Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
File:                     108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json)
Hash identifier:          uv/RFX/kqrcA6/PFtNsjxAqD1P5turWe9K64EHO/SV8=
Subject key identifier:   EF:0D:9F:EB:54:4D:53:EC:93:C1:68:A0:32:2A:FD:C3:81:C8:01:CB
Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65
Certificate issuer:       /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65
Certificate serial:       7FAC2A8E4C0A5FA2C663DB095509C0544D01714D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 10:22:30 +0000
Manifest this update:     Sun 22 Feb 2026 10:17:30 +0000
Manifest next update:     Mon 23 Feb 2026 13:53:30 +0000
Files and hashes:         1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: fHMw4IEA0gTYF5ANicMQxAipwjf6dhasUj/H8f6jNAE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ac:2a:8e:4c:0a:5f:a2:c6:63:db:09:55:09:c0:54:4d:01:71:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65
        Validity
            Not Before: Feb 22 10:17:30 2026 GMT
            Not After : Feb 23 13:53:30 2026 GMT
        Subject: CN=EF0D9FEB544D53EC93C168A0322AFDC381C801CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:40:a4:85:04:ed:26:c9:11:48:71:50:f6:
                    c7:88:81:fe:68:ab:13:3a:f9:e1:1b:0a:70:67:cd:
                    ec:14:4c:1c:24:ff:a9:46:2a:85:b9:46:3a:42:5f:
                    e7:dc:00:41:c7:8e:ad:38:94:6a:10:ce:6c:6e:2a:
                    04:04:6b:8e:ae:86:2b:07:ec:b7:24:ef:98:3d:4b:
                    99:a2:f2:b5:b2:d8:1c:1a:0b:1f:77:31:ea:35:84:
                    69:01:fd:0d:51:3d:ba:fa:50:51:71:d3:45:d5:07:
                    85:d2:53:7f:85:c8:86:27:29:1e:74:e6:80:0c:15:
                    3c:18:f0:ac:6d:e9:55:b0:83:bb:6e:dc:c3:c3:55:
                    ca:89:04:9c:b6:d0:35:99:ee:78:47:d3:7d:11:9f:
                    b4:b0:c8:74:66:9c:62:7d:95:eb:d9:f1:d0:fa:3a:
                    a4:4a:25:ae:10:77:78:00:fa:be:e2:fd:f1:01:b9:
                    ea:97:38:05:3d:b1:ba:8f:23:36:55:ea:f4:7c:6d:
                    1f:bd:5c:39:7b:e9:f1:a5:7a:a8:d8:fc:a6:6e:51:
                    50:2e:5d:0e:d9:1d:16:32:0f:a6:2b:0f:9f:f3:08:
                    18:3d:1e:ce:ff:58:e2:9f:e9:0b:5d:21:92:85:07:
                    be:c2:b7:dd:74:19:90:6f:8a:6c:cc:3d:dc:98:b0:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0D:9F:EB:54:4D:53:EC:93:C1:68:A0:32:2A:FD:C3:81:C8:01:CB
            X509v3 Authority Key Identifier:
                keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:47:7c:3d:c4:2f:8e:b7:6c:18:af:f8:a5:b1:d3:a1:9d:c7:
         bf:ef:69:91:8c:0e:23:8d:19:da:89:54:3b:66:41:fc:98:a4:
         9e:99:43:74:bd:6a:f1:47:af:c3:ac:f9:f9:d7:00:1c:35:d7:
         42:79:66:2f:b4:59:ff:fe:f4:ea:1e:cf:38:72:1d:0d:b0:0d:
         79:61:c2:9c:c5:83:85:50:58:59:8a:f1:c5:25:08:27:be:67:
         83:3a:f1:61:52:a3:b0:72:d8:f7:02:45:38:fd:4c:46:85:dd:
         09:4f:82:1b:01:01:5f:8d:0c:8d:47:91:c8:dd:3d:36:63:e1:
         52:ec:49:c7:e0:b5:c7:b2:6f:b4:22:da:dd:b3:ab:c4:5c:77:
         7f:b8:9a:9b:11:3f:20:bf:66:be:b0:f3:ab:c7:0b:a3:be:bf:
         fa:22:d5:e3:a7:7c:f5:01:ba:94:31:a5:c5:ef:7f:95:e1:71:
         0d:24:88:1e:94:9d:bb:3b:7c:d1:26:b4:21:c3:c2:9e:67:22:
         8a:b3:9b:7f:0b:73:f4:81:ec:c4:1e:dc:00:95:07:74:90:78:
         2c:7e:ae:cd:a2:54:6a:e4:c2:4e:7d:c8:9e:70:e5:53:22:a4:
         f1:c7:50:cf:fb:33:33:83:e7:07:90:99:a1:40:d9:cf:bd:7e:
         79:aa:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:10 2026 by rpki-client