Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
File:                     16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft (raw, json)
Hash identifier:          /AZf72cl54mn+XuD6uDNb3Al0XGR406OEHvUMN2Pyo8=
Subject key identifier:   C3:97:8D:85:1D:E8:2B:2B:EA:EE:72:F3:2A:23:8B:5E:F1:EF:46:33
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       49701813F8BC59FF7292FBD0FD58682B2531FD95
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
Manifest number:          3A
Signing time:             Tue 03 Mar 2026 19:13:20 +0000
Manifest this update:     Tue 03 Mar 2026 19:08:20 +0000
Manifest next update:     Wed 04 Mar 2026 22:48:20 +0000
Files and hashes:         1: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl (hash: EVu8qQK1YpW5TCKZl3A0cm1EyW0Mp+fK4jFl6WVcxdQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 22:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:70:18:13:f8:bc:59:ff:72:92:fb:d0:fd:58:68:2b:25:31:fd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Mar  3 19:08:20 2026 GMT
            Not After : Mar  4 22:48:20 2026 GMT
        Subject: CN=C3978D851DE82B2BEAEE72F32A238B5EF1EF4633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:5f:11:b9:c7:a5:5d:bf:15:21:0d:7e:49:
                    01:ca:f0:b5:fd:ed:59:cd:1d:7d:95:8e:13:da:2a:
                    3f:e7:dc:43:99:d6:88:8a:1f:4a:db:af:78:e7:77:
                    57:16:7a:47:69:ae:67:10:9f:30:ee:01:93:45:02:
                    22:c8:d3:e7:df:ab:ab:e9:3c:04:c4:31:d9:4a:d3:
                    1f:44:41:d7:cb:f1:2f:28:0e:1c:00:4b:57:e4:62:
                    b6:80:97:6a:2e:ae:35:9c:f4:f1:b0:e1:ae:9a:b3:
                    67:5a:3e:1f:8a:1e:02:74:df:c6:34:9e:7e:6b:40:
                    45:80:43:29:b7:dc:56:a3:f1:26:c6:7a:e8:be:9b:
                    ca:08:b5:55:42:55:64:68:3d:d7:fe:7d:7d:98:1f:
                    3e:c3:28:ae:3f:03:91:fd:2e:f2:32:30:65:26:9c:
                    df:0b:a2:21:e9:6f:55:1e:da:74:99:65:93:fa:4b:
                    3f:8b:26:8e:66:83:a7:f3:43:82:28:a7:c4:44:d6:
                    3a:a0:d3:5b:19:c2:07:eb:84:4d:6c:06:9c:b9:de:
                    c0:7e:70:33:48:52:e5:20:58:0e:c9:e4:c9:52:88:
                    a8:fa:16:b2:94:3e:3f:5a:ad:45:30:37:5b:11:a6:
                    a8:0c:c5:ac:a2:0f:07:90:79:87:31:f4:6f:41:f1:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:8D:85:1D:E8:2B:2B:EA:EE:72:F3:2A:23:8B:5E:F1:EF:46:33
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:c5:35:0c:07:ed:fa:02:3d:e4:8d:d9:9a:82:dd:62:10:
         fc:42:d9:1d:40:39:99:37:5e:e3:0c:7d:3e:49:98:39:a0:75:
         ce:8c:9e:e7:16:b2:b9:40:ec:da:f5:4b:e0:b7:56:c1:f3:7d:
         57:07:2d:8d:5f:e0:5f:d2:95:a4:1f:9d:32:35:01:83:f0:a9:
         1f:9c:11:d3:2e:1c:6c:24:3e:af:e6:9a:07:56:39:78:d1:87:
         7a:11:00:1b:90:a8:45:a7:37:57:3e:12:9f:05:c6:27:bf:89:
         06:36:6f:56:d8:04:21:25:22:ba:00:aa:b3:f6:ae:7d:02:3f:
         bc:b7:f2:0d:74:4b:07:cc:db:27:83:5d:8d:66:9f:ea:a2:e1:
         bf:a7:1b:bb:46:38:ae:ca:f6:be:2b:ee:96:27:d8:e9:79:97:
         16:8e:c9:9b:2c:7c:a4:50:6f:61:1f:ae:91:3c:36:9f:d4:78:
         84:3e:42:3e:7d:ab:33:6a:15:21:8d:79:cf:9b:c1:b3:d9:b1:
         e1:0b:04:de:ec:c9:a7:e9:af:cb:ee:0e:95:b4:d5:be:a0:cb:
         10:ab:e1:8d:8c:5b:25:fa:4e:ef:f5:e9:39:71:5f:5c:bd:44:
         eb:75:be:00:10:4e:15:60:79:b1:22:3b:76:9d:70:22:b9:04:
         8e:ee:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:09:30 2026 by rpki-client