Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
File:                     F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json)
Hash identifier:          WFNdyBpdlIQoL2zKwjOMcrows+cQfk0aBaeH2A4TzwU=
Subject key identifier:   A1:4B:ED:CA:B6:93:6E:BE:4B:CA:0E:AD:43:61:B4:37:5B:EA:86:EB
Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A
Certificate issuer:       /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
Certificate serial:       06A2C0F9B0F69D1B19B436F0F000D1A3A562C782
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
Manifest number:          1B
Signing time:             Sun 22 Feb 2026 08:57:30 +0000
Manifest this update:     Sun 22 Feb 2026 08:52:30 +0000
Manifest next update:     Mon 23 Feb 2026 10:45:30 +0000
Files and hashes:         1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: vNGkV2F1lg3bG0FF+R+780KlGSsNTGBtOgf+BQp9bHQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a2:c0:f9:b0:f6:9d:1b:19:b4:36:f0:f0:00:d1:a3:a5:62:c7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
        Validity
            Not Before: Feb 22 08:52:30 2026 GMT
            Not After : Feb 23 10:45:30 2026 GMT
        Subject: CN=A14BEDCAB6936EBE4BCA0EAD4361B4375BEA86EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:ae:13:9b:c7:80:70:ef:cf:5a:75:a9:a3:
                    27:35:e2:aa:28:c5:d1:48:31:52:b6:80:1f:57:0e:
                    a3:33:da:b4:cb:ab:26:f6:1f:6b:47:8e:75:e7:f3:
                    8e:f0:62:f9:3c:42:0c:98:59:6c:aa:1a:51:18:f4:
                    2b:96:f0:a2:d2:94:aa:c6:7e:9d:66:2c:ab:89:4a:
                    6c:3c:98:37:48:f5:89:0f:d2:3e:f8:0d:4d:e7:e3:
                    c1:71:ea:6d:fe:04:c5:1b:7f:1b:cf:48:82:f1:4b:
                    84:bf:05:ac:6e:37:22:d0:1b:d4:81:e5:6e:5c:0b:
                    30:53:18:96:c2:fc:b2:f4:24:e8:4f:63:2d:a8:40:
                    ea:74:ce:2e:89:d3:38:9f:17:97:76:fd:92:0b:0b:
                    61:a9:54:7b:25:1a:7a:ff:bf:b9:ec:9f:3e:ea:51:
                    eb:af:36:b0:c8:7a:90:21:f2:49:44:29:c9:a2:b4:
                    75:15:c1:a7:47:20:6b:32:7b:f0:8e:cc:3d:bc:20:
                    cc:e3:99:df:0e:b9:86:c3:0e:e2:23:48:c2:b7:72:
                    ec:fb:b0:aa:f7:76:79:bf:64:6b:82:17:19:10:aa:
                    88:a5:34:09:19:2c:d2:c1:56:66:c5:97:ab:37:fb:
                    6b:88:fd:db:0c:a2:b9:57:1a:98:11:77:59:85:e9:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:ED:CA:B6:93:6E:BE:4B:CA:0E:AD:43:61:B4:37:5B:EA:86:EB
            X509v3 Authority Key Identifier:
                keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2b:28:cc:7f:58:d5:30:54:24:87:be:be:a8:53:67:5a:3b:
         47:0a:21:dd:ff:6a:91:bf:8a:6a:da:20:e1:b6:ed:0a:08:6b:
         ed:18:b4:c4:08:96:93:0d:97:ed:b6:ae:68:4c:ab:7e:a4:f8:
         77:63:07:d9:13:e3:93:a9:53:c8:fe:2e:a3:ff:f4:a3:a6:aa:
         86:67:8e:fa:fd:82:93:28:d7:0f:c4:89:0d:4e:d3:a8:2a:40:
         10:20:e6:0d:d9:00:6a:fb:9e:7a:c4:d7:0b:f8:b8:d9:e3:6c:
         9f:8c:90:c5:2c:0f:f9:90:2a:31:74:a1:74:6c:e9:69:05:ee:
         2e:2d:91:fd:3c:35:53:e7:53:f8:e1:f7:25:4f:cf:31:11:8f:
         95:cf:b5:7c:51:da:27:e6:a4:f3:d6:31:fb:35:15:78:d3:84:
         f1:f2:05:f6:98:a0:11:92:ea:9d:a5:31:5a:7e:3d:bc:42:70:
         10:1c:98:68:53:7d:10:5c:28:c2:d6:0c:af:3a:e0:ad:15:d2:
         8a:9c:a4:a3:12:96:b2:27:26:ca:e8:bc:04:41:ac:a7:1c:7d:
         65:24:cd:45:cc:13:94:93:0f:e6:ac:f6:dc:a4:d1:42:03:e3:
         f5:cf:13:1b:42:8d:6b:08:5c:d4:a7:0d:22:69:81:5d:6d:b7:
         a6:d3:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:13 2026 by rpki-client