Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
File:                     6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft (raw, json)
Hash identifier:          o4bGRauu24DA0C6CcSXl6rGIRP/yZLizcMY8brsFUYQ=
Subject key identifier:   CF:37:43:42:8D:2F:D1:8A:4D:D1:14:EA:E5:E2:9D:9C:9E:24:6A:1A
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       2ADC6D433E46BD14EB1D915B1C75AE3174BD9C9C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 08:07:30 +0000
Manifest this update:     Sun 22 Feb 2026 08:02:30 +0000
Manifest next update:     Mon 23 Feb 2026 10:32:30 +0000
Files and hashes:         1: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl (hash: vLIp9QkmbD/+kFC1BIfHUhwkUpQJuQW509PVWoIlOBU=)
                          2: 3130312e35322e35322e302f32342d3234203d3e203435303739.roa (hash: WeT/+VI4DJbVK3NQkPYzHL8X47fHP0WfM+8Qgv7h4ls=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dc:6d:43:3e:46:bd:14:eb:1d:91:5b:1c:75:ae:31:74:bd:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: Feb 22 08:02:30 2026 GMT
            Not After : Feb 23 10:32:30 2026 GMT
        Subject: CN=CF3743428D2FD18A4DD114EAE5E29D9C9E246A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:9b:92:22:d7:ad:03:d4:bc:40:f1:63:7b:
                    83:82:e1:4c:90:3e:30:0e:cc:6b:b5:aa:07:ed:f2:
                    7a:0c:ae:9b:13:b3:3d:03:91:1e:64:69:b0:49:93:
                    43:5b:34:3f:ce:0f:5d:54:c1:7b:2e:41:98:33:17:
                    dd:9b:22:64:7b:36:65:f9:b1:6b:6c:45:8e:9d:f4:
                    cc:dd:62:37:0a:ff:a5:a9:54:57:03:e7:f7:8b:7e:
                    62:a6:d6:f1:d0:4a:47:78:9a:b6:c4:3c:9f:bd:d3:
                    62:fa:fe:22:71:94:ad:e5:80:d1:57:99:5e:62:dc:
                    4d:2f:cd:f3:d0:d5:32:2f:21:e6:93:ac:9f:a9:b2:
                    51:11:b7:4e:67:e7:b4:7e:2c:79:e9:38:7f:04:2d:
                    0f:5f:52:b6:80:24:13:bc:8e:c1:80:7b:96:13:d0:
                    c5:00:a8:44:74:60:1b:4c:a0:d4:30:04:e4:1c:4d:
                    00:0e:e1:31:41:b7:f4:29:e9:15:99:91:25:64:e2:
                    87:3d:35:4a:c4:8d:0a:2c:6a:72:84:3f:13:b1:f4:
                    6b:26:64:99:d2:96:93:0a:96:83:03:3c:59:c7:58:
                    f7:3f:cf:47:87:56:96:57:4e:4d:1c:0f:aa:81:59:
                    6d:c2:42:4b:8c:4b:b1:a8:da:11:3e:59:12:0b:91:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:43:42:8D:2F:D1:8A:4D:D1:14:EA:E5:E2:9D:9C:9E:24:6A:1A
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:52:24:5c:bf:35:40:11:bd:95:80:0b:14:22:51:5d:84:
         7a:45:5b:e9:ca:57:e5:66:6c:0b:85:0a:b1:44:ce:b0:b8:c2:
         3d:cd:be:81:e7:9a:ea:ed:a9:4c:27:e5:87:35:b0:bb:e3:0e:
         b8:7d:62:68:35:3c:ee:89:d6:a4:7b:a6:84:e6:c4:1e:01:b3:
         62:07:bf:c1:32:e8:bc:32:79:82:a0:bc:19:24:6e:a8:0d:c9:
         3e:63:57:b5:11:09:26:22:db:75:c6:0b:60:71:84:63:12:44:
         2e:94:ba:6a:c8:e2:bc:78:7d:67:5a:bb:09:86:41:6c:72:5a:
         64:30:05:9d:b2:d5:d2:6b:e9:4d:53:aa:d2:f8:14:63:1f:25:
         e8:7e:34:9c:65:73:4e:86:c2:4a:53:43:8d:96:2f:12:7c:07:
         0d:b6:71:53:e7:37:ba:75:09:5e:60:87:d2:25:02:2d:03:08:
         ac:0f:68:c6:7d:7d:10:5c:9e:27:95:aa:86:bf:29:18:13:e0:
         f6:3b:c8:ec:6e:bf:69:d1:61:5a:51:0b:eb:d9:ec:2a:b1:d7:
         06:f4:b8:4a:37:d2:f9:38:09:ed:12:b9:c2:97:47:cc:9a:f3:
         23:bd:8d:6e:99:dd:24:a8:ee:d4:06:09:c6:56:ce:7b:ed:59:
         82:e0:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:45 2026 by rpki-client