Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File:                     2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier:          cMRwca99TCdfaI8DzjNrb/Y2YENpvErIOOpHENwTwQk=
Subject key identifier:   0E:32:20:0B:FC:6E:E8:D6:A9:EE:90:64:B3:FD:5F:B2:80:D3:AC:A1
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer:       /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial:       1C9B3F84AB35914B7B6883E4788192BFE592108B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number:          2D
Signing time:             Fri 20 Feb 2026 18:27:28 +0000
Manifest this update:     Fri 20 Feb 2026 18:22:28 +0000
Manifest next update:     Sat 21 Feb 2026 19:56:28 +0000
Files and hashes:         1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: 5FR2p8q6CXLWL7Wgs54VZwbU9UMy+zfmoZW+6zlPKms=)
                          2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 19:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9b:3f:84:ab:35:91:4b:7b:68:83:e4:78:81:92:bf:e5:92:10:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
        Validity
            Not Before: Feb 20 18:22:28 2026 GMT
            Not After : Feb 21 19:56:28 2026 GMT
        Subject: CN=0E32200BFC6EE8D6A9EE9064B3FD5FB280D3ACA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:6e:1f:1a:aa:d6:d7:5d:af:d7:fd:ec:90:
                    c1:be:be:5a:ac:5e:bf:e1:ef:c3:bb:26:6b:19:a9:
                    e9:c2:07:7f:e7:3e:e9:4a:55:83:64:69:38:0f:bb:
                    0b:1f:c9:73:63:ea:88:77:b1:95:74:5d:53:f2:a7:
                    6a:a4:58:aa:f8:50:8f:e2:09:53:db:77:f3:a9:5c:
                    c6:fb:33:fd:77:c6:33:a2:47:5f:8e:a2:a9:25:0a:
                    9e:dd:42:1f:74:52:67:dc:2d:e5:df:42:e4:ca:0c:
                    eb:13:2c:3d:44:de:31:fc:c6:1b:68:ed:38:97:44:
                    ea:b6:bb:5d:80:e4:bf:e9:cf:6a:f9:f6:cb:54:44:
                    8f:d1:21:d0:2b:5b:b7:c8:7a:26:5c:ac:f2:f0:42:
                    ed:c1:51:5f:e0:9b:8c:b8:6c:2c:fa:e1:ca:90:a2:
                    ab:6e:39:db:dd:fb:83:81:e8:c9:4d:b0:5d:57:88:
                    b3:03:a6:2a:7d:7f:67:cb:8c:d9:af:b8:79:db:42:
                    8d:70:19:cd:a2:54:0c:8d:ec:de:11:4b:96:52:d8:
                    eb:13:c1:af:6e:99:8e:8f:36:56:9a:70:53:c4:4b:
                    f4:3d:99:d1:4c:8e:1f:1d:a0:6d:ce:b5:08:e2:fe:
                    f4:cb:9f:31:0a:93:0d:3d:e0:9c:da:28:9c:d1:93:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:32:20:0B:FC:6E:E8:D6:A9:EE:90:64:B3:FD:5F:B2:80:D3:AC:A1
            X509v3 Authority Key Identifier:
                keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:9d:cb:73:26:c4:2d:20:58:e3:8f:7b:62:66:9b:1d:2f:
         c7:6f:80:f7:4a:19:04:79:32:bd:ab:5c:54:58:5c:a6:9d:e0:
         9c:42:09:83:db:64:f7:4e:88:f3:a8:75:78:ac:ea:2d:d4:22:
         09:c0:6e:07:4b:62:74:2b:f8:19:44:17:bd:8f:79:03:4f:a7:
         a9:dc:74:ce:00:18:6b:ee:3b:c2:e0:80:31:13:60:3b:4b:f3:
         4f:ad:97:7c:1a:b7:18:37:60:d2:13:02:2e:54:35:8b:dd:03:
         98:cf:8c:16:82:ce:a3:b3:1e:e5:1a:ca:ae:72:7f:0c:a1:3c:
         83:04:3a:09:31:d8:a3:e6:0e:d5:ef:ec:f9:33:d5:7e:3d:1a:
         da:eb:a4:e8:a8:51:f7:43:d8:78:3d:72:d4:8e:27:16:ca:4e:
         bf:54:0e:af:19:49:6a:41:71:01:93:0a:6e:4f:c0:c1:a8:7b:
         a9:cd:2f:b5:89:16:cd:5a:eb:45:86:6f:4c:a1:93:05:00:d5:
         c8:0a:f0:46:75:fd:c9:23:12:60:b3:69:63:43:88:28:3e:96:
         ab:ea:40:66:bc:b8:b1:d2:a9:57:f2:c1:79:14:68:a7:98:f7:
         fb:c3:5e:9d:76:1c:52:bb:a6:21:09:d5:2a:dc:c7:ad:e1:b6:
         e7:7c:bf:7d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHJs/hKs1kUt7aIPkeIGSv+WSEIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1
ODFBNUM4NTAeFw0yNjAyMjAxODIyMjhaFw0yNjAyMjExOTU2MjhaMDMxMTAvBgNV
BAMTKDBFMzIyMDBCRkM2RUU4RDZBOUVFOTA2NEIzRkQ1RkIyODBEM0FDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanW4fGqrW112v1/3skMG+vlqs
Xr/h78O7JmsZqenCB3/nPulKVYNkaTgPuwsfyXNj6oh3sZV0XVPyp2qkWKr4UI/i
CVPbd/OpXMb7M/13xjOiR1+OoqklCp7dQh90UmfcLeXfQuTKDOsTLD1E3jH8xhto
7TiXROq2u12A5L/pz2r59stURI/RIdArW7fIeiZcrPLwQu3BUV/gm4y4bCz64cqQ
oqtuOdvd+4OB6MlNsF1XiLMDpip9f2fLjNmvuHnbQo1wGc2iVAyN7N4RS5ZS2OsT
wa9umY6PNlaacFPES/Q9mdFMjh8doG3OtQji/vTLnzEKkw094JzaKJzRk62nAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUDjIgC/xu6Nap7pBks/1fsoDTrKEwHwYDVR0j
BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1
RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew
MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscCdy3MmxC0g
WOOPe2Jmmx0vx2+A90oZBHkyvatcVFhcpp3gnEIJg9tk906I86h1eKzqLdQiCcBu
B0tidCv4GUQXvY95A0+nqdx0zgAYa+47wuCAMRNgO0vzT62XfBq3GDdg0hMCLlQ1
i90DmM+MFoLOo7Me5RrKrnJ/DKE8gwQ6CTHYo+YO1e/s+TPVfj0a2uuk6KhR90PY
eD1y1I4nFspOv1QOrxlJakFxAZMKbk/Awah7qc0vtYkWzVrrRYZvTKGTBQDVyArw
RnX9ySMSYLNpY0OIKD6Wq+pAZry4sdKpV/LBeRRop5j3+8NenXYcUrumIQnVKtzH
reG253y/fQ==
-----END CERTIFICATE-----
Generated at Sat Feb 21 06:05:46 2026 by rpki-client