Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
File:                     FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json)
Hash identifier:          J8hDFuwE0w7Ir8jKHgfwZLT5dnxlw5tX2GqARyDNENk=
Subject key identifier:   B5:4F:F8:8A:1E:83:16:99:7C:AF:1B:1C:24:AE:E2:3E:99:0C:26:51
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       3DF1C9CB6E41F2F9544874AF91BAFA0D6BC1DFAA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
Manifest number:          2E
Signing time:             Sun 22 Feb 2026 19:17:30 +0000
Manifest this update:     Sun 22 Feb 2026 19:12:30 +0000
Manifest next update:     Mon 23 Feb 2026 20:18:30 +0000
Files and hashes:         1: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0=)
                          2: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: zFgPtlfaj6dsRLIa3HVtMFoWRCWTP+scqm8p5NmqnQI=)
                          3: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f1:c9:cb:6e:41:f2:f9:54:48:74:af:91:ba:fa:0d:6b:c1:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Feb 22 19:12:30 2026 GMT
            Not After : Feb 23 20:18:30 2026 GMT
        Subject: CN=B54FF88A1E8316997CAF1B1C24AEE23E990C2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:4e:00:45:2c:39:28:54:ad:6b:d9:96:71:
                    bb:f0:d5:14:ee:44:bf:90:6e:90:77:0f:bf:2d:1c:
                    f5:4d:04:d3:b1:f0:3a:2f:71:79:49:c9:d7:14:c8:
                    74:c1:01:a8:c4:ab:52:90:cb:16:0c:63:3f:bb:56:
                    27:36:5a:9b:b2:f4:fb:9b:bc:6e:51:32:23:09:46:
                    4e:28:7c:28:84:12:89:65:f3:27:a1:51:f5:5f:0a:
                    e1:e3:d5:02:54:b2:aa:1a:aa:30:e2:c5:98:fe:20:
                    39:3f:2f:3b:a2:e0:b4:d0:fd:e9:75:dc:20:5d:14:
                    78:b6:d3:d4:f0:96:6e:dc:d5:4b:8c:70:cd:3b:03:
                    95:86:b2:8b:46:3f:2e:45:da:ee:61:5e:d2:bc:67:
                    16:f6:69:6d:fd:ca:96:73:35:81:0d:59:46:a6:c5:
                    a7:d6:a5:78:2f:05:87:cf:2c:fe:b8:19:79:57:6b:
                    49:91:2b:58:c2:69:d3:c7:91:9a:bc:19:73:a7:f5:
                    1c:ce:fe:d5:c5:08:e4:e8:4a:44:fe:45:ba:a8:30:
                    42:00:3c:67:bb:b7:61:be:b5:39:aa:2f:be:09:7c:
                    b9:df:5a:7b:f9:07:27:9b:62:a8:9a:c5:8a:d9:40:
                    30:84:2b:7b:56:90:4e:78:8d:ec:91:82:d0:bf:17:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4F:F8:8A:1E:83:16:99:7C:AF:1B:1C:24:AE:E2:3E:99:0C:26:51
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:fa:08:bc:9c:22:49:e6:0f:e1:7b:8a:3a:9a:dd:a7:52:
         85:a9:19:94:a8:1c:05:0b:f2:28:45:79:31:4c:95:86:a9:9e:
         b7:71:b3:c9:4a:0a:7e:e7:a0:d6:f2:aa:c7:b1:cf:20:ec:b8:
         de:6d:b9:fb:ad:15:2d:e8:6d:51:c1:51:b1:f8:92:ad:94:8f:
         87:ff:7e:36:7d:b5:aa:e0:5d:b1:78:12:09:20:47:5a:a0:9e:
         67:81:f6:0d:d0:2a:48:cf:78:fa:b6:f7:70:b9:2f:81:24:c2:
         2b:35:d1:f0:c9:58:e9:b3:be:ac:3f:88:ff:da:48:37:49:a6:
         15:4b:18:29:7c:d9:7c:7a:56:69:f7:b8:f7:31:f9:33:29:c8:
         e9:64:53:2c:2f:23:d0:fe:2d:cb:be:9d:e3:9d:81:a4:a4:71:
         fd:ac:46:fc:13:f5:21:12:a3:9d:cb:b3:b0:ea:f3:84:e2:31:
         f9:19:5d:ea:67:4c:fe:19:19:a9:ef:53:56:f6:c2:79:f4:13:
         b8:46:2d:71:d1:bd:69:54:70:14:8a:09:5d:56:9d:5d:64:74:
         72:09:16:a7:28:ce:aa:b3:4d:43:3a:9c:18:39:16:a4:39:e0:
         c1:61:12:c7:a3:94:ab:f1:12:df:b1:21:5f:a3:d7:18:24:8c:
         53:63:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:06 2026 by rpki-client