Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
File:                     B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json)
Hash identifier:          nQd+MAB2b30ja9L4lMMPynT5beowQFkGu4HXkAahT2s=
Subject key identifier:   02:84:B7:48:C7:4B:5F:1A:46:63:2A:30:2A:E0:14:A6:11:3C:44:6D
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       59B33D9096EFD8E629620FF1DE9C03334A993368
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
Manifest number:          30
Signing time:             Mon 23 Feb 2026 00:12:30 +0000
Manifest this update:     Mon 23 Feb 2026 00:07:30 +0000
Manifest next update:     Tue 24 Feb 2026 01:49:30 +0000
Files and hashes:         1: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: T0bYEofOxpTSH1pmwFE6YbMdos0aTKYtm1mzJVnq3Hg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b3:3d:90:96:ef:d8:e6:29:62:0f:f1:de:9c:03:33:4a:99:33:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Feb 23 00:07:30 2026 GMT
            Not After : Feb 24 01:49:30 2026 GMT
        Subject: CN=0284B748C74B5F1A46632A302AE014A6113C446D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:66:01:76:20:7b:3d:3c:47:da:bd:fb:6c:
                    c8:e6:4f:b0:43:f8:50:67:19:e7:51:cb:1f:61:c8:
                    c2:88:aa:8b:0f:09:65:f9:84:3b:d5:d7:a1:dc:82:
                    a2:69:18:1b:04:a4:92:3a:76:3a:50:8e:b7:8c:09:
                    9a:f5:f0:77:0d:2d:b2:0a:40:4e:ff:2d:03:42:9c:
                    07:ac:cd:6f:69:9c:44:76:bf:8a:e1:5d:73:ae:5d:
                    71:75:4a:7a:91:a9:a3:49:23:e0:8a:bc:01:e1:b9:
                    2e:75:97:6e:4d:be:a8:92:c9:08:64:0d:bb:b2:99:
                    6d:7e:5e:db:c8:81:c4:73:e1:5e:79:3e:7a:c7:40:
                    90:7d:ef:81:06:2c:a6:f1:2b:c6:f5:2b:8f:65:38:
                    2a:20:6c:bd:38:e4:d4:bd:b9:26:1f:75:6d:0c:45:
                    66:d7:78:e0:0f:11:7b:04:33:a7:a2:75:87:f1:d8:
                    51:44:34:59:74:37:06:46:45:b1:39:09:e6:78:92:
                    f2:7f:32:83:7c:32:a9:44:29:af:b6:f7:e7:54:f9:
                    69:f9:d9:d8:7d:cd:1a:20:d8:0f:16:36:f2:9a:b3:
                    56:70:57:b4:f6:20:d9:21:f8:93:19:ba:76:3e:0a:
                    61:d6:15:28:92:0c:83:38:39:ea:4f:0e:99:67:cb:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:B7:48:C7:4B:5F:1A:46:63:2A:30:2A:E0:14:A6:11:3C:44:6D
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:7c:25:aa:dd:4c:2f:4f:39:f7:04:ce:9d:54:5d:98:61:
         11:27:47:57:34:9e:78:8e:bc:04:b7:3d:e5:7a:f1:25:8e:69:
         e9:5d:d3:99:47:86:3b:fb:1a:af:6f:00:4c:0b:b2:38:03:5d:
         b0:57:d1:61:52:5b:4a:0a:b9:d4:55:1a:37:4a:e9:9d:9a:a5:
         01:d1:4f:d4:b8:2b:2c:4b:cb:b3:15:f3:d4:27:78:28:1a:c1:
         60:c6:7e:04:8c:df:65:5c:d4:7d:62:60:0a:5e:09:55:b3:f6:
         73:fc:c1:2b:16:40:2d:39:64:86:43:8d:be:bc:7b:86:01:f2:
         73:d0:bb:60:93:04:ea:b9:00:a3:85:d9:6a:b5:52:f8:02:26:
         59:c9:7d:60:85:e4:61:b0:a9:e1:46:d0:6b:29:6d:ee:83:e5:
         24:85:ad:81:d1:cc:12:68:14:2c:10:a2:ae:89:d0:3f:f9:9b:
         1d:e2:16:9a:4f:bf:ef:26:74:c8:6c:2c:c5:5d:cf:c5:18:cb:
         14:39:da:f8:cd:36:7a:2c:2c:de:d3:ab:1a:b9:0e:69:d6:8a:
         37:a8:4a:be:11:ce:c9:56:90:79:a1:35:07:6e:6c:3d:9d:26:
         10:f9:41:3c:eb:6f:ab:54:71:e2:26:0a:b7:dc:2a:45:f6:eb:
         c9:60:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:08:15 2026 by rpki-client