Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft
File:                     39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json)
Hash identifier:          9FYeFdKTKZoxHNqZ34WujHMpsxexNeyldeOcjKEFTwU=
Subject key identifier:   56:9E:BA:69:A8:00:C2:DA:C0:63:14:8B:3C:51:1D:BC:F5:E3:27:CB
Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B
Certificate issuer:       /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B
Certificate serial:       688BBA790AF0735DC503055ACDB7B5134BA358ED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft
Manifest number:          2E
Signing time:             Sun 22 Feb 2026 10:07:30 +0000
Manifest this update:     Sun 22 Feb 2026 10:02:30 +0000
Manifest next update:     Mon 23 Feb 2026 12:56:30 +0000
Files and hashes:         1: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=)
                          2: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=)
                          3: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: uV5owQeZnAxu57xEIznBzlKTblFARgoZBWfhqWeVA/s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8b:ba:79:0a:f0:73:5d:c5:03:05:5a:cd:b7:b5:13:4b:a3:58:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B
        Validity
            Not Before: Feb 22 10:02:30 2026 GMT
            Not After : Feb 23 12:56:30 2026 GMT
        Subject: CN=569EBA69A800C2DAC063148B3C511DBCF5E327CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:e4:fa:55:28:d3:80:f8:14:3b:3d:ff:54:
                    a1:de:e2:a2:6f:3a:0a:2e:78:40:52:7e:02:42:38:
                    fa:71:c0:ad:93:a2:e9:05:db:fe:69:79:72:5e:b9:
                    44:fe:c9:c3:78:27:e8:76:9b:44:a5:e1:df:96:8e:
                    39:32:a6:5a:bd:7c:b9:38:f8:2c:1f:41:20:ba:63:
                    71:97:74:99:50:de:94:63:b3:79:9e:3f:2a:33:3b:
                    9c:b9:4b:6d:92:7e:39:46:1f:34:8d:a5:b9:24:02:
                    57:c4:f9:c9:b9:22:69:c8:5e:8a:14:61:9e:a6:86:
                    ed:55:f1:42:39:dc:1c:50:60:6d:53:98:7e:db:f0:
                    5a:e4:fc:63:ee:7c:24:af:b2:d3:f6:dd:d9:68:3e:
                    3d:24:cc:6a:ed:a5:e1:de:f2:39:02:c2:28:c9:d1:
                    58:69:6e:ef:93:e1:ab:f0:8d:6d:fd:50:88:62:80:
                    f8:33:48:25:fc:ac:0b:db:25:cd:a4:d3:1b:05:45:
                    8c:91:28:3c:43:9d:03:ad:e7:6c:48:f3:bc:e9:6e:
                    9b:9d:ee:ab:2d:f5:66:6d:18:7f:8a:29:bb:1e:3a:
                    bc:2f:b5:d0:c9:d5:44:0d:71:b7:29:50:0c:69:fa:
                    3b:f3:f4:ac:bb:07:18:2a:51:a5:1d:59:6d:d9:07:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:BA:69:A8:00:C2:DA:C0:63:14:8B:3C:51:1D:BC:F5:E3:27:CB
            X509v3 Authority Key Identifier:
                keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:04:3d:48:fe:80:be:cc:05:bf:a8:81:15:e4:70:4c:c0:
         3d:78:65:bd:c2:d1:57:9b:43:ce:c3:6d:76:96:2e:6b:29:ab:
         a8:89:16:e5:c9:7b:aa:5b:15:b4:50:6c:9f:36:c9:dc:ca:83:
         a2:5d:b1:16:0d:1e:96:4e:17:be:44:f0:66:4d:7c:f1:90:55:
         c7:8f:22:a3:13:4c:86:21:1e:61:1f:2d:a4:b3:e0:9e:38:1f:
         1f:79:68:0f:d5:f8:37:22:29:58:21:1a:55:13:f5:53:29:53:
         1c:f8:49:a2:e6:67:70:ca:2a:b0:3e:a9:b7:16:3c:cf:ff:74:
         e7:35:e9:37:9b:7c:51:ab:d2:7c:a3:4c:df:2e:0c:e6:85:8a:
         03:11:e8:77:08:10:91:11:39:cd:9d:47:e4:ad:36:30:5d:74:
         73:5c:f7:71:6d:6c:d5:9b:fa:26:f3:c1:9b:d2:a1:71:04:16:
         c0:f3:2c:c9:5f:0b:8a:fb:6e:3e:bf:46:4e:93:53:92:64:e3:
         36:40:74:76:56:d2:1c:7e:9c:74:ec:16:67:91:39:19:21:95:
         7f:9d:d9:77:14:af:4d:3d:d4:7e:bc:59:03:55:d1:87:0a:48:
         4e:03:9d:27:f0:41:22:e8:24:da:8e:6e:30:cd:80:e9:d8:cf:
         c7:ac:88:15
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUaIu6eQrwc13FAwVazbe1E0ujWO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG
RDI1QjM3QjAeFw0yNjAyMjIxMDAyMzBaFw0yNjAyMjMxMjU2MzBaMDMxMTAvBgNV
BAMTKDU2OUVCQTY5QTgwMEMyREFDMDYzMTQ4QjNDNTExREJDRjVFMzI3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9uT6VSjTgPgUOz3/VKHe4qJv
OgoueEBSfgJCOPpxwK2ToukF2/5peXJeuUT+ycN4J+h2m0Sl4d+Wjjkyplq9fLk4
+CwfQSC6Y3GXdJlQ3pRjs3mePyozO5y5S22SfjlGHzSNpbkkAlfE+cm5ImnIXooU
YZ6mhu1V8UI53BxQYG1TmH7b8Frk/GPufCSvstP23dloPj0kzGrtpeHe8jkCwijJ
0Vhpbu+T4avwjW39UIhigPgzSCX8rAvbJc2k0xsFRYyRKDxDnQOt52xI87zpbpud
7qst9WZtGH+KKbseOrwvtdDJ1UQNcbcpUAxp+jvz9Ky7BxgqUaUdWW3ZB4h9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVp66aagAwtrAYxSLPFEdvPXjJ8swHwYDVR0j
BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE
RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3
RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6MEPUj+gL7M
Bb+ogRXkcEzAPXhlvcLRV5tDzsNtdpYuaymrqIkW5cl7qlsVtFBsnzbJ3MqDol2x
Fg0elk4XvkTwZk188ZBVx48ioxNMhiEeYR8tpLPgnjgfH3loD9X4NyIpWCEaVRP1
UylTHPhJouZncMoqsD6ptxY8z/905zXpN5t8UavSfKNM3y4M5oWKAxHodwgQkRE5
zZ1H5K02MF10c1z3cW1s1Zv6JvPBm9KhcQQWwPMsyV8LivtuPr9GTpNTkmTjNkB0
dlbSHH6cdOwWZ5E5GSGVf53ZdxSvTT3UfrxZA1XRhwpITgOdJ/BBIugk2o5uMM2A
6djPx6yIFQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:13 2026 by rpki-client