6:1f:d3:d1:65:44:84:
         3a:18:fc:c4:39:15:be:5f:71:e2:42:8f:4a:36:8b:4c:7f:26:
         e2:20:5c:26:44:1f:02:78:38:de:d9:b1:e2:9f:39:91:a9:53:
         a2:48:13:cf:a3:d1:1d:b0:e5:20:86:66:08:f1:d1:9f:8a:f7:
         a3:f1:d1:a0:a2:b6:cd:8e:1b:b1:9f:40:ed:bd:4f:82:19:cd:
         a8:b6:b1:72:b5:1d:63:80:e4:a6:9c:3e:ac:6c:06:22:08:81:
         d2:a2:ed:b0:bb:cb:ae:2d:5b:e8:35:a9:ba:95:bf:44:d6:1f:
         a6:06:72:73:4f:80:b4:08:02:b9:3c:01:ae:46:41:a1:7e:2a:
         d7:b8:73:6b:3b:59:52:9d:4a:9d:c1:a9:ae:ee:59:c9:86:36:
         3e:0b:ca:14:70:21:6a:25:a9:21:a4:4a:c7:09:bc:61:dc:9f:
         57:ca:eb:71:60:63:b7:75:20:c8:4e:91:a8:6d:8c:84:96:0d:
         6f:dc:12:12:cb:a0:43:bf:44:ae:47:85:18:e6:4e:23:26:0b:
         92:5c:22:7c:5d:25:a9:d4:30:4b:bf:c6:6b:35:eb:9c:c6:16:
         4c:73:f7:08:28:c0:77:41:52:83:0c:34:ed:13:48:af:a0:ae:
         b7:b2:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:25 2026 by rpki-client