Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File:                     5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier:          G98jrpALLxRJopupPINTXZ5eeZnIf+IIBpzPqB9KuPI=
Subject key identifier:   DF:5E:2E:99:83:78:A1:8B:E4:BA:E2:16:F2:0E:E0:51:2A:41:B1:3D
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer:       /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial:       21928F210ED59C2AFB94AC7EE588F4533B686102
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number:          86
Signing time:             Mon 12 Oct 2026 19:17:19 +0000
Manifest this update:     Mon 12 Oct 2026 19:12:19 +0000
Manifest next update:     Thu 15 Oct 2026 23:30:19 +0000
Files and hashes:         1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: rj+LprgOLoK6rZhLgZ7gs+q/iNlnm1yMjAcOhLResWI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:92:8f:21:0e:d5:9c:2a:fb:94:ac:7e:e5:88:f4:53:3b:68:61:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
        Validity
            Not Before: Oct 12 19:12:19 2026 GMT
            Not After : Oct 15 23:30:19 2026 GMT
        Subject: CN=DF5E2E998378A18BE4BAE216F20EE0512A41B13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:c6:89:f0:58:2a:0b:77:2e:01:72:e2:26:
                    77:c5:b7:4a:2b:4f:f2:ff:45:54:0c:49:8f:2d:2f:
                    88:d0:be:4a:ec:8a:12:fe:a3:6a:2d:8e:f7:18:a1:
                    32:c2:0f:92:c4:9a:87:5f:8a:6d:aa:97:c6:aa:fb:
                    bd:3a:fd:87:98:ac:c4:f7:78:a5:e1:6c:8c:1d:9a:
                    b3:7d:26:0a:ec:70:e8:1f:f5:17:28:e1:ef:5e:95:
                    8e:7d:10:16:0e:bd:9f:5c:c6:b4:14:a4:65:9a:eb:
                    08:b8:47:f7:b7:ed:80:74:8c:97:76:0e:06:c1:8f:
                    6f:05:42:11:43:69:40:25:be:69:ca:db:88:24:e4:
                    02:c0:3f:b1:3d:ca:68:ac:f9:c2:25:ad:c7:86:e0:
                    17:b3:11:1f:29:cb:de:99:70:04:7d:03:51:73:0b:
                    77:6e:65:8d:dc:de:b4:07:a6:2c:9c:32:b9:9d:38:
                    31:2a:a9:4e:10:93:fe:b8:43:6c:17:ae:57:ca:4e:
                    f9:42:16:c0:81:a1:40:33:e5:6a:8b:88:13:1d:db:
                    d1:ce:ca:0f:80:2e:8a:54:cd:b0:dd:e3:08:86:98:
                    a1:b0:71:a8:e1:e8:6b:76:b0:f0:83:82:d2:94:9d:
                    1c:62:b6:05:02:a5:97:83:44:ca:92:a3:d5:22:07:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5E:2E:99:83:78:A1:8B:E4:BA:E2:16:F2:0E:E0:51:2A:41:B1:3D
            X509v3 Authority Key Identifier:
                keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:63:53:07:6f:4d:bd:99:6f:91:3c:54:ce:ae:22:42:57:e5:
         25:02:55:2b:e6:76:28:af:da:96:4a:52:ee:c5:08:b8:e1:42:
         7e:ef:a1:f4:9a:f3:de:a0:9a:bf:c4:e4:5f:aa:94:c0:c1:39:
         44:96:50:a7:66:43:17:7e:2e:b3:0b:83:74:ff:26:56:dc:61:
         f2:f6:71:8c:db:67:b6:47:9c:9b:e2:8e:fe:40:c9:22:f3:4e:
         e6:42:3f:2f:57:09:00:cf:f0:3c:7a:51:72:14:03:4d:0c:f9:
         24:57:0e:b8:f6:02:4c:ed:1e:f1:d0:b2:5b:c5:58:0a:76:6e:
         a0:e5:d8:26:22:9b:3c:2e:7d:e1:92:bd:c1:d4:d8:d7:ed:33:
         f9:fa:92:9f:2a:3c:56:26:c2:2d:64:e1:58:67:a6:3d:ab:1c:
         0b:a4:53:37:af:a9:42:5d:9d:b8:4d:c3:69:17:7a:b9:4e:2b:
         bc:6f:77:8e:b1:8c:de:c5:d9:31:ef:44:9e:0e:36:d2:06:c4:
         ee:c4:1d:8e:86:f2:b7:5a:36:d5:25:72:d5:10:2c:1d:2e:9b:
         6d:18:01:9a:93:dd:8e:26:73:71:07:e9:14:f9:6f:9c:15:7c:
         e1:f9:8c:0a:02:10:76:cb:c8:df:01:33:94:60:5d:59:98:47:
         6a:20:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:19:01 2026 by rpki-client