Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
File:                     8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json)
Hash identifier:          mLXXEkJHbNL38pRdk/GYHWCIzjzuUzhhC7/CM1HQbdY=
Subject key identifier:   32:2C:88:46:C6:6F:A6:14:D7:20:C9:D2:74:77:AE:74:9C:DC:3E:B1
Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C
Certificate issuer:       /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C
Certificate serial:       56046BBDDF6AFEE60FB02B1A7C5549C1F48B4CC4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
Manifest number:          4E
Signing time:             Mon 12 Oct 2026 06:11:43 +0000
Manifest this update:     Mon 12 Oct 2026 06:06:43 +0000
Manifest next update:     Thu 15 Oct 2026 13:56:43 +0000
Files and hashes:         1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: 9eNdS9/HHyht7CT1K1xWfkh5UAEmJn7SP8j+7IQgBtw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:6b:bd:df:6a:fe:e6:0f:b0:2b:1a:7c:55:49:c1:f4:8b:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C
        Validity
            Not Before: Oct 12 06:06:43 2026 GMT
            Not After : Oct 15 13:56:43 2026 GMT
        Subject: CN=322C8846C66FA614D720C9D27477AE749CDC3EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1b:3a:b2:76:39:1b:90:66:01:a3:12:cb:db:
                    fd:b8:0a:ed:cb:78:98:15:8a:3a:03:7c:98:bf:0e:
                    86:88:d9:5c:23:95:ca:e6:ee:bc:56:38:97:fc:26:
                    7c:d4:bb:d9:b7:83:a1:f4:f4:cc:8f:b0:e3:90:82:
                    10:a6:26:6b:9c:ee:ab:08:86:5b:d5:32:c8:4c:2f:
                    f3:1b:5a:33:d5:65:22:6e:a6:3e:92:83:32:4b:69:
                    34:01:0d:88:36:87:80:45:ca:81:c6:16:fc:27:bd:
                    89:59:cf:6d:51:d0:3c:76:7d:37:5a:d8:b9:01:9d:
                    0e:b2:fe:df:72:2a:1d:b7:4f:20:a4:f6:55:5b:9b:
                    c2:45:65:99:c1:72:7f:a8:11:fc:c8:f7:bf:27:4a:
                    a2:ff:ec:58:12:3e:cf:82:32:21:d3:f8:69:32:ec:
                    ac:3e:58:80:15:e7:93:13:1b:92:a1:03:32:93:cf:
                    b5:bb:96:d0:e2:19:f6:8b:ba:84:bc:c9:7f:2e:96:
                    85:c0:b9:68:8f:30:be:6a:12:6c:7f:d5:63:16:07:
                    3c:c2:fe:e6:3e:b5:ca:6e:07:1c:6b:20:01:55:c5:
                    a0:ad:3f:11:f2:41:d7:a3:f9:e0:72:98:5e:f8:d9:
                    d0:df:57:98:6b:c9:87:24:37:a2:e2:a4:c2:43:3e:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:88:46:C6:6F:A6:14:D7:20:C9:D2:74:77:AE:74:9C:DC:3E:B1
            X509v3 Authority Key Identifier:
                keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d1:ef:d0:12:8a:91:26:0c:4a:db:0a:ce:ab:0d:d6:93:ce:
         d0:16:61:1a:2d:7b:7d:b4:3e:cc:8b:f0:9d:d4:20:01:96:fa:
         f5:5c:90:d6:b3:ad:37:a6:2a:60:a5:b5:cd:d1:33:97:a8:22:
         68:ab:fb:0b:7f:11:b5:99:20:85:d6:51:d0:4f:72:61:73:a3:
         f9:4c:3d:8e:5f:02:5e:75:cd:29:f7:ae:70:7a:3a:09:ac:07:
         a2:44:f2:75:a1:dc:54:8c:bd:ad:77:7e:d3:e9:cc:a2:37:d9:
         81:31:df:f7:4b:7c:5f:92:20:03:ab:b8:44:01:1a:54:47:92:
         09:be:4d:82:89:35:65:57:94:b3:2e:ee:a7:51:1f:7c:91:f6:
         e3:b5:af:70:af:9d:e0:de:68:23:b3:d8:12:5e:e4:2d:71:15:
         c3:f3:5f:f2:6e:0e:cc:57:4c:d4:86:3a:65:1c:3e:78:76:f6:
         b1:64:fe:05:a8:1d:8c:9a:ff:ec:6d:c4:c1:f3:c3:63:f1:8c:
         84:9f:ef:39:84:4b:1f:67:3f:68:11:0d:c6:dd:58:15:6d:86:
         86:5d:77:da:d7:1a:d5:27:39:46:20:98:bf:7f:a1:9d:c3:46:
         6d:bd:b6:87:b5:dd:50:3c:19:cd:92:c2:80:64:83:88:5d:1e:
         d6:88:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:54:54 2026 by rpki-client