Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
File:                     1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft (raw, json)
Hash identifier:          1KaYaHOLERxYthJoUDGpmW0XQ/sWKxCdk/II7F7v9QQ=
Subject key identifier:   97:F3:DE:20:A1:FC:F6:34:42:48:C8:8E:D0:03:0B:76:32:D2:14:08
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       3BE8B00C6F3A17C7CBE7224F175198EB1CA87220
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
Manifest number:          25
Signing time:             Mon 02 Mar 2026 02:48:16 +0000
Manifest this update:     Mon 02 Mar 2026 02:43:16 +0000
Manifest next update:     Tue 03 Mar 2026 04:06:16 +0000
Files and hashes:         1: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl (hash: zm/PWaILfi7ynLqRar1QOSRVyQjPf+pKrdyBkh8ioGw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e8:b0:0c:6f:3a:17:c7:cb:e7:22:4f:17:51:98:eb:1c:a8:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Mar  2 02:43:16 2026 GMT
            Not After : Mar  3 04:06:16 2026 GMT
        Subject: CN=97F3DE20A1FCF6344248C88ED0030B7632D21408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:53:07:48:31:67:ca:05:ec:71:de:71:ba:
                    9e:dd:45:2b:91:03:ea:90:35:6c:d1:f8:4f:df:84:
                    60:b3:fa:f7:93:d5:9b:99:21:a8:10:66:5c:25:e2:
                    74:c2:8b:65:62:2f:7e:79:0f:8b:09:cc:37:79:0c:
                    1f:54:c1:76:37:66:0e:18:de:24:08:6e:82:8a:1a:
                    3d:32:62:64:e2:15:da:3e:66:b6:71:5e:6b:f9:26:
                    4d:a9:2a:57:34:b2:fb:7d:7f:55:6c:6d:bf:3f:18:
                    5d:67:a0:7b:a5:fd:f4:cd:53:b2:9a:31:28:8e:a1:
                    53:68:79:bf:fd:ec:77:e8:5c:5b:ec:4a:84:d6:1e:
                    e9:d3:89:8d:f0:08:7b:73:c6:69:e3:b9:15:8a:70:
                    07:0b:13:18:2e:eb:3a:2d:a5:da:3c:16:6e:58:d8:
                    5c:c2:84:8a:8c:13:0f:68:56:0c:6a:10:a0:94:7a:
                    c3:72:3c:72:4f:3f:26:10:bf:03:10:f8:f4:d1:d9:
                    9f:e9:b1:41:18:f2:94:6a:7b:b7:0e:39:bf:f9:73:
                    cc:7c:3e:13:93:d3:22:55:49:02:47:12:54:3c:49:
                    83:50:a4:4e:22:52:3a:f9:6a:f1:65:40:7e:61:09:
                    f4:71:ab:8f:bd:19:c9:d7:d1:82:55:2c:f8:8a:24:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F3:DE:20:A1:FC:F6:34:42:48:C8:8E:D0:03:0B:76:32:D2:14:08
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:39:c8:a7:ff:12:e9:20:fb:d6:1e:00:72:7f:33:b3:70:f2:
         2e:50:79:d1:39:ee:6b:f1:ec:51:65:a5:50:7f:88:4a:5c:35:
         8f:ef:c0:b7:6e:66:a8:0e:6c:c3:d3:78:99:b4:69:f0:84:ac:
         a5:5c:82:e4:fb:af:bd:97:a1:d3:39:23:93:61:43:4d:35:5d:
         01:73:bf:54:26:e7:90:b4:c9:83:1c:d2:83:ca:a1:cf:6d:91:
         54:5f:32:cf:eb:dd:cf:02:e8:60:98:4c:43:cc:18:ee:50:7d:
         03:8f:78:05:1d:c5:e1:3e:af:93:45:cf:bf:9a:1b:4a:ec:d3:
         94:13:38:43:47:66:72:fb:32:eb:05:8c:55:51:7c:97:02:37:
         f9:75:80:d5:e3:48:ff:2f:c5:1d:95:1f:3d:d9:40:6c:a9:1e:
         ef:42:75:02:44:ad:85:96:6c:93:b3:ff:15:b3:5e:61:11:a2:
         82:3d:0a:40:98:16:87:20:72:2a:8d:e7:a6:7b:f4:30:28:c2:
         e3:0d:8f:61:3e:3d:0e:c3:46:5d:ab:ed:2f:62:8f:59:7b:96:
         af:cf:a8:84:2c:8e:bc:80:7c:8b:a3:50:f0:e9:a1:3c:ca:27:
         bb:16:a9:33:eb:c6:40:4a:ad:49:86:f8:4c:31:61:d1:59:f1:
         fb:63:fd:79
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUO+iwDG86F8fL5yJPF1GY6xyociAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjAzMDIwMjQzMTZaFw0yNjAzMDMwNDA2MTZaMDMxMTAvBgNV
BAMTKDk3RjNERTIwQTFGQ0Y2MzQ0MjQ4Qzg4RUQwMDMwQjc2MzJEMjE0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTlMHSDFnygXscd5xup7dRSuR
A+qQNWzR+E/fhGCz+veT1ZuZIagQZlwl4nTCi2ViL355D4sJzDd5DB9UwXY3Zg4Y
3iQIboKKGj0yYmTiFdo+ZrZxXmv5Jk2pKlc0svt9f1Vsbb8/GF1noHul/fTNU7Ka
MSiOoVNoeb/97HfoXFvsSoTWHunTiY3wCHtzxmnjuRWKcAcLExgu6zotpdo8Fm5Y
2FzChIqMEw9oVgxqEKCUesNyPHJPPyYQvwMQ+PTR2Z/psUEY8pRqe7cOOb/5c8x8
PhOT0yJVSQJHElQ8SYNQpE4iUjr5avFlQH5hCfRxq4+9GcnX0YJVLPiKJNl/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUl/PeIKH89jRCSMiO0AMLdjLSFAgwHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC8xQjI3QzI2RjhGN0VD
RTUzOTcyRDgwOTMzRjUwM0MwOTIyMkU4RjlGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTnIp/8S6SD7
1h4Acn8zs3DyLlB50Tnua/HsUWWlUH+ISlw1j+/At25mqA5sw9N4mbRp8ISspVyC
5PuvvZeh0zkjk2FDTTVdAXO/VCbnkLTJgxzSg8qhz22RVF8yz+vdzwLoYJhMQ8wY
7lB9A494BR3F4T6vk0XPv5obSuzTlBM4Q0dmcvsy6wWMVVF8lwI3+XWA1eNI/y/F
HZUfPdlAbKke70J1AkSthZZsk7P/FbNeYRGigj0KQJgWhyByKo3npnv0MCjC4w2P
YT49DsNGXavtL2KPWXuWr8+ohCyOvIB8i6NQ8OmhPMonuxapM+vGQEqtSYb4TDFh
0Vnx+2P9eQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:35 2026 by rpki-client