Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
File:                     BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft (raw, json)
Hash identifier:          uS8d85NJu7Gn2yn/bvZMscN08ANrI4qgrleHA5CnIpA=
Subject key identifier:   98:19:00:06:D3:F6:7A:03:AD:64:7E:2E:7E:9B:C3:A0:38:4B:3B:08
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       4283F7348D81AA2DB5EAE17B091E101B20066A8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
Manifest number:          A5
Signing time:             Sat 10 Oct 2026 07:54:27 +0000
Manifest this update:     Sat 10 Oct 2026 07:49:27 +0000
Manifest next update:     Tue 13 Oct 2026 15:08:27 +0000
Files and hashes:         1: 3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (hash: zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=)
                          2: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (hash: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=)
                          3: 3130362e332e3139322e302f32302d3230203d3e203233373234.roa (hash: VwFeq3QNx8C1znAV513FBBjmORwGRi/MbWfhasR7FLc=)
                          4: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (hash: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=)
                          5: 3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (hash: yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=)
                          6: 3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (hash: Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=)
                          7: 3131342e3131352e302e302f31372d3137203d3e203233373234.roa (hash: GfJl+8k+x926XIyhzeOnyi2P7nB+2KG8yC4nA0cG9PA=)
                          8: 34352e3131342e39362e302f32322d3232203d3e203333363738.roa (hash: t0MWhrASdQRMLyBv3kSVEOD5luNKKNMMpjuRAyutYn4=)
                          9: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (hash: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=)
                          10: 3130362e332e31362e302f32302d3230203d3e203233373234.roa (hash: lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=)
                          11: 3130332e35342e35302e302f32332d3233203d3e203536323832.roa (hash: kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=)
                          12: 3130332e35342e34382e302f32322d3232203d3e203536323832.roa (hash: njKoSaWfi1fkQuUrNF9621tCcCYx26fOri8fTHRgZt0=)
                          13: 3132322e3131352e3233322e302f32312d3231203d3e203233373234.roa (hash: yvHJeUNbBLjIA1uCIwuozmaBxyAk+8Qro/Cz4RL6dn8=)
                          14: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl (hash: 2chJOwO2v55Pv40AOLt/225hONSi28U90cicCRL4G5w=)
                          15: 3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (hash: J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:83:f7:34:8d:81:aa:2d:b5:ea:e1:7b:09:1e:10:1b:20:06:6a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: Oct 10 07:49:27 2026 GMT
            Not After : Oct 13 15:08:27 2026 GMT
        Subject: CN=98190006D3F67A03AD647E2E7E9BC3A0384B3B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:c3:74:74:d8:ba:42:8a:80:95:60:96:cb:
                    ef:8a:33:fd:c3:01:b6:10:9e:86:3a:b9:23:aa:c6:
                    55:53:58:fd:4c:e2:49:60:b2:e7:d0:c0:77:5f:22:
                    5e:3f:fc:55:f0:45:00:71:fc:24:1e:c7:ef:22:75:
                    61:08:d3:b3:51:89:89:39:d2:c1:aa:e5:54:93:af:
                    c5:4d:28:0f:ee:ef:83:8a:fc:71:fd:99:85:57:6c:
