Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          x4aZCJtrE1MQHv0dLZIRhDf1Jm/BUe02iaenUQ85qTY=
Subject key identifier:   3B:43:1B:37:BB:86:4C:6C:F5:F9:86:C6:D2:97:62:8A:AA:10:EE:C4
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       6D4D3EF9579BDF0BA303F6D2904DAFD78134DD24
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          EA
Signing time:             Fri 28 Aug 2026 06:47:40 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:40 +0000
Manifest next update:     Mon 31 Aug 2026 13:56:40 +0000
Files and hashes:         1: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          2: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          3: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          4: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          5: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          6: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
                          7: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          8: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          9: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          10: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
                          11: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          12: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          13: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          14: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          15: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          16: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          17: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          18: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          19: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          20: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          21: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          22: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          23: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          24: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          25: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          26: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          27: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          28: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          29: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          30: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          31: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          32: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          33: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          34: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: OSmur1Il2vxQ3QkIR5IIwfbVPubGnc+CipcnWnSfdiw=)
                          35: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          36: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          37: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          38: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:3e:f9:57:9b:df:0b:a3:03:f6:d2:90:4d:af:d7:81:34:dd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Aug 28 06:42:40 2026 GMT
            Not After : Aug 31 13:56:40 2026 GMT
        Subject: CN=3B431B37BB864C6CF5F986C6D297628AAA10EEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:6c:28:04:06:e2:67:b6:d2:cb:79:ba:47:
                    db:0c:0c:d8:a2:22:ff:ec:ca:f6:cb:79:50:76:a7:
                    8a:86:bc:54:73:fb:77:35:82:13:92:6f:54:24:83:
                    dc:e4:ac:59:08:b0:23:e4:e1:92:de:f6:25:ef:e9:
                    94:0c:8f:33:b6:b7:24:e0:85:f8:86:b3:2f:78:bd:
                    01:27:cd:25:22:5d:22:a7:1e:c8:61:ee:83:6b:b1:
                    78:af:cb:32:d1:63:93:94:01:9b:53:2c:aa:cd:7a:
                    66:ed:e4:22:d7:b5:7f:9d:a7:33:a8:74:3e:25:90:
                    2f:34:08:b4:43:73:f4:01:b4:f9:86:17:65:df:3f:
                    6f:6f:21:26:a0:ab:1c:27:67:fc:51:3e:e2:c2:36:
                    77:89:cb:a8:27:96:80:7e:75:08:68:74:0f:cd:c6:
                    64:da:ac:26:eb:f0:79:2c:27:b3:9e:13:7c:56:5c:
                    f4:91:5f:6a:a6:95:bd:9a:a3:be:5d:d9:56:78:79:
                    8d:ec:fe:f7:dc:1d:4c:61:2d:d2:5e:06:c7:8e:fd:
                    a0:9e:ed:ba:bd:da:8d:0a:cd:fe:9c:57:e4:e8:96:
                    19:af:a0:a3:0a:6f:7e:01:bc:99:9f:bc:f9:2d:87:
                    65:45:e0:61:f9:b0:1c:10:94:0c:f8:04:ee:1f:6e:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:1B:37:BB:86:4C:6C:F5:F9:86:C6:D2:97:62:8A:AA:10:EE:C4
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:6e:9c:86:a5:f3:d7:8d:49:05:00:4c:41:78:e5:b4:5a:
         e6:57:e3:2d:53:f3:61:71:53:62:20:df:df:a0:f7:7f:9f:c8:
         57:56:c0:57:07:fe:ac:cd:a4:e3:ae:c2:0a:f9:b2:a0:bf:62:
         f7:2a:1a:1d:7d:d4:c8:0b:46:1d:71:4b:b2:30:68:cb:72:1a:
         46:db:9d:90:7e:15:dd:b9:99:f3:ec:40:16:9b:2c:df:02:83:
         0d:82:f8:2c:ba:d3:95:42:2f:70:22:d0:7a:89:8a:95:b8:db:
         56:bb:e5:2e:ff:83:7f:60:e6:46:66:90:09:a0:98:db:30:1e:
         81:3c:6b:f0:3a:f0:a7:57:8a:c3:ce:93:49:1b:3a:bb:67:71:
         ab:33:d1:fe:ff:fd:c6:a3:92:5c:dd:18:50:02:4f:c7:29:e5:
         af:46:72:e4:74:3c:d2:53:c0:8d:19:b7:8b:d4:91:64:12:92:
         f1:87:dc:cf:bc:a3:f1:01:72:ef:ef:ce:7e:02:71:09:f6:85:
         e7:8c:d9:a2:31:3b:14:08:37:ec:0f:cd:c2:fe:ef:fd:c0:8d:
         a3:b8:5d:4a:13:50:a1:22:8e:40:38:f0:44:a5:6c:57:fe:dc:
         4e:91:78:59:f8:7f:64:4b:9d:cf:b4:8a:23:1d:56:b6:86:35:
         8c:24:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:20 2026 by rpki-client