Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft
File:                     C47353D21D668838E2523770D8C0FD078215052D.mft (raw, json)
Hash identifier:          3K1IDcmpKiEbRpvxfsvt1UaQV+kDPWg066y8KHHh0bo=
Subject key identifier:   51:57:F7:52:3D:BD:3B:40:79:7D:89:A8:6B:37:91:F4:15:FA:18:70
Authority key identifier: C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D
Certificate issuer:       /CN=C47353D21D668838E2523770D8C0FD078215052D
Certificate serial:       60AA76CDA1A88FF91B262E78257644CFA6191C89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft
Manifest number:          2E
Signing time:             Sun 22 Feb 2026 19:32:30 +0000
Manifest this update:     Sun 22 Feb 2026 19:27:30 +0000
Manifest next update:     Mon 23 Feb 2026 22:16:30 +0000
Files and hashes:         1: 3136302e31392e38322e302f32342d3332203d3e20313531323631.roa (hash: wIryNUkq+SQIuh9QyxK3ngEMwqyiwq3cbzW2X3MdysU=)
                          2: C47353D21D668838E2523770D8C0FD078215052D.crl (hash: jI04iz5WxwmX5Thv7OKcrEjdxB5t/uEyECfKZbJH8Ww=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:aa:76:cd:a1:a8:8f:f9:1b:26:2e:78:25:76:44:cf:a6:19:1c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47353D21D668838E2523770D8C0FD078215052D
        Validity
            Not Before: Feb 22 19:27:30 2026 GMT
            Not After : Feb 23 22:16:30 2026 GMT
        Subject: CN=5157F7523DBD3B40797D89A86B3791F415FA1870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:52:ac:0b:a3:8d:a5:86:1c:73:9b:db:40:
                    19:b3:31:dd:1b:f1:f8:08:04:fe:1f:79:f9:1f:7d:
                    de:64:c7:c1:83:92:49:22:d7:8e:55:7d:ab:87:8f:
                    db:16:e9:f1:83:02:a4:7c:8a:26:e9:5c:b0:9a:cd:
                    66:d1:13:20:f7:f8:f6:f0:50:fd:43:1d:88:76:f2:
                    87:e1:56:b3:97:23:83:ac:34:f7:11:4f:99:b5:44:
                    be:0a:88:10:70:27:6b:32:a5:2e:40:81:39:de:5a:
                    d7:5e:4a:41:7f:d0:cf:64:c3:3a:d5:00:f2:f2:82:
                    5d:ce:b5:85:54:ce:ab:64:ea:4b:48:5f:f1:45:3e:
                    80:e6:f6:af:91:04:aa:16:97:cc:61:4b:30:f1:5d:
                    55:96:7f:1c:ae:0b:a8:47:ed:fd:81:a0:e9:59:41:
                    ff:d0:64:a9:e3:2d:50:6f:28:5b:09:3c:df:e6:28:
                    a4:4a:d5:cb:b9:3f:1b:8c:24:b8:12:c7:a1:9d:2e:
                    21:3e:8a:86:78:04:2a:e6:af:23:ba:ce:a0:36:02:
                    39:5c:e9:d0:c9:ad:12:07:53:be:62:00:4e:42:c2:
                    5a:94:96:0a:5f:e0:b1:32:6d:55:d9:1e:6d:5c:4a:
                    4c:0b:a4:02:e6:c8:d1:61:bb:bf:d5:c4:98:b0:00:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:57:F7:52:3D:BD:3B:40:79:7D:89:A8:6B:37:91:F4:15:FA:18:70
            X509v3 Authority Key Identifier:
