Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File:                     9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier:          Oh66ehcXY8ZQkhrEiO9FF2VQZLh3aOKMXLrMpW6BetM=
Subject key identifier:   95:E9:CB:B1:5B:6B:A3:FF:F1:44:9C:FF:77:43:0A:7A:A9:BD:95:4D
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       4049056C3757AB939414CB48600B76B8F9A7EEB7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 12:07:30 +0000
Manifest this update:     Sun 22 Feb 2026 12:02:30 +0000
Manifest next update:     Mon 23 Feb 2026 15:06:30 +0000
Files and hashes:         1: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
                          2: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
                          3: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
                          4: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
                          5: 34332e3232372e382e302f32322d3232203d3e20313331353734.roa (hash: iv/XuliIV+Q88lkU+kMXBj2h26tKig58b01TXXJyRSw=)
                          6: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
                          7: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
                          8: 3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa (hash: hlal3GZT1G+JrT2kXUwPr6ApFLnZOq4MMJGax15oWzI=)
                          9: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
                          10: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
                          11: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
                          12: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: UdgPsr/E/md2+8jcGxPd0/nV6mIU4lVghQrKALKPKPI=)
                          13: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
                          14: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
                          15: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:05:6c:37:57:ab:93:94:14:cb:48:60:0b:76:b8:f9:a7:ee:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: Feb 22 12:02:30 2026 GMT
            Not After : Feb 23 15:06:30 2026 GMT
        Subject: CN=95E9CBB15B6BA3FFF1449CFF77430A7AA9BD954D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:a9:56:12:46:ec:b4:a5:97:cb:39:e8:12:
                    b7:1e:0a:1c:0e:83:59:e7:52:a1:28:c6:21:f3:51:
                    8f:e4:0b:db:dc:cc:64:5b:55:e3:a7:16:fe:a1:56:
                    7a:18:3b:6b:1d:d6:00:e6:bd:3a:c5:1b:4e:54:55:
                    60:b4:9f:c4:3b:50:54:cb:7b:ef:d4:0d:7c:77:49:
                    7e:07:6a:3f:60:72:9b:f7:f9:b9:59:4f:a1:f9:9b:
                    09:1e:02:9b:16:fb:01:36:ad:27:06:77:ac:4c:e5:
                    51:da:97:0f:a3:9f:8a:c1:9a:8a:a8:d8:f0:63:c1:
                    38:17:e1:b4:14:e7:be:6d:9d:c2:cc:99:67:e5:e4:
                    11:c4:0a:3c:8e:1b:b2:c5:fd:4c:62:16:24:76:66:
                    17:f9:a8:22:41:3d:da:96:1b:ef:bf:8b:6b:ff:9c:
                    70:d1:c7:17:c3:18:f8:f8:6d:e0:2e:18:8e:44:18:
                    ea:2d:cb:21:69:51:94:ba:15:77:99:2a:6a:a7:9a:
                    e0:b3:b6:01:6f:84:6f:8f:5d:2c:17:d2:ee:d4:c4:
                    b7:9a:8e:16:4b:36:16:0f:3e:bf:d0:9c:11:a1:51:
                    0f:2a:52:2b:10:c7:07:3e:6d:2f:be:b4:71:40:e4:
                    17:21:eb:19:27:82:2a:7e:e2:e5:2f:3b:93:68:0f:
                    eb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E9:CB:B1:5B:6B:A3:FF:F1:44:9C:FF:77:43:0A:7A:A9:BD:95:4D
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:71:e4:af:7b:61:7c:a2:1f:f2:fe:4d:26:29:12:b5:2c:f1:
         af:8b:80:71:78:61:aa:07:6a:1d:31:c2:f5:5a:1d:d1:b2:11:
         56:31:9f:2f:22:70:ea:31:f3:85:fc:f2:19:7f:63:24:29:bc:
         2c:c6:9b:27:7f:c1:45:a9:5e:62:d4:11:9d:cc:ce:26:12:fa:
         0f:6e:28:d0:9c:de:ce:98:92:e0:e9:49:17:ad:e1:5a:b7:eb:
         df:e3:02:ab:33:03:9e:cf:b3:f8:1d:f5:21:e9:55:8e:0d:00:
         22:c5:2f:da:a7:eb:e2:4e:75:d0:a8:ce:0b:fe:d8:32:49:74:
         97:d4:b9:b0:90:49:84:88:62:6f:35:88:0e:06:18:b1:47:67:
         b2:63:57:99:2b:17:77:fe:69:e5:f8:2c:da:37:37:ef:5b:a9:
         22:24:0b:54:9c:a4:f1:70:a7:88:5c:4e:f6:73:d4:c1:29:46:
         0d:cc:2d:9b:a8:f8:03:47:91:e8:9a:9d:e2:75:0b:ae:27:6e:
         21:8c:d7:82:c1:73:db:c6:9d:79:b3:e5:fc:43:0a:a1:39:05:
         df:aa:d8:f3:60:f1:ae:e9:ec:f2:98:86:34:fe:d8:50:a7:56:
         c2:b4:d5:a2:00:97:f5:9d:60:c8:bf:f6:9d:07:b8:51:41:83:
         34:9a:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:08:14 2026 by rpki-client