Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
File:                     F329F518724FAC695E33F5C78532CBF56BF4243D.mft (raw, json)
Hash identifier:          BvHfYDIbNLvH+Gu7bYZ2O56eRyAujf1F70LgWhjFRqM=
Subject key identifier:   96:0C:2C:D2:0E:0C:F8:C5:59:B1:4E:86:21:C3:19:09:C2:1F:E7:1E
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Certificate issuer:       /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial:       13BA8009FCAA92B3FCC4E24014C41A7D41145ABE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
Manifest number:          30
Signing time:             Sun 22 Feb 2026 23:57:30 +0000
Manifest this update:     Sun 22 Feb 2026 23:52:30 +0000
Manifest next update:     Tue 24 Feb 2026 01:53:30 +0000
Files and hashes:         1: 35392e3130372e36342e302f31382d3234203d3e20313334373733.roa (hash: 0zY22v6zj7Va/jjar+sQq7kCtTDD22I+jvz/eJrNkW8=)
                          2: F329F518724FAC695E33F5C78532CBF56BF4243D.crl (hash: eNPFWMqzt7k5Cr32vH2r7VWl3TQv0G8YS9Zed/XrR0U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ba:80:09:fc:aa:92:b3:fc:c4:e2:40:14:c4:1a:7d:41:14:5a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
        Validity
            Not Before: Feb 22 23:52:30 2026 GMT
            Not After : Feb 24 01:53:30 2026 GMT
        Subject: CN=960C2CD20E0CF8C559B14E8621C31909C21FE71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:01:43:cd:0d:13:5e:7e:d6:cd:cc:52:f9:
                    4a:0c:c3:48:89:67:6b:a1:76:e1:0d:db:0f:35:5b:
                    12:64:24:e4:da:d0:e4:d4:d7:69:57:07:5f:73:df:
                    92:15:b1:3a:82:6b:a6:63:5e:98:de:81:e9:d0:91:
                    bf:a1:cc:89:16:15:52:f5:8f:6b:61:43:18:7e:97:
                    8b:f9:fb:34:6a:0d:0d:a8:a7:67:9d:c3:91:e6:d8:
                    dc:27:c4:55:17:0a:86:c9:f7:2a:b4:42:53:bf:4a:
                    34:50:b8:28:d3:35:9d:23:7f:1f:87:d8:51:eb:ae:
                    46:c1:88:8f:87:0f:fa:a4:41:5c:43:a3:23:f4:d3:
                    18:15:bb:3f:ae:3f:35:9e:b4:f6:17:f8:43:7d:96:
                    a0:bc:d7:51:49:fd:0e:65:94:07:8c:73:09:c7:98:
                    68:76:7d:d7:0c:48:ab:01:9a:05:17:11:8e:c0:87:
                    1b:76:34:80:15:77:e0:79:c4:6f:b8:1a:21:05:e0:
                    be:21:f2:b1:eb:4c:3a:dc:f1:23:a6:a7:5f:37:41:
                    91:0a:97:53:3a:c0:4f:52:77:69:7a:d0:1e:a0:23:
                    e2:6a:53:bb:d5:83:a3:ba:11:dc:4d:de:71:a0:b1:
                    9f:00:fe:c8:3f:22:42:a3:08:6c:d8:68:d2:06:2a:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0C:2C:D2:0E:0C:F8:C5:59:B1:4E:86:21:C3:19:09:C2:1F:E7:1E
            X509v3 Authority Key Identifier:
                keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:22:3b:ee:0c:1c:d2:02:dd:a8:ef:2f:b3:ae:28:73:c2:41:
         d0:73:37:7f:96:36:1f:29:79:66:2e:27:be:5e:05:b4:ca:5b:
         c4:1c:40:e6:65:5d:70:6b:74:7c:d4:9e:86:90:ad:08:48:56:
         16:6c:70:9f:35:fb:39:11:b2:50:e2:e3:96:68:b1:26:87:f0:
         3e:20:42:f1:fb:4f:02:ef:e2:6c:22:50:3f:e6:f3:c6:69:68:
         be:39:3e:d1:cd:ed:5e:e0:9e:86:59:4f:d2:af:18:a4:e8:13:
         e2:4f:93:f3:a2:d1:67:b6:d1:24:34:7a:47:90:1a:5c:97:a3:
         a7:9f:fa:3f:05:31:37:cb:eb:33:77:11:35:58:af:ea:09:ed:
         10:33:1e:ff:0e:c0:1e:12:7f:79:28:a2:b2:18:99:80:90:77:
         67:34:b6:b1:f2:5d:95:49:75:72:f9:b2:e4:6f:39:fb:25:f4:
         87:25:b3:fe:de:a7:3c:f5:29:43:1b:ed:eb:9d:5e:14:73:66:
         0c:8c:f7:dd:4a:24:0e:4d:08:91:73:d9:84:c4:78:d9:36:e3:
         99:dd:da:ad:fd:e8:16:f7:eb:18:43:bb:88:5b:15:e2:c6:65:
         f7:54:46:3f:de:94:38:f4:e3:3f:b2:8c:2f:e2:ad:dc:b9:46:
         16:d3:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:08:15 2026 by rpki-client