Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          44KQJHlwmo9SIp5cGYD9c/t5dVhDA2aYKOZjV9VtlZo=
Subject key identifier:   66:F6:1C:9A:51:F7:02:5B:29:A9:3D:42:20:96:16:A5:19:C7:5C:3B
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       5D62F4A28B353C0F7B8722D6BACE971433A03879
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          FE
Signing time:             Tue 13 Oct 2026 07:07:49 +0000
Manifest this update:     Tue 13 Oct 2026 07:02:49 +0000
Manifest next update:     Fri 16 Oct 2026 14:46:49 +0000
Files and hashes:         1: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          2: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          3: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          4: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          5: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          6: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          7: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          8: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
                          9: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          10: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
                          11: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          12: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          13: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          14: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          15: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          16: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: ZefuJ4oaAcJ/LI87+QuTC51eRXYzj19Q1yW81ofI0ao=)
                          17: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          18: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          19: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
                          20: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          21: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          22: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          23: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          24: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          25: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          26: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          27: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          28: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          29: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          30: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          31: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          32: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          33: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          34: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          35: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          36: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          37: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          38: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 14:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:f4:a2:8b:35:3c:0f:7b:87:22:d6:ba:ce:97:14:33:a0:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Oct 13 07:02:49 2026 GMT
            Not After : Oct 16 14:46:49 2026 GMT
        Subject: CN=66F61C9A51F7025B29A93D42209616A519C75C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:3d:e1:5e:a3:51:9a:f2:ae:56:42:8b:98:
                    74:84:b6:1b:ed:a6:36:42:75:b3:49:ea:7e:df:a7:
                    5c:94:19:35:12:91:01:e2:91:9f:f4:33:89:b8:d1:
                    54:98:35:84:e9:e5:67:83:30:8f:ab:d9:d4:20:a2:
                    e5:a5:44:4d:f6:b1:16:5f:03:1f:d4:c7:d4:a1:f1:
                    e9:3f:e5:09:b7:27:67:40:61:1d:f6:63:b5:07:c4:
                    0f:aa:9a:61:cd:63:cd:0c:f4:a6:5f:b2:4a:76:cb:
                    51:19:98:5d:63:a0:9a:af:cf:45:9c:69:98:23:d7:
                    8d:6d:7a:dc:57:ce:b2:88:28:dc:8b:a9:f2:85:b9:
                    1e:81:10:46:e5:fc:7e:8e:40:f5:1c:4b:b3:d2:f0:
                    c8:f8:b7:29:9a:35:82:3f:94:17:38:30:0d:90:c3:
                    84:9a:fa:b0:15:09:f9:82:48:5c:fb:ef:95:18:33:
                    f4:1c:98:6d:cf:81:15:6b:28:09:4e:5e:0b:42:1c:
                    66:00:1f:5c:32:12:7e:ba:84:81:f0:39:c9:87:21:
                    16:23:ee:1c:c0:bb:2d:e4:73:12:c8:37:c1:7b:18:
                    a2:26:d9:4b:25:af:ca:99:16:b9:2f:5a:1a:69:29:
                    f9:d3:e0:fb:e5:a6:d9:e4:0b:f1:38:12:59:4b:24:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:1C:9A:51:F7:02:5B:29:A9:3D:42:20:96:16:A5:19:C7:5C:3B
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:c0:c5:d1:2f:e2:cd:57:d6:96:67:94:cd:62:46:54:17:
         36:58:fb:0c:20:16:5a:41:d8:2d:51:0a:e8:07:77:48:06:3a:
         67:49:62:ef:88:74:8a:4e:d1:c4:60:b3:55:df:7c:01:9b:45:
         ee:ef:67:ae:02:4e:8a:21:76:bd:b7:bf:50:fe:6b:a6:49:16:
         3e:4a:53:d2:fe:d9:4b:0e:ae:83:42:d5:82:52:12:e3:62:04:
         65:41:40:fb:04:4d:f5:23:93:f5:40:9b:c2:a9:57:a0:17:b1:
         d9:8d:87:7b:be:29:c5:05:ee:9e:52:8c:9e:af:71:a4:d1:96:
         7d:64:57:1b:b1:78:00:78:ce:33:3e:80:9d:54:c1:d7:5e:e1:
         cc:29:ab:8b:43:72:0c:77:7a:3d:3c:13:51:af:aa:77:91:d2:
         16:51:03:ed:e4:cb:b5:50:3e:52:71:9f:68:17:5f:50:84:ed:
         2e:75:cc:29:21:af:0a:ef:ec:75:27:f0:db:91:50:db:7b:d8:
         22:dc:69:22:5c:83:58:1d:77:73:a6:5e:17:1f:e1:de:1d:b5:
         e7:22:52:78:06:43:d8:ac:7c:1e:ed:1f:02:ff:32:d4:93:59:
         2b:e7:e7:82:b2:23:9b:dd:2a:ec:0f:b5:f9:d4:fc:4c:db:9f:
         b2:d7:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:53 2026 by rpki-client