Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
File:                     A26A131411EAF25D645F4C22903078A445B073F7.mft (raw, json)
Hash identifier:          5ATwQd9yZrZ4kYw7tNRunX+mUOzaqzWTDIIWhXDtkoY=
Subject key identifier:   EE:7C:4B:42:3A:AB:9C:D4:D4:0E:E0:17:23:1C:E4:7A:5B:AF:63:31
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       75ADD384079B8AE9CB8994A773D577ADEA8DCA03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
Manifest number:          09
Signing time:             Mon 13 Apr 2026 07:19:17 +0000
Manifest this update:     Mon 13 Apr 2026 07:14:17 +0000
Manifest next update:     Tue 14 Apr 2026 08:55:17 +0000
Files and hashes:         1: 3135322e3130342e3136382e302f32322d3232203d3e2039393339.roa (hash: bbuI9mTg692EuNsYr+lfVPVF7WIjp1uXcddstAbkdkU=)
                          2: 3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (hash: bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=)
                          3: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (hash: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=)
                          4: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (hash: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=)
                          5: 3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (hash: sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=)
                          6: A26A131411EAF25D645F4C22903078A445B073F7.crl (hash: L+6UJeo6tTTwXSUKatuh9C727KeO0Y63xgyT36fQ7vo=)
                          7: 3135322e3130342e3232372e302f32342d3234203d3e2039393339.roa (hash: tK7ezxdNfJw3vpQOe60aF3bOavIsabAbgieKbkkT4xU=)
                          8: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (hash: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0=)
                          9: 3135322e3130342e3139322e302f31382d3138203d3e2039393339.roa (hash: tnDq4yiL8iHq+em2bzSb1AuqrAikab3yLQ8EL8C186k=)
                          10: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (hash: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ad:d3:84:07:9b:8a:e9:cb:89:94:a7:73:d5:77:ad:ea:8d:ca:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: Apr 13 07:14:17 2026 GMT
            Not After : Apr 14 08:55:17 2026 GMT
        Subject: CN=EE7C4B423AAB9CD4D40EE017231CE47A5BAF6331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fa:6c:f0:67:82:2d:6d:83:40:92:e9:94:6c:
                    0a:af:18:0e:bb:0b:62:2d:4d:da:38:11:08:50:39:
                    d8:16:e1:5d:c4:da:42:5d:42:8d:fd:62:dc:13:b8:
                    9c:d4:1c:53:53:6f:0e:11:db:ba:c3:5b:fe:69:2c:
                    dd:04:91:7a:b1:11:5f:67:49:c7:da:a7:b5:48:77:
                    8a:26:6c:3b:e3:ec:49:bc:76:17:75:4d:7e:d8:20:
                    a7:8a:a9:b5:a3:8a:12:8f:9e:c5:d0:e0:b9:6c:1c:
                    1f:f4:c9:0f:42:0b:29:71:12:8c:81:06:12:c7:c1:
                    b5:d5:53:0f:e5:8c:52:ee:13:c9:f8:3a:63:7f:cd:
                    e7:aa:25:6f:74:61:f9:7e:56:7b:8a:d6:c8:d7:a3:
                    c1:d2:f9:8e:03:f8:90:fe:c1:90:8a:78:2a:cf:33:
                    aa:6c:72:56:ff:4c:0d:1f:4a:01:32:e7:be:e0:19:
                    83:17:39:d3:36:c0:f5:d0:f9:b0:9c:52:35:2b:e1:
                    cb:72:90:16:79:86:b2:09:f4:99:94:1c:ac:53:ce:
                    29:74:82:f6:1e:d7:e5:84:58:d9:2d:90:86:3e:b8:
                    da:3c:0c:d4:57:17:01:16:d4:92:da:07:46:ac:fe:
                    29:68:f2:87:5d:c0:37:5c:c1:b0:2e:2e:62:81:54:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:4B:42:3A:AB:9C:D4:D4:0E:E0:17:23:1C:E4:7A:5B:AF:63:31
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:c2:9e:f0:ef:00:3b:19:fd:86:2d:e8:ec:0c:bc:6c:84:
         89:19:ba:e2:a4:45:a0:cb:16:dd:2f:a7:f0:b6:7b:43:09:6d:
         6c:f3:69:80:2b:3f:e6:f3:00:52:bf:5d:70:56:4e:f8:58:66:
         3b:91:68:ec:61:94:f1:78:1c:4b:61:cc:7d:23:48:97:5e:80:
         d0:65:4e:67:87:4b:e8:b7:bf:29:be:9c:7a:86:93:a1:9a:e6:
         79:09:d8:a4:b0:1d:86:a3:bb:45:ec:ed:63:a8:ea:01:bb:79:
         fb:16:c3:19:b1:62:f1:f4:64:25:95:18:b2:9f:b7:3e:c6:5c:
         00:61:4a:f3:98:0d:2b:cf:aa:ef:1d:2d:a9:c9:b3:87:96:a4:
         41:b7:9a:56:f5:3b:19:d6:a0:05:bd:b8:6c:fd:a3:20:84:55:
         55:f2:fa:ce:55:57:31:52:90:bb:db:e5:d8:16:5f:40:77:22:
         a7:37:59:06:df:70:7a:5b:ec:d9:4d:4b:d2:fc:5d:2e:fe:12:
         7d:28:b7:47:4e:ec:73:f3:48:28:72:25:38:a5:e8:a0:e1:f0:
         a6:7c:ea:c5:24:37:43:8e:b1:b5:13:78:1f:67:71:67:b7:f7:
         d1:b2:6e:62:e9:2c:d1:f4:ab:1f:2b:2b:c6:36:b4:43:6f:68:
         45:0c:09:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 16:37:45 2026 by rpki-client