Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
File:                     5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json)
Hash identifier:          ju6dVU1BvlVVMlGiI8NUxbEFylJp3Gd33g+0BZzFlDc=
Subject key identifier:   EE:EA:FA:44:CF:1F:BD:0D:BA:F6:5C:10:6F:8F:6E:20:29:1A:1A:02
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Certificate issuer:       /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial:       3E95CD3EA02149A626DBA3F75D61397DD7A0F1AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 08:07:30 +0000
Manifest this update:     Sun 22 Feb 2026 08:02:30 +0000
Manifest next update:     Mon 23 Feb 2026 10:07:30 +0000
Files and hashes:         1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=)
                          2: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=)
                          3: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: FAjjgzzS68PO3GdQ5mI0lqVW+DcPKDjGBOn9RHFFR+U=)
                          4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:cd:3e:a0:21:49:a6:26:db:a3:f7:5d:61:39:7d:d7:a0:f1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
        Validity
            Not Before: Feb 22 08:02:30 2026 GMT
            Not After : Feb 23 10:07:30 2026 GMT
        Subject: CN=EEEAFA44CF1FBD0DBAF65C106F8F6E20291A1A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:93:42:bc:0b:98:b4:9f:fb:81:c2:e4:c9:
                    c0:3f:ac:25:0d:63:71:bc:21:8c:3f:b8:b2:44:44:
                    96:af:c9:40:cd:24:4c:09:f4:99:94:34:6b:d2:58:
                    2f:5e:aa:c2:09:06:e2:63:84:ec:83:8a:30:3a:ff:
                    2d:a7:b1:41:17:85:57:97:a2:f2:b6:8b:89:e2:2c:
                    95:8d:a2:d8:01:a5:ab:cc:1b:f9:b5:0e:d2:f6:0a:
                    83:55:0b:47:7b:39:52:7a:50:6b:9c:4d:46:f3:e8:
                    15:0f:cd:d4:17:4c:ed:bb:cc:33:2d:f3:f8:50:ff:
                    d8:dd:4f:61:53:8e:63:b6:f1:25:9d:24:c1:de:51:
                    00:b1:06:85:b4:46:68:ac:76:08:c9:7a:c8:7e:96:
                    9b:9f:26:08:11:c4:4c:81:02:3d:47:34:bc:86:19:
                    fd:19:fb:98:8b:57:81:8f:f3:21:8b:b5:94:08:aa:
                    7a:a7:e4:45:24:b8:af:b2:26:16:98:1c:a2:68:1b:
                    d7:15:5c:21:a6:5b:a9:07:5d:36:f1:96:d6:70:46:
                    d4:68:85:49:18:9f:b6:8f:54:75:ba:7a:86:64:1c:
                    ed:b6:e1:b4:a8:2a:c6:f2:e5:99:80:57:59:c2:ab:
                    d3:c8:b3:dc:6c:c6:09:8f:c2:62:11:51:26:eb:d2:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:FA:44:CF:1F:BD:0D:BA:F6:5C:10:6F:8F:6E:20:29:1A:1A:02
            X509v3 Authority Key Identifier:
                keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d0:4b:0d:8a:71:f7:e5:35:24:f3:74:8e:98:70:e4:d5:61:
         87:b0:27:9f:d6:38:79:47:3a:2d:ff:82:7f:6c:a5:3e:e6:e3:
         a0:d6:6f:2d:ae:e0:0b:8a:bc:fc:71:3b:0d:e7:71:9c:96:ca:
         ae:cb:78:d5:7c:07:05:71:c9:8b:d5:4e:2f:9a:9c:eb:21:52:
         9d:55:7e:37:17:0c:c0:0c:68:43:f5:42:81:a9:a1:c8:56:1c:
         ea:a4:3c:f1:65:c0:67:05:a8:2b:32:29:5b:e3:8c:ec:c5:cc:
         3d:2b:92:4a:3b:34:97:95:c9:4f:2c:8c:5d:f0:36:03:e7:cc:
         15:02:55:ca:92:ee:18:5a:29:87:76:34:fa:19:77:d8:60:b5:
         d6:04:ea:8e:d6:d5:cc:54:5e:b0:75:6d:71:aa:0d:e8:9f:f8:
         21:dc:8c:15:6d:9e:24:e5:08:61:d8:6b:cb:90:39:f6:3e:b3:
         a2:21:99:41:61:a0:d6:dd:18:7c:37:ba:5d:e0:5d:d5:44:a1:
         8d:98:07:fc:60:e9:e7:90:dd:78:e4:c9:b4:ca:00:dc:0f:5c:
         bf:59:29:95:d7:b1:a6:5e:c6:5e:8a:70:39:69:34:21:a3:c8:
         fc:00:ad:09:fa:a4:c2:2c:9b:8f:a6:5a:b7:a6:61:a9:84:de:
         44:49:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:13 2026 by rpki-client