Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
File:                     1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft (raw, json)
Hash identifier:          f20RYb60UnhcgdorarDwCiqr/VpyaFpgThU72dTBpJ0=
Subject key identifier:   AC:5F:2A:AB:FE:93:4B:ED:7B:14:D4:7A:4F:9F:5E:E5:92:31:3F:14
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       43A023BEF5DBCA5D4FC34A7626DC61EB4979F614
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
Manifest number:          5D
Signing time:             Mon 13 Apr 2026 00:19:17 +0000
Manifest this update:     Mon 13 Apr 2026 00:14:17 +0000
Manifest next update:     Tue 14 Apr 2026 04:10:17 +0000
Files and hashes:         1: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl (hash: cjIigHPiHAx5OWHIY0PaPVTlap223coLgephCFXXNkM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:23:be:f5:db:ca:5d:4f:c3:4a:76:26:dc:61:eb:49:79:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 13 00:14:17 2026 GMT
            Not After : Apr 14 04:10:17 2026 GMT
        Subject: CN=AC5F2AABFE934BED7B14D47A4F9F5EE592313F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:67:05:ed:96:f5:0b:73:ca:8a:58:02:d6:
                    6f:fe:30:8b:5a:86:b6:3a:79:e3:45:1c:be:3b:37:
                    c8:8a:6b:c8:e3:22:4e:d5:33:56:00:92:f5:4a:1d:
                    c5:f9:2d:73:28:0e:1d:5e:08:3a:66:9c:b2:e7:95:
                    8e:db:a1:ac:89:d5:ae:84:15:12:1e:33:f2:bc:54:
                    e3:29:99:79:d5:15:5f:b6:71:ea:b8:b5:0d:44:77:
                    e4:83:31:e1:dc:46:6e:8d:ea:ff:fa:9d:0e:6a:8f:
                    9e:7a:42:6b:4c:c2:46:2a:52:2c:00:bb:5b:c2:31:
                    95:ee:8d:e2:b7:20:48:56:ae:17:91:2a:ef:fe:fd:
                    ff:fa:9a:4d:ab:9a:8e:98:74:cd:05:e9:6f:7e:c0:
                    d9:c7:50:83:5c:89:de:e1:49:2b:22:1d:e1:20:2b:
                    26:7d:21:72:7a:96:9a:61:fc:d5:a4:98:a9:54:83:
                    a8:7e:67:16:08:c4:9e:f1:7d:db:44:c0:00:75:c0:
                    35:7e:1f:0e:a5:ff:de:fc:a7:dd:4e:eb:e9:fe:72:
                    7b:01:fb:45:1b:e2:9a:23:55:88:22:72:77:aa:7c:
                    a5:e6:91:b8:cb:ec:91:2f:d1:82:e2:62:43:0f:73:
                    a2:4d:52:af:f5:04:d4:7e:d3:a9:31:39:4b:99:f8:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:2A:AB:FE:93:4B:ED:7B:14:D4:7A:4F:9F:5E:E5:92:31:3F:14
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:dc:a5:a1:c2:be:fc:f2:8e:4d:67:f3:6d:dd:bc:ce:cd:
         f3:34:fa:27:16:58:94:80:f6:6a:99:12:cf:c2:cc:1e:99:95:
         44:33:b5:c8:b5:a9:62:cc:4a:aa:89:12:0f:44:39:fd:64:b6:
         22:0c:66:93:29:c5:be:34:b0:05:f4:f9:0d:c6:89:27:50:03:
         90:62:16:15:a2:10:44:33:44:90:f8:a5:23:ac:ff:ed:09:ee:
         d4:bb:e0:cd:fc:34:04:aa:d9:e6:2f:a7:49:61:3c:6b:53:5b:
         a8:06:e5:4f:2a:ac:4d:9b:2c:cf:f5:1e:a9:a1:5f:24:23:7e:
         8e:54:68:82:d4:6c:8b:b1:61:78:27:36:de:af:9c:31:d6:e1:
         6f:1d:fa:b2:c6:b9:f0:84:36:ae:b5:ec:de:41:f8:06:20:cd:
         bb:a1:63:53:55:00:ec:bd:0c:8c:b3:26:9d:86:c3:2a:f3:ee:
         ac:ea:19:7e:a0:18:c2:12:33:c2:ba:30:7d:9f:d4:e5:d3:8b:
         22:79:dc:c9:f7:a6:20:03:a3:07:aa:f8:f7:3f:94:d4:97:0a:
         84:0a:60:09:5a:be:14:6d:59:ce:11:85:8b:64:31:7f:fe:56:
         22:c4:04:a9:a2:9c:23:32:d0:70:5d:de:69:64:d1:6f:3c:74:
         51:2b:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:03:44 2026 by rpki-client