Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          FVYe0YSsDkjcOL7alo/RirrxUsTb7I7HmUVSBPbLYfs=
Subject key identifier:   AB:37:DD:FD:C7:D3:72:68:AC:5A:54:4D:93:15:31:5E:12:E6:39:F8
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       76F801D0A048A68F9935E5FE6F8993D472E235DA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 16:27:30 +0000
Manifest this update:     Sun 22 Feb 2026 16:22:30 +0000
Manifest next update:     Mon 23 Feb 2026 18:55:30 +0000
Files and hashes:         1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: pgwVUsoBTDPsVUFEAF0kEf9nXF78q73fDh9VHjzZKU0=)
                          2: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f8:01:d0:a0:48:a6:8f:99:35:e5:fe:6f:89:93:d4:72:e2:35:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Feb 22 16:22:30 2026 GMT
            Not After : Feb 23 18:55:30 2026 GMT
        Subject: CN=AB37DDFDC7D37268AC5A544D9315315E12E639F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:26:d5:35:11:cd:ba:85:0f:51:ab:32:73:
                    14:9b:c2:58:a2:dd:13:1b:ef:53:05:3b:80:1b:94:
                    2a:a9:2b:07:51:4c:d1:16:a8:e9:1c:f3:1f:57:35:
                    71:51:9b:69:79:88:8d:21:73:fb:67:06:a4:87:ea:
                    5b:38:af:f7:53:cb:8e:29:f2:61:ca:57:16:47:51:
                    30:42:ac:e7:a9:ec:2c:a7:20:52:8b:bb:84:50:1f:
                    8c:98:79:44:17:4b:bf:94:12:db:01:f0:db:69:c4:
                    ec:0a:f5:e1:ea:07:f8:a5:e4:01:96:08:0c:f6:3f:
                    db:2e:b4:12:85:df:f0:84:dd:8d:c1:8d:ba:f5:eb:
                    91:cb:9d:85:48:73:d1:c7:d7:8c:79:5f:34:46:c2:
                    08:86:f5:be:6e:d1:f1:fd:03:b6:aa:1e:eb:0f:73:
                    22:42:63:7b:97:85:fc:34:09:bd:7b:fa:08:1d:22:
                    55:9d:96:74:70:81:69:3c:42:61:36:d4:d5:d0:44:
                    48:23:c5:12:af:57:98:18:56:2c:df:90:d6:d8:40:
                    dc:d3:6d:a1:cb:d9:b7:87:58:3c:1c:64:e4:cf:93:
                    49:23:8d:7c:7c:5c:ea:db:f6:13:b3:e4:d1:f7:e8:
                    cb:68:96:c5:12:7f:29:c6:aa:83:aa:51:d5:4c:6e:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:DD:FD:C7:D3:72:68:AC:5A:54:4D:93:15:31:5E:12:E6:39:F8
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:29:c7:d5:4c:00:34:a8:65:e9:9f:c1:86:0a:b5:1e:17:
         36:b9:23:03:2b:70:ac:d6:87:41:a7:66:26:2b:f3:c1:6a:b4:
         b9:37:e3:90:a2:c9:15:40:c8:24:96:b2:76:03:d9:86:57:db:
         6c:c3:3e:17:ed:7a:f1:2d:b0:00:0f:81:c2:74:78:56:9b:a1:
         bf:fc:52:d3:e7:d9:f2:f1:46:d0:da:a2:a8:9a:e5:ba:bd:a2:
         ce:e4:72:07:6f:50:10:62:b1:b4:bd:09:c1:00:47:80:c1:4a:
         ba:aa:8e:f4:c2:3c:ed:49:1a:52:c4:aa:18:7a:e1:3e:e6:4a:
         f4:77:fe:51:dc:4c:97:8c:36:3b:ca:4c:f0:8d:40:29:61:ee:
         15:eb:f0:45:73:2a:06:04:2a:10:a5:32:a0:51:50:b6:db:18:
         7a:da:32:81:1b:73:90:3e:71:db:77:13:44:f6:3c:88:eb:7c:
         7c:36:12:e0:8a:0c:78:47:14:93:62:94:79:8d:ad:7d:e0:32:
         50:c3:3f:b5:13:6e:53:0b:5a:bb:79:4b:63:ec:20:b5:c5:fa:
         e1:0c:a8:60:84:9b:d5:92:89:14:32:14:4d:3f:e4:3d:92:7b:
         e6:32:35:5a:9b:78:d9:2a:8d:77:00:25:16:5e:37:f7:e7:27:
         91:b8:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:08 2026 by rpki-client