Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File:                     40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier:          car7oiZdbfeg8ZTt0w+SsAedfD0Mzkc2RH8FJOKoI/g=
Subject key identifier:   19:E8:0A:99:6E:A7:4A:45:7D:A0:B8:D0:7D:41:6C:F5:E0:F5:75:28
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       4F76CBD66BA0A45A4AAB75C7B28F77D29D338DAC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number:          A9
Signing time:             Sun 04 Oct 2026 18:23:09 +0000
Manifest this update:     Sun 04 Oct 2026 18:18:09 +0000
Manifest next update:     Thu 08 Oct 2026 00:30:09 +0000
Files and hashes:         1: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
                          2: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
                          3: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
                          4: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
                          5: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
                          6: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
                          7: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
                          8: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
                          9: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
                          10: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
                          11: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
                          12: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: I2ui/rtB3TCrvJpWg7qqWuQp0XmUZJCPIcLnSk5EVxg=)
                          13: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
                          14: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
                          15: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
                          16: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
                          17: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
                          18: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
                          19: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
                          20: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
                          21: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
                          22: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
                          23: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
                          24: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
                          25: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
                          26: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
                          27: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
                          28: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 00:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:76:cb:d6:6b:a0:a4:5a:4a:ab:75:c7:b2:8f:77:d2:9d:33:8d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Oct  4 18:18:09 2026 GMT
            Not After : Oct  8 00:30:09 2026 GMT
        Subject: CN=19E80A996EA74A457DA0B8D07D416CF5E0F57528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:84:56:66:e3:28:6c:ea:e9:fe:f2:18:c6:
                    0d:55:d5:47:3f:bf:da:04:35:e3:0a:76:66:ba:fd:
                    97:80:dd:93:b5:2f:07:7c:08:6b:40:45:41:74:2a:
                    cd:b8:5b:00:6e:23:b3:7e:a4:1a:cc:e2:37:ee:f5:
                    bd:63:db:ea:29:ea:a8:2e:3a:11:a6:c9:6d:55:42:
                    67:7f:ef:7b:0a:0c:a9:79:19:11:ee:84:fd:0f:97:
                    70:33:43:d8:15:ce:e8:11:f1:ff:ad:ec:c0:8b:6d:
                    6c:e0:c0:05:11:43:2d:9b:26:15:96:c5:f8:d1:ff:
                    93:1a:f7:36:69:51:1c:fa:95:85:f6:f1:a6:1b:3f:
                    7c:82:5d:b6:bf:18:10:82:ed:5e:16:2c:7c:18:e9:
                    22:88:24:12:21:cc:b2:ce:69:3e:4c:85:28:66:aa:
                    4b:34:66:a6:f2:03:7f:c6:36:2d:21:be:17:c4:d0:
                    ac:3c:2e:2a:f0:34:e1:18:2c:9a:19:3b:e6:09:08:
                    33:7a:13:40:7f:e1:e1:62:61:6f:78:77:e6:8e:58:
                    25:98:a5:c1:db:32:5f:06:1e:ff:ee:2b:f0:8d:9f:
                    75:60:e8:cd:0e:b9:ac:c5:1f:4f:20:d4:8c:86:e8:
                    f6:21:8f:fc:15:f5:96:17:36:de:5c:6d:63:f5:83:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E8:0A:99:6E:A7:4A:45:7D:A0:B8:D0:7D:41:6C:F5:E0:F5:75:28
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:5e:b6:92:0a:3a:23:30:dc:24:38:00:14:00:80:d1:ec:
         22:f0:09:1e:1b:4f:17:1e:cc:e0:bf:48:5e:a5:53:b0:cf:bc:
         95:34:70:46:4c:be:ea:b9:62:dc:9a:28:58:5e:4e:73:36:54:
         5e:90:0d:07:05:42:11:06:1b:dd:01:06:67:bb:f3:b7:6d:27:
         21:da:0b:9b:5c:57:99:81:b5:34:6f:09:79:e5:30:b3:9c:aa:
         e3:41:82:9f:64:f0:e9:32:aa:26:0d:04:88:94:ea:48:82:96:
         92:81:fb:c8:b5:2f:14:3b:17:83:3b:9c:16:b3:99:de:f3:a9:
         1d:10:19:ce:bf:11:81:b2:9e:89:8b:bd:de:27:f1:ed:31:0b:
         79:60:66:9a:e5:18:f2:f3:8b:2d:fb:8d:13:50:a2:d5:ac:1a:
         d6:9c:8e:1c:1c:d6:8d:da:be:bf:ec:1c:09:8e:8d:3e:d7:45:
         7e:48:63:88:9b:39:98:c9:0b:d5:2e:fd:26:a0:d6:24:61:20:
         37:c6:a5:ee:bb:3f:f3:85:ab:0d:12:80:f5:a3:74:a1:6d:8d:
         e4:09:17:f3:f3:15:ac:83:78:8c:94:15:24:1a:94:a0:5c:c1:
         07:cb:84:5e:03:4f:3a:7d:a3:38:bb:96:ac:9f:8b:c3:b9:4f:
         8b:e0:04:8d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUT3bL1mugpFpKq3XHso930p0zjawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjEwMDQxODE4MDlaFw0yNjEwMDgwMDMwMDlaMDMxMTAvBgNV
BAMTKDE5RTgwQTk5NkVBNzRBNDU3REEwQjhEMDdENDE2Q0Y1RTBGNTc1MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+YRWZuMobOrp/vIYxg1V1Uc/
v9oENeMKdma6/ZeA3ZO1Lwd8CGtARUF0Ks24WwBuI7N+pBrM4jfu9b1j2+op6qgu
OhGmyW1VQmd/73sKDKl5GRHuhP0Pl3AzQ9gVzugR8f+t7MCLbWzgwAURQy2bJhWW
xfjR/5Ma9zZpURz6lYX28aYbP3yCXba/GBCC7V4WLHwY6SKIJBIhzLLOaT5MhShm
qks0ZqbyA3/GNi0hvhfE0Kw8LirwNOEYLJoZO+YJCDN6E0B/4eFiYW94d+aOWCWY
pcHbMl8GHv/uK/CNn3Vg6M0OuazFH08g1IyG6PYhj/wV9ZYXNt5cbWP1g0ErAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUGegKmW6nSkV9oLjQfUFs9eD1dSgwHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY1MDMxNTU2NjA2MTk3OTMvMC80MEQ4NjcyNkRCMTRG
OUU1RTA2NjEwOTI4RkY2Qzc3MjI2RjE0ODc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2NetpIKOiMw
3CQ4ABQAgNHsIvAJHhtPFx7M4L9IXqVTsM+8lTRwRky+6rli3JooWF5OczZUXpAN
BwVCEQYb3QEGZ7vzt20nIdoLm1xXmYG1NG8JeeUws5yq40GCn2Tw6TKqJg0EiJTq
SIKWkoH7yLUvFDsXgzucFrOZ3vOpHRAZzr8RgbKeiYu93ifx7TELeWBmmuUY8vOL
LfuNE1Ci1awa1pyOHBzWjdq+v+wcCY6NPtdFfkhjiJs5mMkL1S79JqDWJGEgN8al
7rs/84WrDRKA9aN0oW2N5AkX8/MVrIN4jJQVJBqUoFzBB8uEXgNPOn2jOLuWrJ+L
w7lPi+AEjQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:34 2026 by rpki-client