Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
File:                     A26A131411EAF25D645F4C22903078A445B073F7.mft (raw, json)
Hash identifier:          5yBa9gVtLvb5gSd1jbISjimH7X3kGN1D037YP5SqPXk=
Subject key identifier:   82:4B:DC:4F:AE:2F:9C:91:AF:42:98:32:C4:C2:59:B4:F2:39:75:22
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       4097D8D8450C5A5BC859F1741859066F7D081F5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
Manifest number:          47
Signing time:             Fri 29 May 2026 06:52:42 +0000
Manifest this update:     Fri 29 May 2026 06:47:42 +0000
Manifest next update:     Sat 30 May 2026 10:27:42 +0000
Files and hashes:         1: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (hash: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=)
                          2: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (hash: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=)
                          3: 3135322e3130342e3136382e302f32322d3232203d3e2039393339.roa (hash: bbuI9mTg692EuNsYr+lfVPVF7WIjp1uXcddstAbkdkU=)
                          4: A26A131411EAF25D645F4C22903078A445B073F7.crl (hash: KStYrDLmPZLEs4Q71XFNGrT0rSOp2Wi9oXqD1GN8DlI=)
                          5: 3135322e3130342e3139322e302f31382d3138203d3e2039393339.roa (hash: tnDq4yiL8iHq+em2bzSb1AuqrAikab3yLQ8EL8C186k=)
                          6: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (hash: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0=)
                          7: 3135322e3130342e3232372e302f32342d3234203d3e2039393339.roa (hash: tK7ezxdNfJw3vpQOe60aF3bOavIsabAbgieKbkkT4xU=)
                          8: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (hash: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=)
                          9: 3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (hash: bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=)
                          10: 3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (hash: sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:97:d8:d8:45:0c:5a:5b:c8:59:f1:74:18:59:06:6f:7d:08:1f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: May 29 06:47:42 2026 GMT
            Not After : May 30 10:27:42 2026 GMT
        Subject: CN=824BDC4FAE2F9C91AF429832C4C259B4F2397522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:5e:59:69:cb:bd:c5:fd:d2:40:ad:7f:3f:
                    09:e7:7b:2f:85:cd:05:c2:0a:80:4d:34:e4:cd:7e:
                    bd:07:c8:bc:bf:53:92:35:d1:81:9b:c0:80:6c:25:
                    ab:bc:8e:1b:a1:e6:cd:aa:6a:07:78:3d:bd:eb:f4:
                    09:73:db:47:6f:df:49:54:18:31:ea:75:b2:87:29:
                    c2:e1:e8:3a:b5:74:71:cb:d7:80:e7:8f:5f:ad:ea:
                    65:6d:34:4a:7e:24:b3:95:cc:74:7f:95:0a:56:c4:
                    a3:16:2a:44:c9:e3:fb:0b:57:46:0a:65:ea:98:7d:
                    6b:66:fc:50:57:dd:85:ea:a1:fa:55:a6:b9:6d:00:
                    bc:05:e9:ed:e4:45:68:da:55:0c:65:0d:b1:da:e4:
                    23:40:ca:1e:e7:2c:05:43:e0:0d:38:fe:ba:29:1a:
                    73:ff:c6:5f:33:8a:69:3d:50:7a:44:8d:02:74:dc:
                    e2:96:2f:82:e1:95:84:10:9e:20:3e:8e:1e:a3:12:
                    1c:a9:51:1f:5a:4b:61:13:04:9e:37:a6:9a:25:f8:
                    c3:ad:ac:db:47:50:ff:a8:a8:66:78:99:ca:4b:b4:
                    3a:da:e0:28:8d:bd:65:2b:2b:33:94:82:8b:b4:9e:
                    e2:24:4a:7e:83:9a:4c:62:00:5a:2e:71:93:27:5c:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:DC:4F:AE:2F:9C:91:AF:42:98:32:C4:C2:59:B4:F2:39:75:22
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:d1:12:ba:c7:ea:d2:c7:e9:46:d5:48:59:1b:10:1d:b8:
         d0:d0:73:e9:dd:1a:ff:94:43:d6:1b:db:9f:e3:2f:a8:b3:cc:
         94:29:64:48:ef:e3:c3:8b:39:77:c4:ec:39:67:46:5f:1e:84:
         92:7d:3c:91:a0:7a:cb:95:3b:e8:d4:0b:a7:7e:9b:f6:67:fb:
         72:a4:b5:00:87:99:0d:16:09:6b:3b:89:c3:6b:fb:fa:41:50:
         18:da:21:d4:63:10:4c:af:1c:9b:02:5c:a3:95:cc:e5:86:19:
         5c:ec:94:f1:83:dc:d9:0d:9c:83:2f:6f:fc:40:d9:87:e8:7e:
         3c:1d:af:6d:9b:b8:e5:a9:2d:d7:0e:ad:41:60:6b:8e:df:9a:
         d0:7b:90:0f:f1:c1:aa:87:ca:f4:23:8e:c0:6b:12:aa:9c:06:
         16:32:53:08:e6:1f:91:85:5e:99:53:e5:2e:11:b3:1e:5a:fa:
         50:c1:ca:df:a7:dc:f9:36:0c:d4:1a:ce:a0:98:ce:e1:93:fa:
         80:a5:9d:56:9c:f9:57:00:44:f8:0a:b4:73:cc:31:27:7a:cc:
         9a:d6:ad:6a:f6:a4:c7:ba:8e:14:9e:4d:18:84:20:f4:12:06:
         2d:fb:8f:58:4f:53:76:3a:a9:2c:9d:70:e4:10:a6:b5:1e:13:
         bd:c0:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:38:22 2026 by rpki-client