Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft
File:                     CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json)
Hash identifier:          r/hyJZD+sBIagxgiqgCznzbTbQyO3ucffPdnRiBVbtM=
Subject key identifier:   C4:89:0D:41:28:23:00:D3:B2:01:D7:E9:65:64:FF:B6:35:78:6B:AF
Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7
Certificate issuer:       /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7
Certificate serial:       09FE17EBCA998AA9E7EB267D46E58CDC4AAF5890
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft
Manifest number:          30
Signing time:             Mon 23 Feb 2026 00:02:30 +0000
Manifest this update:     Sun 22 Feb 2026 23:57:30 +0000
Manifest next update:     Tue 24 Feb 2026 03:56:30 +0000
Files and hashes:         1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: E0/yDRS0bP13GX37AjrEcEbbDzbJAXdYW1N2e8IosRc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fe:17:eb:ca:99:8a:a9:e7:eb:26:7d:46:e5:8c:dc:4a:af:58:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7
        Validity
            Not Before: Feb 22 23:57:30 2026 GMT
            Not After : Feb 24 03:56:30 2026 GMT
        Subject: CN=C4890D41282300D3B201D7E96564FFB635786BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:6d:da:16:d8:93:a7:59:73:dc:17:32:a1:
                    d6:2e:50:34:18:67:80:3d:1e:32:42:f6:2b:81:34:
                    4f:fc:59:10:dc:00:bb:7f:2f:b2:a1:3b:e7:57:f4:
                    ad:f1:85:d3:00:19:86:cf:05:d4:6a:ff:9d:e9:f8:
                    d1:61:6c:64:f8:ac:7f:8a:e0:7c:ad:d9:26:5f:ef:
                    b8:a3:98:c6:d4:e1:bc:5d:e5:79:6f:8d:a5:a4:59:
                    7a:d6:36:3a:c7:71:00:df:4a:c4:9c:db:b8:67:85:
                    04:22:ca:9b:96:d0:ef:e3:aa:50:ed:62:19:6c:fa:
                    2a:6f:5a:b8:4a:70:00:03:a5:e4:ec:87:00:e4:13:
                    d3:d4:f9:8b:27:ed:69:bd:4d:d5:b7:60:13:df:65:
                    d3:3b:bb:6c:1c:f8:0a:38:78:d8:ca:f8:70:c9:bf:
                    ab:25:f9:c2:fe:0f:ab:17:ca:04:c2:30:7c:46:b8:
                    86:e2:76:48:d6:e9:6a:63:7c:47:f9:a1:6a:42:4c:
                    f1:c3:89:b2:34:09:86:36:18:74:84:14:13:cf:c7:
                    c2:73:de:0c:3f:26:87:bc:e8:75:d6:11:72:6e:95:
                    ec:65:b2:54:10:c4:47:4a:e2:3e:37:03:4b:51:34:
                    48:07:16:e9:5f:79:69:96:c5:ec:ab:0b:b0:53:97:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:0D:41:28:23:00:D3:B2:01:D7:E9:65:64:FF:B6:35:78:6B:AF
            X509v3 Authority Key Identifier:
                keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:13:67:f2:3e:11:9b:9a:f9:c1:8f:df:c7:d5:ef:ec:a9:
         4d:bc:f4:28:fd:c1:2a:42:88:2f:d9:44:98:4f:9c:d7:f8:af:
         af:2f:f6:21:d7:73:ec:db:d7:ff:0e:4f:17:54:4c:cd:a4:d3:
         a9:a5:09:ff:be:50:72:93:c2:8a:f7:d4:67:1b:57:19:36:cb:
         1f:ac:3a:54:35:08:17:37:50:e1:3e:83:d6:df:00:4c:f0:b8:
         2a:b1:9c:b8:cd:c2:a9:29:14:f3:06:a2:53:73:7c:b7:cb:21:
         a0:31:36:83:c1:95:ba:a0:94:c0:dc:26:43:0d:19:4f:eb:ee:
         21:b4:b1:b4:45:00:2c:ea:64:1e:b7:c8:34:4d:be:58:f8:38:
         e0:f5:b7:80:b0:51:78:31:54:fc:fc:e7:d0:72:80:b9:cc:82:
         9a:cc:f0:e3:40:25:12:af:fb:a8:4b:b5:ef:1b:1c:bf:8b:28:
         1f:58:a0:29:f9:94:82:10:59:90:b1:fb:3d:dc:f9:ad:23:e2:
         2d:03:5d:0b:03:d6:46:cc:15:2b:04:a0:ad:49:ee:10:d6:22:
         b6:0b:34:46:bd:77:1a:d8:8d:62:60:bf:6b:b6:bd:70:b5:01:
         03:34:76:22:f9:3e:47:4b:de:63:c4:c7:25:3b:a9:35:8b:97:
         f0:b0:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:25 2026 by rpki-client