Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
File:                     78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json)
Hash identifier:          gft+zlS+vfwh1rMjRrrles7K0EfyVd31bIpOdQFyrYQ=
Subject key identifier:   E0:2F:EA:6B:50:08:49:D4:A9:22:CB:9E:3C:50:39:94:6D:F3:33:BA
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Certificate issuer:       /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial:       5650F0402291AB2CB3D71E33F5AAB6F904D7A297
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
Manifest number:          2F
Signing time:             Mon 23 Feb 2026 00:17:30 +0000
Manifest this update:     Mon 23 Feb 2026 00:12:30 +0000
Manifest next update:     Tue 24 Feb 2026 03:04:30 +0000
Files and hashes:         1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: N1f4czdkyhT0Oh6UT0TNqcdK+CMyIPfjgJAxjUSJzjA=)
                          2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:50:f0:40:22:91:ab:2c:b3:d7:1e:33:f5:aa:b6:f9:04:d7:a2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
        Validity
            Not Before: Feb 23 00:12:30 2026 GMT
            Not After : Feb 24 03:04:30 2026 GMT
        Subject: CN=E02FEA6B500849D4A922CB9E3C5039946DF333BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:32:a3:ed:df:b4:da:79:e0:5a:6b:49:44:
                    8c:76:b6:2a:8e:a9:b1:ed:73:55:d6:4b:18:27:9b:
                    9d:b1:e5:74:3d:bd:13:60:9d:25:4f:03:83:5e:d3:
                    b9:2f:67:88:e4:3b:45:b6:7c:f0:27:95:df:72:0c:
                    56:64:ec:e4:b0:55:34:43:22:0b:1e:8e:27:97:00:
                    2a:a3:67:4d:70:2b:ec:56:7d:be:14:bb:6e:40:be:
                    11:7c:d9:f5:1e:17:ea:fa:21:c7:3a:80:cf:ac:82:
                    ca:bc:a9:52:90:60:54:11:0d:9d:0c:e2:8c:7b:b7:
                    78:e9:fc:45:79:b7:ce:53:0a:6f:16:21:17:11:24:
                    0e:8c:07:c6:9e:45:62:8b:19:40:07:04:58:e0:33:
                    43:8b:00:19:1e:8c:f4:d8:05:8e:cf:36:a8:8d:48:
                    9e:d3:ed:0a:07:ad:52:35:4d:89:07:ab:25:25:da:
                    6b:cd:45:da:e2:12:46:2b:31:07:07:06:24:34:f3:
                    e8:ae:b5:6f:d7:8f:ce:fd:95:6c:92:42:89:9a:47:
                    0e:84:51:57:54:a4:99:dc:9c:b2:32:06:70:d2:aa:
                    47:47:fd:a2:a8:a6:ee:e0:d5:ba:55:e2:21:64:3c:
                    32:01:e1:a7:e7:98:4f:22:34:b5:b8:d6:4a:36:9b:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:EA:6B:50:08:49:D4:A9:22:CB:9E:3C:50:39:94:6D:F3:33:BA
            X509v3 Authority Key Identifier:
                keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:83:da:6c:3d:9b:4b:2a:3e:0f:5a:f8:2f:58:e4:15:d4:9a:
         0b:da:7c:c6:e1:75:b2:08:5a:39:01:b6:77:7d:a8:af:76:5f:
         26:66:41:43:f9:aa:2c:40:78:28:7e:4c:bd:04:07:ab:90:09:
         3d:99:aa:f1:54:c2:87:76:3d:37:44:ed:0b:fb:31:71:ce:ee:
         03:01:bf:f0:36:93:27:f9:7a:e0:fb:7b:5c:3c:bf:75:bc:fc:
         d3:1f:7a:c3:de:2c:aa:fe:e1:20:fa:7d:3d:f2:b4:43:2b:78:
         5e:27:f4:be:9d:d0:00:30:d1:4e:10:e5:8d:16:97:d2:12:3b:
         9b:e1:b8:bb:7e:7d:81:d6:7e:40:a9:53:b3:f3:06:9e:84:7e:
         f2:ca:d7:93:fa:ff:a8:c2:4d:da:b6:c1:a0:bd:e0:b0:b5:43:
         47:63:f0:e7:61:e1:99:8b:67:1b:bf:7c:96:6b:73:9a:ef:40:
         bb:a2:d2:87:54:a0:e2:e3:9e:b3:ee:39:fc:4a:3e:8f:7c:1d:
         c8:a2:37:c3:6f:d9:53:11:38:ca:ee:8e:d4:4a:b8:f4:c5:c6:
         b4:17:c7:65:b1:91:11:0a:41:8d:29:37:9c:fe:4a:8e:d7:be:
         4d:2d:c1:15:45:30:77:bd:ed:33:81:08:51:c1:e3:e3:53:c1:
         36:04:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:38 2026 by rpki-client