Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          15agYRgx+mIs64MNJBFY7GGxAUjZXBWnnQSpueM53l4=
Subject key identifier:   7E:7B:1E:90:ED:72:F7:70:E5:32:55:49:96:E7:C1:A4:D4:84:11:E1
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       282AFFFE0D44E32E24D85826A1FEFAA2AD5EDA19
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          2E
Signing time:             Sun 22 Feb 2026 07:27:30 +0000
Manifest this update:     Sun 22 Feb 2026 07:22:30 +0000
Manifest next update:     Mon 23 Feb 2026 09:28:30 +0000
Files and hashes:         1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: TtEH4eli4BeG0jieRG8FYbQgX0H8Z1bP+lUvB5OSeso=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2a:ff:fe:0d:44:e3:2e:24:d8:58:26:a1:fe:fa:a2:ad:5e:da:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Feb 22 07:22:30 2026 GMT
            Not After : Feb 23 09:28:30 2026 GMT
        Subject: CN=7E7B1E90ED72F770E532554996E7C1A4D48411E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:a6:db:00:4f:47:2d:3e:9e:78:a8:73:26:
                    e2:d5:61:b0:8f:f2:13:d3:7f:b6:f2:26:84:4b:dd:
                    50:b7:28:33:00:1b:a4:a7:7d:8b:f9:3a:28:56:a5:
                    24:60:29:83:89:04:77:00:5c:e2:2d:d1:d8:58:51:
                    27:45:e7:db:5f:04:38:71:e2:bd:a4:58:4f:2b:49:
                    d7:ce:3b:ac:58:21:f1:34:fa:4f:75:79:c2:b8:ec:
                    ae:e0:ce:b0:ac:49:df:37:0e:fe:0b:41:c4:66:67:
                    10:ba:be:48:78:dc:37:73:0b:2b:d5:2e:28:48:41:
                    98:ea:63:06:8d:7f:87:57:60:f7:5e:15:10:4f:25:
                    9f:30:2a:bf:c1:b8:30:86:45:31:89:cd:ec:16:a5:
                    0e:5c:3b:41:87:e1:6f:e4:36:da:33:9f:19:79:f2:
                    31:db:fd:9e:31:07:e2:be:21:15:79:0a:56:7d:98:
                    85:59:ae:75:bb:bb:1c:09:f5:db:b2:b2:5f:c7:75:
                    75:ff:fa:f6:69:d3:3a:a7:6b:a4:27:ad:e8:b9:b8:
                    7d:41:e6:de:5f:fd:27:43:36:09:0a:b8:76:fa:65:
                    01:77:a1:72:d0:79:4e:89:07:26:e1:c9:1a:f1:72:
                    2a:68:60:8a:42:5a:96:44:3c:d3:f5:6f:42:56:3c:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7B:1E:90:ED:72:F7:70:E5:32:55:49:96:E7:C1:A4:D4:84:11:E1
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:91:2d:e6:cf:de:84:97:3b:5b:91:7c:19:b8:09:9d:50:
         44:f8:7d:e5:fb:f3:da:48:a9:d1:8c:99:15:65:56:87:a0:c3:
         8b:98:c7:7a:98:b0:2c:8b:e0:c8:84:10:02:5e:d9:83:34:44:
         0c:b7:69:3b:06:73:9a:51:d4:03:6b:66:a8:20:2b:82:c4:9d:
         c6:40:93:4c:60:2f:1f:fd:ec:7c:de:33:c7:ec:d7:dd:94:a5:
         23:0b:e2:b9:d3:18:b7:39:2b:e0:ee:16:f8:b6:69:6f:51:6f:
         06:e8:0f:28:8d:c0:40:21:2d:6a:36:e7:5a:bb:e6:3b:61:20:
         d2:6e:42:e4:e7:bd:8a:3c:24:9f:c6:c8:f2:71:58:e9:e3:a5:
         51:29:db:ed:90:eb:2d:62:f4:a4:dc:0a:fd:5e:a5:d5:9e:33:
         42:1e:c8:a7:d7:f3:a1:24:5d:22:ee:04:5e:80:56:df:0c:8d:
         07:7d:49:52:95:c5:8c:01:8b:b5:6c:eb:d2:c0:6c:06:e4:bb:
         70:13:53:8c:5d:cf:46:65:ff:a2:87:4b:4e:9b:62:d6:c7:e3:
         10:d6:0c:46:57:0d:c4:7b:a2:8e:d5:45:37:c2:26:65:83:07:
         97:81:d9:cc:14:66:8c:68:95:0b:1d:91:55:a2:4c:1b:b3:46:
         8f:75:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:28:41 2026 by rpki-client