Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          KBzOVf6icTcrNKH8u7o5TdFo6ImjykJuMBVqq9lm0DE=
Subject key identifier:   78:4A:97:24:BC:CE:40:34:17:C0:E4:99:75:39:B1:45:56:6B:5E:1A
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       345CF3E34A64FFCAAF2BFE320AFADE33F1BD289D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          4B
Signing time:             Fri 29 May 2026 19:43:17 +0000
Manifest this update:     Fri 29 May 2026 19:38:17 +0000
Manifest next update:     Sat 30 May 2026 20:07:17 +0000
Files and hashes:         1: 323430313a373163303a313a3a2f34382d3438203d3e203536303430.roa (hash: n2XTnpyAprEv7e/Z5xW/+G0rRQ750aelR5qlLA77lCY=)
                          2: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          3: 323430313a373163303a613a3a2f34382d3438203d3e203536303430.roa (hash: BkDr/YuA+kh4okfJETQbMwLftUsJWE41p5O0oV5ceNI=)
                          4: 323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa (hash: mYBV5yfdvFGoyceOoR7wiykMsuzE3YF6Wqdx8zx0TPA=)
                          5: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          6: 323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa (hash: XiwqRLKR9sKiu83ZEbZ2TPYO4yZID4j8S/i7bfLXm+s=)
                          7: 323430313a373163303a383a3a2f34382d3438203d3e203536303430.roa (hash: J0xigY65ck9pjSejCDnpLgmDLrC/wOQKNFSvKbDpEiM=)
                          8: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          9: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          10: 323430313a373163303a31313a3a2f34382d3438203d3e203536303430.roa (hash: FfdK7O2+HBfqWUFQkH/lbFpL6iWbHc5IuAFrQMiU3oQ=)
                          11: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          12: 323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa (hash: neZRC/PaTSmwfdGFI34mzZLwMyWoAIBSn/45jQ4Uk4U=)
                          13: 323430313a373163303a353a3a2f34382d3438203d3e203536303430.roa (hash: KkMuJKHQEuX5yppkcONDr595+67RNuNBOuSNcWbib0k=)
                          14: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          15: 323430313a373163303a373a3a2f34382d3438203d3e203536303430.roa (hash: pFG2KRWIRL52dYY3jCoq3RVFJ1BGL3wMe9XU4PmUVsY=)
                          16: 323430313a373163303a653a3a2f34382d3438203d3e203536303430.roa (hash: T4FDqX8/hQnhVU1b2mr7YxNDZjPVQ/tmsX5xKa2oJOE=)
                          17: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          18: 323430313a373163303a663a3a2f34382d3438203d3e203536303430.roa (hash: r7s+Zo1yZPVkRH+mE9SlExouQlXJFy6iETfLDNjLT+8=)
                          19: 323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa (hash: KVh79S8ip/fjB9psUC8gIMB8sASXrOKNWoKVxtSVvR0=)
                          20: 323430313a373163303a633a3a2f34382d3438203d3e203536303430.roa (hash: fDVX+I2FOcVQ3obyZzr1wYMDmOo3Rr2BPcuXXsp6Ccw=)
                          21: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          22: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          23: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          24: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          25: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: nUX22f+OUIyTY/lrcr3ewHrfxGcK16r13qGjUyvQxco=)
                          26: 323430313a373163303a643a3a2f34382d3438203d3e203536303430.roa (hash: M3e3iFAVFJk+WeyjTA+jzteIvtgA7ZmjeRrt+3xpxrA=)
                          27: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          28: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          29: 323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa (hash: J56KTf+Z3lImwU3Szgl0qvomW0Nqm0PiU7MnAkWe7S4=)
