Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
File:                     027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json)
Hash identifier:          jGmPjd+C/oIl2+FJoHl6MZd4uLFRGiE0pGdG2uFw0ec=
Subject key identifier:   16:F3:BB:E2:2D:A2:37:8F:DE:B0:19:73:20:8B:1C:B8:4A:12:97:1B
Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
Certificate issuer:       /CN=027E626491D467F2D967FA80361028FA06A786F4
Certificate serial:       610B6F72C91D126028B2F1BD98F68441848E0E95
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
Manifest number:          EB
Signing time:             Tue 14 Jul 2026 05:10:32 +0000
Manifest this update:     Tue 14 Jul 2026 05:05:32 +0000
Manifest next update:     Wed 15 Jul 2026 07:05:32 +0000
Files and hashes:         1: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: B2z0dgKhl8u/lBZZf+H6XgiPH0sFwd6b0U9UfXOSqnU=)
                          2: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:6f:72:c9:1d:12:60:28:b2:f1:bd:98:f6:84:41:84:8e:0e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4
        Validity
            Not Before: Jul 14 05:05:32 2026 GMT
            Not After : Jul 15 07:05:32 2026 GMT
        Subject: CN=16F3BBE22DA2378FDEB01973208B1CB84A12971B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:3b:3a:dc:48:5d:15:98:1d:d7:ed:ac:79:
                    78:7d:31:16:d3:85:55:26:ca:2c:a1:49:c0:62:49:
                    55:79:44:47:46:af:02:9a:1e:4f:7b:ca:fe:e6:d5:
                    b0:ca:2c:e0:ac:cb:a0:1e:ed:92:21:97:3c:23:0d:
                    d1:30:88:b2:e1:f0:8b:b9:d6:10:e5:af:e3:ed:61:
                    1a:22:05:8e:be:01:83:06:e0:19:20:2d:92:49:9f:
                    9e:ba:31:45:74:8a:fa:8a:95:a2:00:75:f5:4d:ff:
                    48:da:73:aa:f6:f7:f8:17:70:17:d3:12:e8:db:da:
                    1d:f1:9d:2c:ac:ce:6d:e2:f0:02:47:4b:88:39:89:
                    2f:ec:83:0f:63:12:0d:ac:19:a5:e6:95:d4:34:f6:
                    ba:d1:42:b4:95:fd:b3:12:9d:c5:79:48:f9:4c:a0:
                    76:2e:41:f3:77:6a:b5:83:fe:1e:80:40:7f:91:d5:
                    6f:cf:59:5b:38:c7:84:c1:86:db:26:c9:b9:05:72:
                    fb:ed:6f:5d:0b:5c:a6:1f:f2:23:40:b6:3a:3c:f5:
                    ac:85:13:44:0a:c1:69:0c:59:d5:99:0f:ae:fb:45:
                    fb:5c:8e:f1:8f:db:dc:4f:7a:ec:13:02:fc:53:23:
                    c3:9b:15:fa:71:0e:68:51:ef:99:cc:c5:a1:1c:40:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F3:BB:E2:2D:A2:37:8F:DE:B0:19:73:20:8B:1C:B8:4A:12:97:1B
            X509v3 Authority Key Identifier:
                keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:30:84:64:58:17:bd:c5:2b:80:96:72:01:f5:2f:fc:26:
         18:52:24:08:b4:e4:03:9c:29:a9:18:07:9f:5c:9c:8d:92:f5:
         90:72:4a:a0:c5:a9:8e:c8:82:b7:e5:04:0e:d2:5f:a1:00:0e:
         88:87:25:1e:09:4d:f0:51:31:91:7b:02:7f:65:08:15:f3:68:
         61:cd:4d:2f:fd:c5:5d:3f:1d:a9:53:c5:5f:38:d4:75:40:0c:
         ce:af:dc:f5:85:9e:f3:36:e2:03:c8:03:ba:6f:32:4b:b6:97:
         ea:61:ad:c9:4f:b9:74:6c:25:6e:7f:ab:db:35:6c:ac:94:c3:
         8c:d1:aa:73:0c:f9:80:4c:e2:51:e4:f5:37:57:39:a8:a6:e9:
         5e:d7:a8:95:09:f5:01:af:92:c4:0f:c4:ca:06:03:d7:f9:5e:
         aa:b7:27:41:93:c6:e2:9f:80:48:dd:3d:07:d2:6e:03:07:af:
         97:9e:e2:a7:68:d8:33:4e:90:2b:b1:31:e9:46:72:89:71:f5:
         29:7a:97:c0:27:e0:58:61:a9:09:57:22:a0:06:05:d1:b1:8e:
         9a:fa:99:00:e0:95:72:3f:67:13:e1:09:17:fa:73:1b:94:ff:
         6f:a4:6d:e7:d6:a7:5e:1f:78:9f:6b:df:42:66:e8:be:89:94:
         a0:d0:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:11 2026 by rpki-client