Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          kqFYTTOVyVc7XCIX4LxwLxRgjarmQi/ZM+tDAAcvpMU=
Subject key identifier:   46:46:28:82:BB:F5:6C:67:38:D7:6E:54:5E:BC:CE:D0:E8:2F:14:BD
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       402FEC988D541E95D69078B68C181F5A14134844
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          AE
Signing time:             Tue 14 Jul 2026 11:41:09 +0000
Manifest this update:     Tue 14 Jul 2026 11:36:09 +0000
Manifest next update:     Wed 15 Jul 2026 15:08:09 +0000
Files and hashes:         1: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          2: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          3: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          4: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          5: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          6: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
                          7: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          8: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          9: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          10: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          11: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          12: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          13: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: 3Q088mcNlEq3YkjKkiw5fitsK72JJNgOO4/JmoZ3pVE=)
                          14: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          15: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          16: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          17: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          18: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          19: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          20: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
                          21: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          22: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          23: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
                          24: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          25: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          26: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          27: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          28: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          29: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          30: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          31: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          32: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          33: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          34: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          35: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          36: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          37: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          38: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2f:ec:98:8d:54:1e:95:d6:90:78:b6:8c:18:1f:5a:14:13:48:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jul 14 11:36:09 2026 GMT
            Not After : Jul 15 15:08:09 2026 GMT
        Subject: CN=46462882BBF56C6738D76E545EBCCED0E82F14BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:2b:31:ee:02:7d:be:7d:91:69:6c:36:8b:
                    6c:f5:5a:56:52:66:f7:b9:b8:88:44:85:a1:aa:aa:
                    38:16:c8:90:dd:11:59:e7:5b:68:5f:53:48:91:24:
                    56:12:6d:d2:01:e9:33:58:80:b1:38:59:ae:72:c9:
                    c3:6f:06:bc:9f:e5:3e:f8:d8:b4:df:2e:db:b3:ed:
                    13:3b:ee:2f:4f:eb:bd:a2:d7:61:7f:50:72:bc:a9:
                    dd:48:26:1c:dd:5c:13:d5:b7:88:ba:f7:a8:30:08:
                    4b:ec:cc:c4:f0:1b:bb:fa:0e:15:be:5b:af:3e:42:
                    64:fb:9a:72:ed:c4:67:5a:58:92:b4:ea:dc:46:c6:
                    0a:43:d4:c6:e1:3d:cd:00:b1:f8:97:91:fc:5e:fb:
                    10:3c:16:b0:86:1e:15:c2:c6:38:8c:5a:d4:ab:1a:
                    20:10:c2:44:98:d9:a8:74:45:27:d2:5d:fd:8b:70:
                    45:d0:f9:01:70:c6:55:45:19:a3:74:b3:b5:9e:78:
                    56:d2:45:d6:b8:1d:55:8b:e3:3d:fd:ac:9c:15:94:
                    92:bf:ba:f3:e1:17:a0:0a:ab:98:4d:a7:67:3d:be:
                    11:72:1a:61:84:c8:a8:e1:df:24:36:a8:90:aa:ac:
                    9f:2a:cd:0e:43:50:ba:9e:62:d2:09:e5:3c:bd:dd:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:28:82:BB:F5:6C:67:38:D7:6E:54:5E:BC:CE:D0:E8:2F:14:BD
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:81:64:65:07:a4:9f:60:9a:b6:ab:fd:9f:24:11:b5:f3:a2:
         9b:8b:2d:f0:29:64:ee:f5:da:16:df:fc:75:58:c7:e5:d0:9d:
         f7:7e:68:50:50:c6:4b:cd:cf:aa:c0:de:82:0a:40:f2:36:b3:
         ab:ec:04:e3:2a:73:85:91:b7:ba:9c:1e:bf:c4:43:14:1d:8d:
         53:2f:36:8a:23:25:1d:1f:85:7e:40:c1:2d:ce:a1:ff:ec:00:
         38:4e:92:e4:54:99:a2:3a:2a:ad:ea:58:ec:d5:74:7e:1f:7d:
         df:db:54:7c:fb:85:42:d8:63:18:76:9d:a9:1b:75:f4:e1:98:
         e8:13:29:91:31:a5:9a:82:37:f0:a7:7c:88:96:93:b5:33:28:
         a5:27:2e:8e:9e:31:f5:c3:eb:aa:8d:48:6b:f2:70:49:3a:18:
         2a:ca:3c:ab:1d:fd:f8:2a:90:ff:58:62:23:95:4d:56:9d:f3:
         2d:73:4f:9b:eb:4e:5b:26:88:9b:30:61:68:80:b0:70:6c:60:
         e5:12:a6:59:8c:ed:2a:3d:af:f0:d6:bd:40:43:15:f8:a0:6b:
         0c:94:ca:1c:bb:f6:9f:39:a8:9d:a5:f7:c3:db:80:5f:46:11:
         1b:b2:40:f2:eb:52:69:14:74:23:6b:9f:a9:96:e3:c7:87:08:
         2b:3c:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:40 2026 by rpki-client