                keyid:C4:73:53:D2:1D:66:88:38:E2:52:37:70:D8:C0:FD:07:82:15:05:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C47353D21D668838E2523770D8C0FD078215052D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/1/C47353D21D668838E2523770D8C0FD078215052D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:86:21:00:5d:00:7f:15:3c:14:60:bc:22:c1:0c:14:db:4f:
         bb:e1:3f:03:22:8e:81:fb:8a:b6:1f:bd:a5:3e:ee:fb:26:7c:
         fe:03:7f:57:99:d9:7c:26:89:05:98:0f:2d:37:4a:94:04:73:
         ab:11:17:d4:01:4a:e6:05:a2:24:ab:0c:13:8e:3c:69:a3:ab:
         76:06:13:f5:bf:df:e5:a8:eb:2a:8a:ae:47:ea:7e:52:70:e1:
         2f:a7:64:9a:9c:41:5c:2c:f0:0e:37:05:9b:80:84:81:b9:08:
         12:49:b1:41:aa:93:51:f3:fe:f0:bf:a9:23:43:61:12:98:ff:
         62:c8:f0:15:c1:ea:b5:cd:43:e3:98:f5:2f:67:60:78:a3:f9:
         3a:46:de:3e:10:2f:5e:9f:b6:ed:c0:1c:5f:72:bc:a7:db:37:
         2e:f3:4b:0b:51:d4:5e:7f:64:22:b0:1a:d9:47:59:6c:9e:98:
         0e:1f:c4:83:09:a0:c4:6a:f3:72:4e:8f:bd:bb:96:a9:28:a4:
         f2:76:74:ed:32:ba:b5:ea:ee:ae:f2:4f:45:3c:2b:13:0b:0b:
         58:8d:7b:64:d8:fe:86:06:bf:cb:9f:f1:dd:3c:db:57:d1:4a:
         41:57:32:3c:a9:51:59:70:62:39:4c:d5:d0:3e:7f:01:4c:f2:
         ec:bf:a8:9c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYKp2zaGoj/kbJi54JXZEz6YZHIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4
MjE1MDUyRDAeFw0yNjAyMjIxOTI3MzBaFw0yNjAyMjMyMjE2MzBaMDMxMTAvBgNV
BAMTKDUxNTdGNzUyM0RCRDNCNDA3OTdEODlBODZCMzc5MUY0MTVGQTE4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY11KsC6ONpYYcc5vbQBmzMd0b
8fgIBP4fefkffd5kx8GDkkki145VfauHj9sW6fGDAqR8iibpXLCazWbREyD3+Pbw
UP1DHYh28ofhVrOXI4OsNPcRT5m1RL4KiBBwJ2sypS5AgTneWtdeSkF/0M9kwzrV
APLygl3OtYVUzqtk6ktIX/FFPoDm9q+RBKoWl8xhSzDxXVWWfxyuC6hH7f2BoOlZ
Qf/QZKnjLVBvKFsJPN/mKKRK1cu5PxuMJLgSx6GdLiE+ioZ4BCrmryO6zqA2Ajlc
6dDJrRIHU75iAE5CwlqUlgpf4LEybVXZHm1cSkwLpALmyNFhu7/VxJiwAB3zAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUVf3Uj29O0B5fYmoazeR9BX6GHAwHwYDVR0j
BBgwFoAUxHNT0h1miDjiUjdw2MD9B4IVBS0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjE1MDQwMi8xL0M0NzM1M0QyMUQ2Njg4MzhFMjUyMzc3MEQ4QzBG
RDA3ODIxNTA1MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQzQ3MzUzRDIxRDY2ODgzOEUyNTIzNzcwRDhDMEZEMDc4MjE1MDUyRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMS9DNDczNTNEMjFENjY4
ODM4RTI1MjM3NzBEOEMwRkQwNzgyMTUwNTJELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYYhAF0AfxU8
FGC8IsEMFNtPu+E/AyKOgfuKth+9pT7u+yZ8/gN/V5nZfCaJBZgPLTdKlARzqxEX
1AFK5gWiJKsME448aaOrdgYT9b/f5ajrKoquR+p+UnDhL6dkmpxBXCzwDjcFm4CE
gbkIEkmxQaqTUfP+8L+pI0NhEpj/YsjwFcHqtc1D45j1L2dgeKP5OkbePhAvXp+2
7cAcX3K8p9s3LvNLC1HUXn9kIrAa2UdZbJ6YDh/EgwmgxGrzck6PvbuWqSik8nZ0
7TK6terurvJPRTwrEwsLWI17ZNj+hga/y5/x3TzbV9FKQVcyPKlRWXBiOUzV0D5/
AUzy7L+onA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 07:17:56 2026 by rpki-client