Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File:                     82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier:          cAwbmTOc/pkrkxcCZ0/7ptUVKH8xWN5MYg8Aqr0eaaw=
Subject key identifier:   33:ED:56:81:CC:1D:A0:7C:77:BC:6E:F9:C7:F3:18:3A:CF:54:E3:0C
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer:       /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial:       7ED8ACA04484EEB569E66BB1576804368BF894C3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number:          7D
Signing time:             Sun 11 Oct 2026 03:45:12 +0000
Manifest this update:     Sun 11 Oct 2026 03:40:12 +0000
Manifest next update:     Wed 14 Oct 2026 08:22:12 +0000
Files and hashes:         1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: H0UTRJPw/MIzOyeOaU5LLFV4yQqtp3UllKe1Pwd3c4Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:ac:a0:44:84:ee:b5:69:e6:6b:b1:57:68:04:36:8b:f8:94:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
        Validity
            Not Before: Oct 11 03:40:12 2026 GMT
            Not After : Oct 14 08:22:12 2026 GMT
        Subject: CN=33ED5681CC1DA07C77BC6EF9C7F3183ACF54E30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:8f:a6:97:e1:31:f5:50:4b:77:72:92:a7:
                    9c:08:e6:e6:8a:f4:8b:d0:33:6f:bf:46:ef:fa:b8:
                    ea:2e:70:aa:0f:a4:fc:33:3c:c8:f4:91:6b:ec:7a:
                    ea:6a:d0:08:f8:e8:1c:3a:48:c7:b2:e1:00:dd:c9:
                    52:b3:b9:61:66:8f:30:86:39:98:b3:0b:85:62:b4:
                    bf:b0:35:b5:33:7a:c3:82:93:7d:7e:ad:a4:4d:61:
                    2e:74:40:17:71:0c:c1:e3:4b:23:2a:b2:f9:9a:1d:
                    02:ef:f1:1f:70:57:b8:d9:06:34:17:83:6e:35:a1:
                    e3:de:06:c5:17:51:1d:9b:55:b3:1a:d5:3e:9e:d2:
                    38:1d:7f:25:f6:24:d8:6a:66:8d:fc:fb:09:e9:e4:
                    03:dc:b7:70:c2:68:5c:6b:27:83:10:18:e1:68:40:
                    bc:a8:6a:fc:c0:f5:55:26:53:65:db:e1:d3:b5:3d:
                    3d:52:f6:6b:d6:3d:14:4b:ac:e5:5b:8a:56:be:27:
                    7f:0f:40:fc:d0:9a:ce:bd:bd:57:a3:fa:d5:64:1d:
                    7d:41:ff:a7:9c:7e:e8:5c:d8:3f:30:47:d6:46:14:
                    40:88:78:f4:00:cf:6b:01:ef:10:7b:a0:7e:dd:a2:
                    b8:35:a3:b7:7a:bc:3c:1d:76:29:15:bf:e1:1e:22:
                    4f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:56:81:CC:1D:A0:7C:77:BC:6E:F9:C7:F3:18:3A:CF:54:E3:0C
            X509v3 Authority Key Identifier:
                keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:23:15:4f:d6:85:f7:99:49:d9:9a:dc:db:cd:ae:5d:07:
         51:ed:2d:0f:3e:84:fd:b1:78:77:14:93:4b:6c:9f:3c:97:3a:
         84:18:09:f8:bb:84:61:7f:a0:0e:df:3b:6f:a5:7e:f2:ef:4e:
         00:3b:e6:04:b9:38:49:96:b9:75:54:93:50:58:01:b6:38:2b:
         8f:28:fc:31:b4:be:3d:1f:b6:2c:34:ca:0b:7c:bd:e1:67:12:
         1f:d4:c2:33:28:2b:f3:3e:54:1b:91:6f:7b:8f:e8:31:fc:ff:
         6d:b6:4e:57:5a:ac:a6:12:bd:c8:59:70:3b:60:4e:82:fd:ab:
         ce:6b:0c:8d:c2:f8:51:6e:63:e7:b4:fa:2a:cb:49:29:e8:61:
         d9:c4:41:91:78:5e:a3:11:1d:2b:5d:38:eb:16:00:67:7b:78:
         19:28:de:61:a6:22:50:30:bf:42:b8:90:79:0a:ec:95:27:37:
         99:10:47:5c:ce:dd:2d:93:9f:91:8b:09:a0:bf:32:4d:a4:fa:
         81:c7:69:04:e0:bc:ba:68:bb:8a:81:75:ab:fd:5a:60:f2:92:
         eb:9e:bb:17:bb:85:12:80:31:9b:56:80:18:d3:09:70:ac:54:
         45:35:e4:c8:2b:b0:d9:7b:91:c9:b7:08:a1:8c:cf:7a:2e:6e:
         15:7b:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:20:58 2026 by rpki-client