Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
File:                     AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft (raw, json)
Hash identifier:          ZsrDySD5A6KYMFdgZWcwgwt2eqy8iHFUzvxg/Ioo6IM=
Subject key identifier:   0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Certificate issuer:       /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial:       29A8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
Manifest number:          296E
Signing time:             Thu 19 Feb 2026 23:58:37 +0000
Manifest this update:     Thu 19 Feb 2026 23:58:37 +0000
Manifest next update:     Fri 20 Feb 2026 05:58:37 +0000
Files and hashes:         1: 27bgjmmwbF59YVqphftbVMyneb8.roa (hash: 1uD3TZNTINDyYUqPmv22HJqMul/KVpchJuhXdJl2eeQ=)
                          2: 4UrDTuI3fRzxDkq9jmbrDmI-UHA.roa (hash: oZG+CE81ah9aXVNLu38K4yiAAENpfLNqjhEmoyhOSrs=)
                          3: 8UazvGr8myutsZuYchfmJiGlpPU.roa (hash: dwAzogItaSJiR8s2XycaBfjUY/ztu1XyATE78EINMAs=)
                          4: AMsZswWK7O-X-DZlVodR1j6bKgE.roa (hash: gZ/vAOiZ4ghzLpY/d54TAnLwdYCKR44e6XsJZDWHOuI=)
                          5: AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl (hash: IGlFxQ8OdXwGUcBHSHm1v1EZoZlTJKcLt3wQUVc8v4A=)
                          6: C6ag7U5RmZ0EYqCxc2v4ET9rKsc.roa (hash: OQBn+27/GulF2o2k19vSK4xICKuvpEdVs6DwC29ENJo=)
                          7: DidIRSkw-WRcPi5FzKflyO7_D70.roa (hash: g8DB708QXq44Q/8NDczaROW/YsbIAjGxcxz91MAz1ho=)
                          8: LgcTxi9rn3RrY68Oq4AMCUNBsXI.roa (hash: QlvAFBKmcfZre77hDOMcaOgF9Waw8eFjmdd08teW8Z4=)
                          9: OjhYk2JTtXMr2VTJQ8SdzwdDT1s.roa (hash: lcodeE3IeVytTqji8Vl/2et7iTCM/vCchqxnNxXe1us=)
                          10: QWNPUriuPTu9mMN7kkS5vSl3FpQ.roa (hash: wpNrPvLlM/Y/pcvk+2/pS1oFpwzKcTWyZzPhM+/WiEw=)
                          11: Uu2yjNfB95SbG7-fDjsCIwA9T6g.roa (hash: fN3aXFAbD+RtnMBPuinDNOhG9QamHfd+luJc5OPGm5c=)
                          12: WndHbjRCw23yWTJ5rI3H19Ad0Pk.roa (hash: K7cZOi+gqIGqw1P04flbzPMyz3gWL3RLQYClc3Qy/yM=)
                          13: YtgPMpzsRzGXBs45mr1kyGJf1Os.roa (hash: 98gJqd8+/J+xFOWdPMc/FU4rHgZx0N080kCzwFikk9U=)
                          14: bzHUb37wqq6vZG_XdGOsSODnE5g.roa (hash: esZfW+ZJ3LKtDeHoVr6XI4SDXbU1JFrxpW5XtTZYbBQ=)
                          15: fBgIpTOxAzFFnzpWsXPx2pB0L6g.roa (hash: zwZxd4I2TQQt/4G3oN3RZ4Tc5bdK7vg8n88gUAbJcwM=)
                          16: gW4EuJO8f7MZH4a6My2N0BPQo2o.roa (hash: o9zHDf5qvOrfWmIyXAjwjOML9FNKrus9hv6txpKsZBY=)
                          17: kMtGhQY_DnHonghgB-517K1lQLU.roa (hash: PAz0Hu8Y3D0G++gjB/sjurw0ZoEzzimp8e5HgUHfkEQ=)
                          18: lUU9VdyhnT40lvxO7cwjESQacmk.roa (hash: dBHKedmYfwwN9CCpggiGn1QUz90iR+s787FT3wXJ3ow=)
                          19: m7KLpdIkQhlUic2KR1DO-C_kVjY.roa (hash: wbqVDuJjy0gMzAY6r7yd/CaS0ynLzINfV0y7Srll4Pg=)