                          30: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          31: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          32: 323430313a373163303a323a3a2f34382d3438203d3e203536303430.roa (hash: xKPMd9vsX/lngPXvff/QfST94o2Wg7AO0xAt70to8n0=)
                          33: 323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa (hash: agd5o34u0yHgl5NHtrOaUSVUO5n0IZPoEWqOR4tkyMU=)
                          34: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          35: 323430313a373163303a623a3a2f34382d3438203d3e203536303430.roa (hash: EiUlUXENh5O/l09AkBho3o84rGG7+s6KB5lZQApJruk=)
                          36: 323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa (hash: yTM+1LqbhmntxQdQu1uu0UkmKP1vHFK/Jrbf9D5hUMs=)
                          37: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          38: 323430313a373163303a3a2f34382d3438203d3e203536303430.roa (hash: DYSt7LcrpRcGKWtNUILrZZhd+UK60HHboULaA3yow5o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5c:f3:e3:4a:64:ff:ca:af:2b:fe:32:0a:fa:de:33:f1:bd:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: May 29 19:38:17 2026 GMT
            Not After : May 30 20:07:17 2026 GMT
        Subject: CN=784A9724BCCE403417C0E4997539B145566B5E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:b8:c7:ba:38:d9:9e:0e:a8:3b:2c:13:5b:
                    19:ed:ad:11:72:2d:d4:9d:f6:60:bd:27:74:7c:46:
                    3b:15:36:f8:65:e6:cf:e8:e9:d2:45:62:1f:f2:95:
                    f5:58:7e:e7:29:52:90:e7:56:f8:2a:7f:bd:05:66:
                    7b:aa:1f:ae:37:81:db:9b:d1:45:43:fb:d7:eb:fc:
                    a4:62:54:f0:f6:36:c0:18:cd:ac:53:41:da:e7:19:
                    0f:38:e4:8b:1c:d4:ca:6e:f4:43:f3:ee:3a:e7:68:
                    2f:3d:63:63:85:f8:2c:7d:c5:65:c5:c7:63:1b:70:
                    14:b8:23:05:a0:45:93:69:69:55:16:bc:aa:1b:46:
                    bb:37:f9:2e:36:70:e2:c8:a1:94:00:5e:ee:6c:5a:
                    b0:54:b1:b6:e7:5e:92:fe:88:47:4c:4f:07:24:7c:
                    db:21:31:db:76:96:21:f6:36:6f:8a:04:97:52:ee:
                    97:2c:8b:6d:ae:17:bc:4b:5d:26:4c:9d:c6:92:79:
                    a7:43:cb:80:85:21:8a:88:44:4c:7a:ce:00:be:3d:
                    fa:88:04:a4:a7:20:e5:bb:cd:ae:70:e1:4e:19:c7:
                    14:16:ba:88:b9:e6:60:6e:85:b8:87:2d:08:de:bd:
                    22:3c:42:92:fc:78:3d:c6:14:be:ed:ee:a3:61:73:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:97:24:BC:CE:40:34:17:C0:E4:99:75:39:B1:45:56:6B:5E:1A
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9a:fb:bc:72:d5:1a:10:00:f0:eb:32:7f:77:2c:31:7a:7c:
         f9:e6:4f:08:d7:c6:9a:ad:e4:57:56:fe:71:6d:74:ca:38:0c:
         12:24:41:db:a2:4d:9d:57:0f:45:73:78:0e:8e:61:f0:4d:86:
         d5:51:41:41:70:3c:d3:c6:02:50:81:72:ff:20:8d:08:14:ac:
         1b:8e:b4:0d:ec:0b:e9:31:ce:81:52:71:a7:85:25:4e:12:30:
         04:ed:52:08:aa:ea:e3:7c:9a:7c:57:02:38:96:a2:20:e6:74:
         ac:8f:25:cc:00:70:11:8b:55:39:24:3d:b4:ac:46:a4:dd:ca:
         27:42:d4:c0:c7:e0:76:30:bc:c8:38:2c:cb:fe:93:07:90:ec:
         3c:69:77:b5:bd:1b:12:6f:e1:d6:4a:6a:be:46:da:42:de:cb:
         d8:44:9c:cc:2e:61:91:81:93:e4:d9:38:c8:83:44:f6:9a:39:
         de:f9:37:1d:a2:c9:d1:df:59:21:fc:29:c9:ad:5c:0d:fe:b3:
         aa:70:69:26:d4:49:b6:6f:1a:53:45:f7:9d:85:5a:74:06:15:
         b5:96:91:d5:a1:fc:41:2f:7e:69:08:cf:84:92:ad:bf:bd:a6:
         c8:43:de:5f:db:81:d9:39:35:97:1a:9c:82:dd:b1:97:79:f6:
         08:4e:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:29 2026 by rpki-client