Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          +oO6ORGq+eJSk0PixuvUvPy6MUMhGdtL4cXNA59kpf4=
Subject key identifier:   D9:5A:36:A6:C9:DC:E0:3A:8B:2F:94:81:58:DC:30:48:E6:22:4A:0F
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       13DA1CAFFB7F1933086BD1608E3D6A3D15E27750
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          FD
Signing time:             Sat 10 Oct 2026 20:44:56 +0000
Manifest this update:     Sat 10 Oct 2026 20:39:56 +0000
Manifest next update:     Wed 14 Oct 2026 07:04:56 +0000
Files and hashes:         1: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          2: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          3: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          4: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          5: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          6: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          7: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          8: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          9: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          10: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          11: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          12: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          13: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          14: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          15: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          16: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          17: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          18: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          19: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          20: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
                          21: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
                          22: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          23: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          24: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          25: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          26: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: IDIhtuyHxJz9fTgWxLIAO7+MGypoNMutJQ0WE3X+xhU=)
                          27: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          28: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          29: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          30: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          31: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          32: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          33: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          34: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          35: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          36: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          37: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          38: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:1c:af:fb:7f:19:33:08:6b:d1:60:8e:3d:6a:3d:15:e2:77:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Oct 10 20:39:56 2026 GMT
            Not After : Oct 14 07:04:56 2026 GMT
        Subject: CN=D95A36A6C9DCE03A8B2F948158DC3048E6224A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:f8:06:9b:16:ad:b5:b8:96:55:07:d6:f0:
                    83:00:37:c4:34:c6:07:53:df:46:ff:9e:e5:c1:bc:
                    c8:e0:d9:f6:f9:6d:b1:df:86:ba:05:19:c9:62:0b:
                    c1:30:1b:23:ba:7e:b8:5c:cc:66:f0:e9:b6:b7:2b:
                    81:8c:95:dc:ee:c6:09:0e:96:5c:85:8b:88:44:f5:
                    55:56:ce:dd:3e:62:e0:94:37:28:f2:ed:d7:ad:fd:
                    d6:e0:7c:ed:f0:aa:e0:da:dd:e1:97:61:30:2c:3b:
                    29:78:1f:01:62:23:ce:90:44:87:4e:e5:69:6a:5f:
                    f5:2e:89:e1:b0:8f:06:2a:c3:fb:f4:69:32:2d:0a:
                    84:73:88:74:fc:9b:09:7d:36:6d:a5:07:4d:49:c1:
                    cb:c4:e2:15:1e:f7:0d:54:95:05:d7:c0:dc:97:2e:
                    99:d2:f6:d1:71:77:26:ff:dc:11:b4:a9:1d:9e:5d:
                    e2:14:ea:99:64:24:3f:47:b5:1e:3a:cb:3d:14:57:
                    19:57:93:fa:86:c2:9b:07:85:c9:31:06:c7:92:05:
                    3c:75:77:d8:23:90:f6:bf:56:b6:97:f2:e7:b9:5b:
                    ec:a6:41:b5:b1:6e:79:14:ba:c7:18:50:ee:0f:99:
                    07:ae:9b:fd:86:f6:37:1b:6e:75:bd:74:d0:f7:05:
                    4e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5A:36:A6:C9:DC:E0:3A:8B:2F:94:81:58:DC:30:48:E6:22:4A:0F
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:d0:bf:ed:d5:85:7a:62:70:ae:d6:8a:f4:82:63:e1:1a:
         d7:bc:a6:32:71:c7:a7:1b:6a:7c:b2:d8:c8:16:51:45:8d:8e:
         c4:27:20:4b:d8:04:bb:57:cd:6d:6f:f6:01:e0:8a:dc:ec:4c:
         91:d3:27:9e:3c:08:f6:80:27:99:88:d9:8b:7d:aa:1e:c1:f1:
         57:9b:73:2b:32:92:ff:a5:13:7c:04:06:2f:26:6a:f9:0a:93:
         ef:69:19:7d:4d:6a:d0:62:8e:b6:55:a0:53:0f:51:3c:9e:91:
         8d:26:45:8d:b2:36:86:6d:14:34:a1:15:dc:ea:cc:88:e6:d6:
         b2:18:9b:9c:29:ed:3a:11:cc:03:eb:93:ed:6b:7d:22:5a:4b:
         67:47:92:e6:c0:53:50:3e:79:b1:7a:3f:8e:40:e1:2b:29:c4:
         08:b6:d4:3e:62:1e:f5:d9:b7:2a:6c:19:c2:31:13:34:51:62:
         b8:e1:10:7e:ea:61:ac:4d:47:ee:14:7d:ed:08:01:bc:f5:8b:
         82:e9:f4:9e:2d:a6:83:f9:0f:b5:eb:ba:83:ea:18:96:89:6a:
         b5:0e:f5:bd:fe:57:3d:10:0a:56:58:4e:04:c1:7c:ad:15:f3:
         d7:56:97:43:99:9c:03:69:e6:b8:bd:8d:f3:65:97:3c:77:d7:
         58:f8:11:bd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUE9ocr/t/GTMIa9Fgjj1qPRXid1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjEwMTAyMDM5NTZaFw0yNjEwMTQwNzA0NTZaMDMxMTAvBgNV
BAMTKEQ5NUEzNkE2QzlEQ0UwM0E4QjJGOTQ4MTU4REMzMDQ4RTYyMjRBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnn/gGmxattbiWVQfW8IMAN8Q0
xgdT30b/nuXBvMjg2fb5bbHfhroFGcliC8EwGyO6frhczGbw6ba3K4GMldzuxgkO
llyFi4hE9VVWzt0+YuCUNyjy7det/dbgfO3wquDa3eGXYTAsOyl4HwFiI86QRIdO
5WlqX/UuieGwjwYqw/v0aTItCoRziHT8mwl9Nm2lB01JwcvE4hUe9w1UlQXXwNyX
LpnS9tFxdyb/3BG0qR2eXeIU6plkJD9HtR46yz0UVxlXk/qGwpsHhckxBseSBTx1
d9gjkPa/VraX8ue5W+ymQbWxbnkUuscYUO4PmQeum/2G9jcbbnW9dND3BU7rAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2Vo2psnc4DqLL5SBWNwwSOYiSg8wHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zRDQyNkJFQTQ0QzU2
MTA5NzA3NjAyOTIzNjY4RDQwRjQ0NThGQkVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5PQv+3VhXpi
cK7WivSCY+Ea17ymMnHHpxtqfLLYyBZRRY2OxCcgS9gEu1fNbW/2AeCK3OxMkdMn
njwI9oAnmYjZi32qHsHxV5tzKzKS/6UTfAQGLyZq+QqT72kZfU1q0GKOtlWgUw9R
PJ6RjSZFjbI2hm0UNKEV3OrMiObWshibnCntOhHMA+uT7Wt9IlpLZ0eS5sBTUD55
sXo/jkDhKynECLbUPmIe9dm3KmwZwjETNFFiuOEQfuphrE1H7hR97QgBvPWLgun0
ni2mg/kPteu6g+oYlolqtQ71vf5XPRAKVlhOBMF8rRXz11aXQ5mcA2nmuL2N82WX
PHfXWPgRvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:26:11 2026 by rpki-client