                          20: t1LLR_-XYrjVKRkJHwWKmzv5vM8.roa (hash: 7nQf2ITpmzHKe2QQyX0zPlhN6/0hAToZxQzHdoLwcLs=)
                          21: uOcIBjmNT5CFe4fLuWdjVUr8WCY.roa (hash: mz1JD6lE8OmV/eiKAkFWtQowBvk6JVFFxyyQYyRR8Rs=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 05:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10664 (0x29a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
        Validity
            Not Before: Feb 19 23:58:37 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=0ACA00C337354773164EFA107456DA00F2479420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:6d:48:bc:f4:25:1f:b6:54:5a:ee:62:35:
                    84:9c:47:d7:7d:e3:39:fc:84:de:e4:9c:24:10:c4:
                    15:b7:6a:c7:11:c4:7a:8b:84:71:f9:fe:56:b0:a5:
                    55:e5:2c:e0:99:ec:1e:c2:20:1c:39:ff:aa:83:ba:
                    61:e1:52:d5:35:6b:a6:2d:39:a4:44:90:3f:e5:0c:
                    56:ec:4e:3f:c2:d9:77:be:01:06:66:00:c8:80:d0:
                    bc:c2:e3:42:04:bb:38:ab:43:86:a8:97:53:18:6d:
                    e9:4f:3d:56:6a:20:08:0d:dc:58:2f:f6:a9:ed:16:
                    1c:19:48:1a:b7:b9:47:ff:1c:c7:df:21:34:df:60:
                    c9:d2:ae:fa:f4:ed:6c:a6:40:db:db:85:ae:42:1c:
                    87:4c:54:29:21:40:8b:e6:48:51:71:ba:a5:5a:5e:
                    75:55:fb:22:6e:af:74:49:cd:9b:50:46:a4:40:4c:
                    fc:4b:8d:45:98:1f:29:ce:1a:ea:7e:56:df:7d:5b:
                    fd:38:47:91:f1:20:47:12:aa:21:6b:30:12:eb:91:
                    a2:b1:ed:36:b4:bd:26:0f:bf:8d:c0:de:7f:e5:70:
                    b4:b4:8b:40:72:89:15:2a:55:81:12:a5:54:1c:e7:
                    28:5c:7c:f5:c0:de:43:07:f2:76:e1:c8:74:53:62:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:00:C3:37:35:47:73:16:4E:FA:10:74:56:DA:00:F2:47:94:20
            X509v3 Authority Key Identifier:
                keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:21:47:7d:ed:0f:46:4e:9c:44:b1:6c:2c:f1:78:a9:d9:
         9e:82:67:41:6c:a9:21:8e:d0:db:37:c7:63:d2:7c:fe:10:0b:
         58:21:59:f0:c8:40:47:94:60:c8:76:96:1c:64:e0:09:85:2b:
         c7:87:fe:86:ec:f5:a4:3b:34:1d:65:d8:b5:8d:64:cb:df:e6:
         55:48:b5:ec:76:e5:9e:c2:b6:e2:7e:ab:7e:c5:84:5a:f9:8d:
         39:da:ff:89:69:ba:39:03:e7:1d:ee:75:de:8e:46:84:13:d4:
         18:38:ad:e8:c4:ad:3e:91:cb:34:f1:02:79:32:5d:13:bd:e8:
         a3:6b:78:38:cb:48:b0:fc:b4:9b:28:1d:e9:c4:12:d5:47:dc:
         21:63:2c:7f:3c:a8:b2:0b:a9:10:32:f5:2a:3e:76:1e:c7:b9:
         51:a2:89:37:be:c4:e2:5e:1d:e8:a9:aa:69:d9:03:4d:1f:c7:
         92:29:fa:80:0b:ae:99:42:e2:23:a6:c7:94:6f:19:cf:da:0d:
         e5:8e:37:66:ba:85:00:72:8d:50:01:a9:1c:85:10:e6:83:4a:
         43:98:39:c9:be:7e:58:7b:b0:02:da:78:76:75:7e:3d:c1:fb:
         9f:48:ce:4c:1b:1e:6a:60:e2:62:70:8b:40:ca:95:90:c2:7c:
         f8:b4:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:42:33 2026 by rpki-client