Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          9jErA6DS8y/Bpn1RQ0wP2HmYX0LUxUTCJ69nQuuXeY4=
Subject key identifier:   50:11:EA:43:D7:50:75:EB:01:95:F8:2D:2B:B2:27:FF:85:CC:5D:5E
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       5BF3A8EFC8B2F02038456A0AFB30C1037901BAA8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          0D
Signing time:             Mon 13 Apr 2026 08:59:17 +0000
Manifest this update:     Mon 13 Apr 2026 08:54:17 +0000
Manifest next update:     Tue 14 Apr 2026 10:05:17 +0000
Files and hashes:         1: 323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa (hash: J56KTf+Z3lImwU3Szgl0qvomW0Nqm0PiU7MnAkWe7S4=)
                          2: 323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa (hash: yTM+1LqbhmntxQdQu1uu0UkmKP1vHFK/Jrbf9D5hUMs=)
                          3: 323430313a373163303a623a3a2f34382d3438203d3e203536303430.roa (hash: EiUlUXENh5O/l09AkBho3o84rGG7+s6KB5lZQApJruk=)
                          4: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          5: 323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa (hash: KVh79S8ip/fjB9psUC8gIMB8sASXrOKNWoKVxtSVvR0=)
                          6: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          7: 323430313a373163303a643a3a2f34382d3438203d3e203536303430.roa (hash: M3e3iFAVFJk+WeyjTA+jzteIvtgA7ZmjeRrt+3xpxrA=)
                          8: 323430313a373163303a323a3a2f34382d3438203d3e203536303430.roa (hash: xKPMd9vsX/lngPXvff/QfST94o2Wg7AO0xAt70to8n0=)
                          9: 323430313a373163303a31313a3a2f34382d3438203d3e203536303430.roa (hash: FfdK7O2+HBfqWUFQkH/lbFpL6iWbHc5IuAFrQMiU3oQ=)
                          10: 323430313a373163303a633a3a2f34382d3438203d3e203536303430.roa (hash: fDVX+I2FOcVQ3obyZzr1wYMDmOo3Rr2BPcuXXsp6Ccw=)
                          11: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          12: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          13: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          14: 323430313a373163303a313a3a2f34382d3438203d3e203536303430.roa (hash: n2XTnpyAprEv7e/Z5xW/+G0rRQ750aelR5qlLA77lCY=)
                          15: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          16: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          17: 323430313a373163303a383a3a2f34382d3438203d3e203536303430.roa (hash: J0xigY65ck9pjSejCDnpLgmDLrC/wOQKNFSvKbDpEiM=)
                          18: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: eM7JnLGxIrCPId1cS7TT108bv0XLSKj7/Fm/adROnPI=)
                          19: 323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa (hash: neZRC/PaTSmwfdGFI34mzZLwMyWoAIBSn/45jQ4Uk4U=)
                          20: 323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa (hash: mYBV5yfdvFGoyceOoR7wiykMsuzE3YF6Wqdx8zx0TPA=)
                          21: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          22: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          23: 323430313a373163303a3a2f34382d3438203d3e203536303430.roa (hash: DYSt7LcrpRcGKWtNUILrZZhd+UK60HHboULaA3yow5o=)
                          24: 323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa (hash: XiwqRLKR9sKiu83ZEbZ2TPYO4yZID4j8S/i7bfLXm+s=)
                          25: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          26: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          27: 323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa (hash: agd5o34u0yHgl5NHtrOaUSVUO5n0IZPoEWqOR4tkyMU=)
