Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File:                     40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier:          3UiyfjPSYimOin0HbjjLF92qrDOR2GAXL5ZsFwSOmtM=
Subject key identifier:   25:C4:D0:01:5B:85:64:B4:C0:F9:8F:7C:3A:99:18:CB:9D:BD:53:4F
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       0C2C6AB545470B9EC5CFFE390AA3E73163647DEB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number:          0A
Signing time:             Wed 13 May 2026 01:50:50 +0000
Manifest this update:     Wed 13 May 2026 01:45:50 +0000
Manifest next update:     Thu 14 May 2026 05:10:50 +0000
Files and hashes:         1: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
                          2: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
                          3: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
                          4: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
                          5: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
                          6: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
                          7: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
                          8: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
                          9: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: Q9yCyqg6cdtOBK5A8R6AnEjQB5W7RvwxbguuuVBwugI=)
                          10: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
                          11: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
                          12: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
                          13: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
                          14: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
                          15: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
                          16: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
                          17: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
                          18: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
                          19: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
                          20: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
                          21: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
                          22: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2c:6a:b5:45:47:0b:9e:c5:cf:fe:39:0a:a3:e7:31:63:64:7d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 13 01:45:50 2026 GMT
            Not After : May 14 05:10:50 2026 GMT
        Subject: CN=25C4D0015B8564B4C0F98F7C3A9918CB9DBD534F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:d3:cb:4a:a8:cc:01:1a:3b:cf:03:a4:57:
                    f5:f7:fe:e7:31:00:ee:96:8a:ea:8b:89:7f:e3:59:
                    a0:6b:ac:ce:fc:a5:06:b7:e5:66:02:88:11:a0:78:
                    c0:48:9e:f3:08:19:93:ed:1a:59:fe:c4:81:96:94:
                    31:6e:ea:d3:49:db:20:99:5d:30:f8:4a:c0:33:38:
                    6e:d1:c1:4d:17:d7:5e:b8:aa:e8:a2:8b:3c:f0:05:
                    98:81:b5:1a:a4:8d:f8:71:fc:72:e0:79:63:4b:d5:
                    01:46:82:0d:cb:87:0c:95:12:10:c8:52:c2:74:af:
                    84:d3:83:7c:a6:f6:89:09:3f:e2:77:25:4c:8f:8b:
                    c3:73:1b:4c:0a:cb:7a:16:a4:58:f9:1a:c5:dc:ea:
                    b9:08:b3:15:b8:ee:40:96:c1:1b:f8:ce:5c:9a:2f:
                    90:7a:a1:96:e7:b9:9e:31:72:c4:39:66:65:25:43:
                    bb:1b:39:52:41:87:04:96:ae:cd:c7:75:2a:9e:cb:
                    b5:e7:47:27:c7:e7:75:8d:7f:68:a4:23:d0:38:70:
                    e6:14:4b:80:73:b6:eb:1a:57:b8:12:7c:cb:c7:f5:
                    3b:01:4f:9f:b5:61:2d:d8:36:f2:df:50:85:b6:0f:
                    95:f9:36:f8:62:c0:79:90:6a:ce:69:f3:09:d4:c4:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:D0:01:5B:85:64:B4:C0:F9:8F:7C:3A:99:18:CB:9D:BD:53:4F
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:36:51:3b:f6:d8:97:50:ef:96:42:86:88:80:99:c2:2a:
         39:83:78:ed:5e:5e:d3:d7:ca:72:7d:d8:33:2f:f5:fd:54:77:
         fa:6a:09:bc:41:73:06:32:cb:a6:f2:a0:14:92:57:c6:8a:b7:
         7b:03:84:5f:7d:7b:6f:e6:9d:77:86:f3:4e:72:b9:a3:f8:ab:
         ea:52:5a:51:53:c8:2a:d4:19:b6:32:0b:05:57:9a:97:72:22:
         8e:d9:f7:88:bc:62:2a:cc:c9:47:8d:ba:f8:48:5e:83:4d:9a:
         67:8e:52:8a:97:16:07:e2:b3:7a:b2:a1:fa:cd:f8:ca:82:13:
         b5:4f:cd:4a:bf:76:85:d6:7b:38:8f:e4:4e:ab:e2:75:a1:ec:
         6f:a8:d7:15:ec:70:2e:dc:24:bf:e5:5a:48:34:8c:de:79:d6:
         1c:0e:9c:29:49:90:76:57:14:83:51:40:b6:9e:b1:52:08:92:
         21:46:28:dc:70:1f:f4:7b:b5:7c:a9:67:49:79:6a:a5:ab:bb:
         bd:28:a2:9d:3b:78:6c:71:75:49:cc:eb:05:77:80:d6:0e:78:
         ff:2f:c8:3d:f3:c4:35:ec:c5:6c:94:04:d7:1a:b2:76:a1:c3:
         95:46:e2:f7:2d:cc:14:f4:96:73:9c:f4:00:60:c1:a0:fa:f6:
         d6:76:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:59 2026 by rpki-client