Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File:                     7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier:          c8JFt3e/R3jGFPtgQZLU//jEw4PPcjJ2w5v4g2MxPVc=
Subject key identifier:   E5:BD:40:28:D2:86:4B:31:2A:0C:53:83:EA:15:1E:8F:D8:0D:25:5F
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer:       /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial:       2721559BC059D7AF053D9EB77FF95CCF28396CBE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number:          29
Signing time:             Sun 22 Feb 2026 06:47:30 +0000
Manifest this update:     Sun 22 Feb 2026 06:42:30 +0000
Manifest next update:     Mon 23 Feb 2026 09:16:30 +0000
Files and hashes:         1: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: j+X4byBiWBOe9+LYQW98CPDl0Xt/B0g1vr7XT0pDYUc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:21:55:9b:c0:59:d7:af:05:3d:9e:b7:7f:f9:5c:cf:28:39:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Validity
            Not Before: Feb 22 06:42:30 2026 GMT
            Not After : Feb 23 09:16:30 2026 GMT
        Subject: CN=E5BD4028D2864B312A0C5383EA151E8FD80D255F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:1a:3d:6a:c9:3d:3b:32:08:20:52:5a:e1:
                    3d:95:09:53:d7:d9:fe:ae:ac:71:13:73:82:2d:8c:
                    24:33:83:a1:d8:62:c7:de:20:7c:9f:3d:a0:a8:ab:
                    2a:88:82:1e:0a:c1:e9:bd:1e:85:95:f2:29:b8:a9:
                    26:5a:57:fb:65:39:7b:76:b7:62:9c:0e:4c:93:59:
                    02:67:07:1d:00:6f:a0:2a:32:83:e4:27:1f:41:cd:
                    8a:9f:1c:42:f0:64:bc:83:c7:06:ee:7e:0d:97:fd:
                    e5:9c:48:f1:86:6a:0d:d6:57:8c:ef:76:1d:43:b6:
                    6b:ad:ea:92:97:d1:08:26:ac:13:fb:07:e0:77:00:
                    dc:9d:8c:38:cf:0e:6b:78:1d:f7:d1:8c:02:87:bd:
                    92:6f:0f:f8:c2:38:17:ae:4f:a3:5b:31:c6:34:21:
                    77:f5:2f:6c:9b:a1:d8:b0:cf:90:9e:77:f0:3a:8a:
                    f4:04:9c:29:a2:2d:3f:2a:34:ef:c1:05:ef:1d:13:
                    ce:f1:b0:42:12:fb:8d:ea:eb:74:af:94:9e:1b:68:
                    02:0b:08:5f:ab:48:98:da:8d:11:3e:ba:f5:23:65:
                    a7:1f:88:79:84:c1:3c:40:dc:48:00:6e:17:49:9d:
                    6e:80:cb:c2:ad:df:e8:a5:ef:be:21:cd:38:b3:2e:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:40:28:D2:86:4B:31:2A:0C:53:83:EA:15:1E:8F:D8:0D:25:5F
            X509v3 Authority Key Identifier:
                keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:45:d6:d9:c6:25:75:24:5b:7f:48:28:19:65:87:32:19:8e:
         ca:ea:1b:2b:bc:54:f9:54:9e:0a:78:d8:b5:e7:d4:cd:a4:0e:
         f5:4a:aa:c8:7a:d0:5e:99:90:fb:3f:4c:e4:6a:7b:ac:8a:71:
         13:12:f6:bc:36:85:e8:4d:c0:7b:c5:32:98:8e:51:85:68:2d:
         0d:27:b0:7c:05:b4:ea:83:e3:d3:98:59:4b:03:4a:ad:b2:23:
         e1:49:1b:70:b2:f7:26:56:f2:ce:3b:fd:46:e0:75:ee:94:0d:
         fa:cc:11:61:42:68:c0:80:b0:74:44:3c:6a:1f:62:bb:30:ae:
         86:bb:c8:56:98:7a:71:2c:08:be:12:27:f9:c3:e4:67:ed:1a:
         71:d4:c3:53:03:87:d9:4d:74:21:c8:5e:75:61:9d:23:3e:a6:
         b6:86:5b:74:3e:7a:66:60:1b:1b:d9:72:f6:fc:ac:fe:d5:9c:
         03:9f:49:e2:f2:ed:39:d9:67:cd:a2:e0:55:69:7b:02:33:6c:
         b6:77:6b:cc:31:33:9d:0f:77:6e:1d:7b:53:a9:98:91:30:94:
         6e:a9:96:0f:3a:85:59:e6:ce:c4:3e:a0:1c:9d:e6:cf:bf:63:
         fc:63:80:9f:79:0b:99:85:8b:13:d5:c0:47:fb:c0:48:71:10:
         71:55:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:06 2026 by rpki-client