                          28: 323430313a373163303a653a3a2f34382d3438203d3e203536303430.roa (hash: T4FDqX8/hQnhVU1b2mr7YxNDZjPVQ/tmsX5xKa2oJOE=)
                          29: 323430313a373163303a663a3a2f34382d3438203d3e203536303430.roa (hash: r7s+Zo1yZPVkRH+mE9SlExouQlXJFy6iETfLDNjLT+8=)
                          30: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          31: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          32: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          33: 323430313a373163303a373a3a2f34382d3438203d3e203536303430.roa (hash: pFG2KRWIRL52dYY3jCoq3RVFJ1BGL3wMe9XU4PmUVsY=)
                          34: 323430313a373163303a353a3a2f34382d3438203d3e203536303430.roa (hash: KkMuJKHQEuX5yppkcONDr595+67RNuNBOuSNcWbib0k=)
                          35: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          36: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          37: 323430313a373163303a613a3a2f34382d3438203d3e203536303430.roa (hash: BkDr/YuA+kh4okfJETQbMwLftUsJWE41p5O0oV5ceNI=)
                          38: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:a8:ef:c8:b2:f0:20:38:45:6a:0a:fb:30:c1:03:79:01:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 13 08:54:17 2026 GMT
            Not After : Apr 14 10:05:17 2026 GMT
        Subject: CN=5011EA43D75075EB0195F82D2BB227FF85CC5D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:c2:f1:bf:59:f1:64:e4:2b:14:e6:a5:4b:
                    c3:5e:bb:33:ce:93:d0:29:31:6d:fd:16:05:f4:aa:
                    de:c9:9b:ff:dd:2f:8f:3a:3b:82:a4:af:4d:52:6f:
                    0f:cc:af:34:1d:96:84:e9:72:98:53:6e:e6:26:d1:
                    4b:dc:32:c8:77:07:8e:6e:6f:30:ec:01:5f:96:c6:
                    df:c4:8c:39:5c:ed:cd:65:0c:43:cf:42:47:79:e7:
                    8d:5c:1d:f9:ac:c5:20:77:6f:e7:33:eb:5d:cd:c1:
                    85:36:64:55:87:ec:aa:d6:ba:e6:99:49:5d:88:19:
                    16:ae:8f:11:3b:9e:e4:03:be:b7:e9:01:b4:41:4c:
                    93:f1:8d:0c:97:2e:67:9a:fc:66:fc:24:a9:6b:29:
                    c0:1f:7f:bf:33:9d:0a:99:87:e8:8f:9d:c9:f3:57:
                    b8:6d:11:f8:02:7d:37:6d:72:88:15:fb:ac:a5:62:
                    2c:af:53:ec:1b:16:f5:b8:7b:ce:58:32:b0:fc:44:
                    95:21:0a:b8:c6:d9:38:11:75:67:20:77:02:66:d8:
                    a9:fa:7a:5a:bc:cb:8d:e8:76:08:c4:8d:f0:06:9c:
                    74:f2:3f:65:bc:5a:4d:6f:65:f7:98:23:c5:14:3e:
                    b0:48:d4:33:0d:73:f3:38:a7:ae:cb:a1:a6:95:fc:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:EA:43:D7:50:75:EB:01:95:F8:2D:2B:B2:27:FF:85:CC:5D:5E
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:84:fa:58:c2:10:d2:26:1d:b2:34:b8:0c:bd:d9:b2:b1:1a:
         a5:c1:6f:91:14:c3:8c:de:41:5c:d3:16:2d:d7:ed:22:32:27:
         85:5b:0b:8b:fd:ce:e1:6b:12:3b:85:d3:5c:00:9a:53:92:21:
         71:1e:a4:c2:eb:23:37:5a:8d:eb:cc:b1:55:74:48:af:02:f0:
         3c:cd:4f:f4:19:9a:f9:db:89:c9:ad:e4:8e:4f:15:41:cb:65:
         99:ad:d6:36:62:f3:9b:8a:8c:59:ce:68:62:ed:e2:ab:cf:59:
         11:60:63:6b:bb:00:80:15:03:de:16:ca:96:ad:16:99:a7:3f:
         1a:ea:a8:2f:75:22:03:02:46:23:6f:2b:c6:bb:96:0f:06:a2:
         50:6d:0f:67:42:6c:7b:03:08:ce:87:dc:66:7b:69:d1:04:c8:
         db:86:5b:6d:1f:0a:ef:7b:76:d3:f5:95:e1:50:82:97:d3:81:
         00:50:9f:e2:eb:3c:ca:6b:4f:7b:47:f3:83:d4:a8:08:7c:51:
         16:c0:9f:35:9b:d0:f5:c4:9d:a7:1e:97:20:77:f2:a2:c6:e6:
         83:85:81:88:20:04:57:03:ae:cb:0e:7d:f5:a9:98:f9:80:e1:
         e7:f8:81:c3:72:b2:35:fb:bb:1c:03:b2:b2:2f:7e:c2:1e:f4:
         d3:02:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:52 2026 by rpki-client