Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
File:                     39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json)
Hash identifier:          48ClOJiEUQD7njosXLgpZdKJbJlf1Eiqm3HuYcwJrFE=
Subject key identifier:   83:3E:3A:B6:68:FC:00:C1:31:3B:5D:36:07:ED:80:85:6A:75:4A:E3
Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
Certificate issuer:       /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Certificate serial:       7E2775E58010EDC5355B3EEFD05549FFA423AD2B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 15:57:30 +0000
Manifest this update:     Sun 22 Feb 2026 15:52:30 +0000
Manifest next update:     Mon 23 Feb 2026 16:33:30 +0000
Files and hashes:         1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=)
                          2: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: sbMeBtiSJWJE2sSs07oOCj1bNysIaMBsN+6Le+9FgfU=)
                          3: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=)
                          4: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:75:e5:80:10:ed:c5:35:5b:3e:ef:d0:55:49:ff:a4:23:ad:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
        Validity
            Not Before: Feb 22 15:52:30 2026 GMT
            Not After : Feb 23 16:33:30 2026 GMT
        Subject: CN=833E3AB668FC00C1313B5D3607ED80856A754AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:fa:ef:2f:b1:01:18:e8:2f:ec:32:34:e0:
                    22:f1:4a:af:53:24:b2:d3:e0:36:31:37:96:76:79:
                    a4:15:85:c6:bc:a3:13:be:9f:9e:ae:6c:cc:fc:ef:
                    43:db:00:80:74:d6:39:4c:58:89:3b:8a:24:9d:00:
                    bc:77:e8:14:dc:93:dc:ec:1f:fb:ef:a5:e9:0c:e8:
                    64:24:4e:28:c8:51:a3:05:5b:64:29:f9:22:8f:a0:
                    3f:d9:03:92:0b:1a:96:5f:c8:9c:64:d1:0c:e1:4c:
                    a7:4f:c7:6b:8a:7d:d5:8e:c2:8b:a6:fe:55:e9:8a:
                    87:db:78:c8:b9:87:1f:95:57:c4:8f:6d:bf:e5:bb:
                    87:28:0d:33:d4:79:47:6b:f7:3f:1f:4d:ba:5a:a5:
                    a4:d5:11:cc:f1:63:d1:cc:81:99:60:71:50:9c:7e:
                    9d:6c:2c:a1:c0:f2:da:42:b1:47:97:42:b1:b6:8b:
                    0f:e7:57:20:81:7e:42:bb:8f:89:df:c4:7e:26:7c:
                    58:9c:80:85:f1:aa:1f:9d:08:b1:34:b2:0b:3a:9d:
                    1e:b7:33:79:34:d5:78:79:5e:ea:ec:d1:8b:a8:0c:
                    3d:52:23:24:d7:46:38:90:36:a2:7b:8b:d6:15:6a:
                    e5:b2:c9:38:48:1d:4a:c9:0d:32:00:fe:0a:5e:3c:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3E:3A:B6:68:FC:00:C1:31:3B:5D:36:07:ED:80:85:6A:75:4A:E3
            X509v3 Authority Key Identifier:
                keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:63:a3:f6:2c:64:90:91:75:a5:64:a9:7e:ee:1d:3f:41:f2:
         c3:e0:98:3f:2f:81:63:89:b8:68:9f:70:cf:a2:ee:d6:a8:a8:
         a2:4a:7e:3e:a5:57:3f:2f:fd:50:79:ea:ae:f1:e1:ed:50:4b:
         87:52:4c:7c:e7:ee:cd:ac:a3:66:92:04:d4:46:61:a0:00:11:
         ca:3d:21:a3:e6:65:4f:4d:52:42:89:83:da:d2:47:35:74:c3:
         be:21:9f:b3:fa:df:3d:f1:06:39:46:e5:07:86:e7:6f:c0:b1:
         25:7f:a4:4c:b9:9c:9b:b2:60:41:76:11:77:96:10:9d:bb:70:
         13:9a:f3:53:c1:08:94:07:54:4a:9f:3b:d7:5b:5e:77:53:e2:
         d2:54:4b:07:2d:1e:85:ad:de:05:f3:78:e6:32:d4:4f:63:1a:
         f8:b5:ad:29:d9:ba:0c:d5:c3:2e:fc:5b:df:7a:cc:8c:41:31:
         54:da:ea:64:fd:89:ab:6a:b4:36:64:48:4e:ea:2b:37:d5:59:
         1e:a5:0c:50:ff:78:e0:83:f7:eb:e1:2c:3c:33:24:80:56:df:
         5f:db:8a:ee:5d:62:dc:9f:f8:8a:7a:de:82:ab:ff:5d:c5:c0:
         41:64:eb:a9:37:c7:b1:0f:49:79:99:bc:ff:f1:ab:9f:ed:ea:
         13:5b:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:07 2026 by rpki-client