                    fa:04:36:70:61:57:d0:51:9a:9d:27:21:fa:63:82:
                    0c:cc:f7:d3:a1:b1:c3:c7:a7:6a:38:32:7c:40:55:
                    c8:9e:e1:04:b3:3a:e3:d9:ac:7c:8e:16:18:df:7d:
                    3a:04:54:46:29:54:c7:c6:e5:aa:3d:32:33:33:dc:
                    65:4d:d8:27:9a:5c:e7:d9:bb:30:89:16:da:e3:47:
                    88:d0:44:cc:84:f5:90:8a:41:09:75:33:07:03:e4:
                    20:46:aa:f5:19:f0:71:d7:b8:eb:10:7a:81:fc:24:
                    6f:ff:ae:0c:82:36:68:4c:76:53:b4:85:11:ab:56:
                    e5:0c:80:6d:6d:bc:b2:8c:94:b4:53:4b:26:95:47:
                    3b:99:29:8f:c4:f7:81:ea:2a:f1:94:ef:1a:6b:01:
                    6c:f0:8d:9a:3e:24:c7:d5:30:9e:e3:2c:e1:e9:c1:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:00:06:D3:F6:7A:03:AD:64:7E:2E:7E:9B:C3:A0:38:4B:3B:08
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:ef:3a:fe:c0:96:db:23:eb:c0:40:58:c3:f1:78:f4:18:
         b7:dd:e9:31:a4:df:4e:79:0e:94:d3:67:fb:da:4b:49:a5:f9:
         a7:57:9d:e0:b4:c5:e6:68:c3:8b:c9:8b:d1:38:36:9d:aa:55:
         a7:09:c5:3c:3e:85:e2:21:5e:a3:92:7c:3c:d7:85:aa:5e:05:
         b1:02:63:ca:d7:53:87:9e:56:9c:ba:40:b6:fd:da:1d:93:df:
         08:55:5d:25:21:c2:c4:10:1a:73:89:c7:12:9a:08:d3:e9:40:
         db:05:fa:fe:e5:38:5f:3e:05:49:ce:4d:54:0a:a8:ae:ce:7d:
         49:13:d6:37:2f:80:48:7f:49:e1:10:1b:e2:81:7a:85:3f:c9:
         38:60:93:aa:b6:63:37:49:43:11:da:66:64:53:63:9c:a7:a0:
         ca:9b:37:93:98:97:85:3b:fb:0f:50:58:f1:81:77:93:72:95:
         71:8f:ba:b1:14:e8:3c:34:47:96:25:cf:fd:4c:9b:bf:25:cd:
         50:93:99:5a:2f:10:05:14:c9:0d:c0:57:f5:a6:09:3e:4c:60:
         b7:8f:4d:94:1a:86:13:56:69:69:0c:48:f4:4f:e1:39:19:17:
         47:f0:1b:b9:03:24:66:59:19:8d:fc:33:fe:94:c5:5c:22:fa:
         d4:da:9c:62
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQoP3NI2Bqi216uF7CR4QGyAGao4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQyNkZCOEYyRjlEN0E0RjUxNjgyMDcwNzY2RUJEOEQy
MzA2NzMzQjAeFw0yNjEwMTAwNzQ5MjdaFw0yNjEwMTMxNTA4MjdaMDMxMTAvBgNV
BAMTKDk4MTkwMDA2RDNGNjdBMDNBRDY0N0UyRTdFOUJDM0EwMzg0QjNCMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ1cN0dNi6QoqAlWCWy++KM/3D
AbYQnoY6uSOqxlVTWP1M4klgsufQwHdfIl4//FXwRQBx/CQex+8idWEI07NRiYk5
0sGq5VSTr8VNKA/u74OK/HH9mYVXbPoENnBhV9BRmp0nIfpjggzM99OhscPHp2o4
MnxAVcie4QSzOuPZrHyOFhjffToEVEYpVMfG5ao9MjMz3GVN2CeaXOfZuzCJFtrj
R4jQRMyE9ZCKQQl1MwcD5CBGqvUZ8HHXuOsQeoH8JG//rgyCNmhMdlO0hRGrVuUM
gG1tvLKMlLRTSyaVRzuZKY/E94HqKvGU7xprAWzwjZo+JMfVMJ7jLOHpwZI1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmBkABtP2egOtZH4ufpvDoDhLOwgwHwYDVR0j
BBgwFoAUvSb7jy+dek9RaCBwdm69jSMGczswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ4OTAxOTMyMTAyNDUyOS8wL0JEMjZGQjhGMkY5RDdBNEY1MTY4MjA3MDc2NkVC
RDhEMjMwNjczM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkQyNkZCOEYyRjlEN0E0RjUxNjgyMDcwNzY2RUJEOEQyMzA2NzMzQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY0ODkwMTkzMjEwMjQ1MjkvMC9CRDI2RkI4RjJGOUQ3
QTRGNTE2ODIwNzA3NjZFQkQ4RDIzMDY3MzNCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSTvOv7Altsj
68BAWMPxePQYt93pMaTfTnkOlNNn+9pLSaX5p1ed4LTF5mjDi8mL0Tg2napVpwnF
PD6F4iFeo5J8PNeFql4FsQJjytdTh55WnLpAtv3aHZPfCFVdJSHCxBAac4nHEpoI
0+lA2wX6/uU4Xz4FSc5NVAqors59SRPWNy+ASH9J4RAb4oF6hT/JOGCTqrZjN0lD
EdpmZFNjnKegyps3k5iXhTv7D1BY8YF3k3KVcY+6sRToPDRHliXP/UybvyXNUJOZ
Wi8QBRTJDcBX9aYJPkxgt49NlBqGE1ZpaQxI9E/hORkXR/AbuQMkZlkZjfwz/pTF
XCL61NqcYg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:09:48 2026 by rpki-client