Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
File:                     2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft (raw, json)
Hash identifier:          LWp3Bp7YR01ZLhZZhTTYjD3Tg94fZn4HIi0BFcUu9vE=
Subject key identifier:   70:27:C7:68:82:EF:C1:E4:8A:3B:44:5B:40:0D:0D:DF:22:31:02:C9
Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Certificate issuer:       /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Certificate serial:       47B1FB1C27DEB1FFF86E709C80FD628376370738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
Manifest number:          5E
Signing time:             Sun 01 Mar 2026 07:19:44 +0000
Manifest this update:     Sun 01 Mar 2026 07:14:44 +0000
Manifest next update:     Mon 02 Mar 2026 09:51:44 +0000
Files and hashes:         1: 2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl (hash: k3/8cVZw8sAy3BZ1mJB5M2DkfrQ4vXWNlBRvIFtOUNs=)
                          2: 3130332e3234352e32332e302f32342d3238203d3e203234343039.roa (hash: duHWy89Z7iqgGUpExL4w6MQRvREJpv2Qr6dID4AHNSQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 09:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:fb:1c:27:de:b1:ff:f8:6e:70:9c:80:fd:62:83:76:37:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
        Validity
            Not Before: Mar  1 07:14:44 2026 GMT
            Not After : Mar  2 09:51:44 2026 GMT
        Subject: CN=7027C76882EFC1E48A3B445B400D0DDF223102C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:55:ce:c6:1d:3a:7b:0e:c9:6a:7f:8a:23:
                    be:64:d7:96:5e:ea:f9:45:77:91:3a:fc:9c:b0:fb:
                    71:66:e7:32:97:e2:d6:a0:ce:83:ab:ef:e2:79:2c:
                    00:25:43:6e:9d:cf:2a:f8:9f:7a:80:35:b6:56:ea:
                    36:db:be:39:86:61:99:ce:9c:45:8c:57:da:ed:e0:
                    fa:c2:90:01:27:89:22:78:b4:1a:c9:61:01:69:bb:
                    32:c1:68:52:30:e7:24:42:87:97:ca:73:70:42:43:
                    29:1d:59:da:9c:58:fe:2d:51:8d:46:0c:05:e5:ec:
                    99:92:30:a6:60:26:23:13:e7:84:ff:30:58:5a:e4:
                    96:06:aa:41:63:9c:39:17:73:ba:10:bb:d4:3b:c3:
                    d3:17:a8:a5:05:f0:34:d3:8f:60:51:97:b0:e0:4d:
                    d1:38:01:c8:e1:87:3a:66:7b:2b:ee:2a:07:33:bf:
                    be:93:cb:82:40:2d:8b:2f:ca:61:69:62:76:89:a0:
                    8d:a3:06:81:b1:19:07:b7:de:d3:dc:ad:e1:c8:d0:
                    bb:43:0d:2c:73:55:ef:6a:cb:8d:cb:c5:6b:29:59:
                    e6:ec:74:f5:98:e1:1b:70:39:a0:18:3a:1f:7a:5a:
                    f6:66:03:a5:ac:61:b2:17:28:5c:f4:80:7e:55:9e:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:C7:68:82:EF:C1:E4:8A:3B:44:5B:40:0D:0D:DF:22:31:02:C9
            X509v3 Authority Key Identifier:
                keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:ea:2e:19:c8:f0:14:0e:55:e4:a7:e4:61:1b:f6:b8:f6:
         ed:44:ec:cb:3c:ba:8b:95:42:21:1b:0c:6f:2c:ef:06:f4:42:
         50:ba:22:01:23:da:cb:38:67:95:f2:a5:5e:77:3e:36:f8:7d:
         a5:d9:31:30:42:33:1b:e3:6f:e0:3b:be:7d:65:22:d1:64:56:
         d7:b9:37:47:0e:2a:71:eb:50:a3:eb:d5:d7:a0:27:bb:79:17:
         90:93:60:63:ba:75:14:df:32:96:55:15:b0:2f:f9:e9:5b:8e:
         d1:1f:c1:7a:94:65:9c:74:50:2d:76:7b:77:d2:b4:38:92:81:
         f8:ed:90:71:19:7c:81:0d:f3:06:76:10:8a:59:9d:b4:a8:17:
         4f:af:91:8c:8b:38:8d:90:d6:d6:08:c0:4b:ea:6c:90:f5:3d:
         8d:e7:17:1e:c5:20:f9:36:4f:fc:41:51:19:02:31:1e:42:13:
         18:9d:84:8c:e0:41:04:94:91:20:2a:dc:ce:fd:da:9a:ba:f4:
         b4:3e:ae:69:82:65:e1:34:2b:f1:b8:f1:09:94:67:07:51:8a:
         ed:bc:32:f3:fd:a1:65:e0:db:00:85:41:a1:70:d7:30:96:4e:
         91:4e:c2:8c:c8:b6:9c:98:02:c0:be:74:e5:52:a9:b8:cb:1d:
         35:dd:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:52 2026 by rpki-client