Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
File:                     308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json)
Hash identifier:          WJs8qXPVAMAvbTAKhyXBsNRGWvXnJrxjcGRntpXjtrE=
Subject key identifier:   D8:09:E6:12:43:C7:9D:C9:8A:CC:7D:84:91:9A:46:6B:04:DE:6B:1B
Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
Certificate issuer:       /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Certificate serial:       10DC06A3D7F3161DFB08EBECFD909422DCEDE8F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
Manifest number:          27
Signing time:             Mon 16 Feb 2026 19:42:15 +0000
Manifest this update:     Mon 16 Feb 2026 19:37:15 +0000
Manifest next update:     Tue 17 Feb 2026 20:06:15 +0000
Files and hashes:         1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: ZZczX/Eh8JCiCo1HPRjMaza2SLU5eRzXS040lwOtJuk=)
                          2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 20:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dc:06:a3:d7:f3:16:1d:fb:08:eb:ec:fd:90:94:22:dc:ed:e8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
        Validity
            Not Before: Feb 16 19:37:15 2026 GMT
            Not After : Feb 17 20:06:15 2026 GMT
        Subject: CN=D809E61243C79DC98ACC7D84919A466B04DE6B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:76:e0:9e:f0:e7:80:25:dc:2b:e5:e1:f3:
                    0f:25:de:20:a6:aa:f0:56:21:30:93:49:4c:5c:12:
                    5d:9c:31:32:94:3e:46:b9:50:4f:a4:5d:e8:da:38:
                    a8:35:59:2c:95:5f:a4:9b:3d:2a:ab:a3:1c:5c:3e:
                    d9:89:d0:f9:9d:4d:94:84:10:75:6f:9a:63:e7:2b:
                    92:1c:f4:1c:98:17:a9:a3:fb:e1:5e:11:23:b6:c2:
                    45:1d:5a:7d:bf:fc:98:ff:7e:f7:7e:74:76:5f:61:
                    16:f8:8d:95:c2:6a:ac:a1:44:d7:4f:ac:50:3c:64:
                    55:02:3d:b9:bd:47:bb:52:0d:10:f7:0b:64:bf:2e:
                    3b:fc:15:c3:7d:2b:0f:f6:c4:b6:2b:98:3a:2c:d3:
                    1b:46:08:ef:5a:b0:7b:4b:c4:f1:28:02:cb:07:a4:
                    2b:be:75:6f:12:28:6c:d4:d2:6a:d5:a9:a6:b9:31:
                    7d:30:10:36:35:7a:09:65:0d:04:a6:50:56:18:7c:
                    39:d1:f9:0d:5b:c9:af:6d:9a:04:0e:74:bd:55:21:
                    0f:49:62:c8:5e:ce:eb:8c:46:28:7c:bc:81:81:d2:
                    f7:63:0c:7e:d0:0b:39:a1:7f:6b:6d:8a:cb:d1:1b:
                    45:d5:94:3b:c0:5c:3c:60:92:4f:0f:d2:98:20:7a:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:09:E6:12:43:C7:9D:C9:8A:CC:7D:84:91:9A:46:6B:04:DE:6B:1B
            X509v3 Authority Key Identifier:
                keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:43:96:cb:a2:57:bd:79:8e:cc:9c:e8:78:4f:44:eb:8c:c5:
         db:4a:0d:43:21:0c:fa:4d:ff:74:3b:69:9a:17:a0:77:6d:f4:
         c6:5b:1d:bb:44:1f:3d:69:92:b2:4f:f9:0a:bd:e9:78:74:81:
         c6:0d:73:46:a5:51:29:84:f8:8f:73:61:d9:fe:9a:6f:66:9e:
         7f:0d:58:df:eb:d6:55:7e:ae:ad:3f:ee:86:d3:17:46:f6:b3:
         17:87:97:e0:70:9f:f7:17:03:d7:a6:df:58:70:b6:cd:3a:07:
         a6:ad:6c:de:50:c1:c5:40:da:9b:5b:33:49:84:38:71:b7:45:
         13:e2:96:0a:e2:1b:69:ee:f1:f4:50:3f:0b:ee:77:71:a9:6b:
         bf:b9:a7:6a:1b:b5:15:1f:94:5c:79:ca:cb:7b:63:7b:ec:11:
         52:ab:c9:0f:90:cd:c0:e2:3f:13:1b:93:24:6e:54:ab:84:f7:
         fc:55:3f:0e:48:44:d2:cb:5e:e5:53:2f:ae:bd:ea:a2:db:96:
         93:3e:2f:e3:c5:90:fb:b5:79:a2:7c:f5:16:3b:29:5f:f2:38:
         c9:2c:b7:fd:d7:c8:aa:f0:26:e9:0a:91:ce:6c:19:2c:f3:fe:
         a4:5b:83:d8:39:de:fa:7c:04:a3:72:18:67:4b:39:42:44:6b:
         c1:0e:80:43
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUENwGo9fzFh37COvs/ZCUItzt6PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz
MkZDQkI0ODAeFw0yNjAyMTYxOTM3MTVaFw0yNjAyMTcyMDA2MTVaMDMxMTAvBgNV
BAMTKEQ4MDlFNjEyNDNDNzlEQzk4QUNDN0Q4NDkxOUE0NjZCMDRERTZCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6HbgnvDngCXcK+Xh8w8l3iCm
qvBWITCTSUxcEl2cMTKUPka5UE+kXejaOKg1WSyVX6SbPSqroxxcPtmJ0PmdTZSE
EHVvmmPnK5Ic9ByYF6mj++FeESO2wkUdWn2//Jj/fvd+dHZfYRb4jZXCaqyhRNdP
rFA8ZFUCPbm9R7tSDRD3C2S/Ljv8FcN9Kw/2xLYrmDos0xtGCO9asHtLxPEoAssH
pCu+dW8SKGzU0mrVqaa5MX0wEDY1egllDQSmUFYYfDnR+Q1bya9tmgQOdL1VIQ9J
YshezuuMRih8vIGB0vdjDH7QCzmhf2ttisvRG0XVlDvAXDxgkk8P0pggevn3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2AnmEkPHncmKzH2EkZpGawTeaxswHwYDVR0j
BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE
MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1
MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkOWy6JXvXmO
zJzoeE9E64zF20oNQyEM+k3/dDtpmhegd230xlsdu0QfPWmSsk/5Cr3peHSBxg1z
RqVRKYT4j3Nh2f6ab2aefw1Y3+vWVX6urT/uhtMXRvazF4eX4HCf9xcD16bfWHC2
zToHpq1s3lDBxUDam1szSYQ4cbdFE+KWCuIbae7x9FA/C+53calrv7mnahu1FR+U
XHnKy3tje+wRUqvJD5DNwOI/ExuTJG5Uq4T3/FU/DkhE0ste5VMvrr3qotuWkz4v
48WQ+7V5onz1FjspX/I4ySy3/dfIqvAm6QqRzmwZLPP+pFuD2Dne+nwEo3IYZ0s5
QkRrwQ6AQw==
-----END CERTIFICATE-----
Generated at Tue Feb 17 09:11:44 2026 by rpki-client