Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
File:                     A26A131411EAF25D645F4C22903078A445B073F7.mft (raw, json)
Hash identifier:          d7dH3fUVzmJOkYuTYN27ZK66rQfae9s0ArWwyKB/zS0=
Subject key identifier:   4E:B8:B0:71:94:BA:8F:09:DD:67:C5:B3:3C:A0:AF:7E:B6:6D:C2:EF
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       444A7A02C5DE9854319B749B4C05591514881375
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
Manifest number:          C1
Signing time:             Fri 28 Aug 2026 06:48:04 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:04 +0000
Manifest next update:     Mon 31 Aug 2026 12:04:04 +0000
Files and hashes:         1: 3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (hash: sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=)
                          2: 3135322e3130342e3232372e302f32342d3234203d3e2039393339.roa (hash: tK7ezxdNfJw3vpQOe60aF3bOavIsabAbgieKbkkT4xU=)
                          3: A26A131411EAF25D645F4C22903078A445B073F7.crl (hash: gKxApZXw7phALuXyBVhs1qzBLrN3Y2GA3lWOqy1oha8=)
                          4: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (hash: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0=)
                          5: 3135322e3130342e3136382e302f32322d3232203d3e2039393339.roa (hash: bbuI9mTg692EuNsYr+lfVPVF7WIjp1uXcddstAbkdkU=)
                          6: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (hash: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=)
                          7: 3135322e3130342e3139322e302f31382d3138203d3e2039393339.roa (hash: tnDq4yiL8iHq+em2bzSb1AuqrAikab3yLQ8EL8C186k=)
                          8: 3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (hash: bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=)
                          9: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (hash: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=)
                          10: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (hash: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 12:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:7a:02:c5:de:98:54:31:9b:74:9b:4c:05:59:15:14:88:13:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: Aug 28 06:43:04 2026 GMT
            Not After : Aug 31 12:04:04 2026 GMT
        Subject: CN=4EB8B07194BA8F09DD67C5B33CA0AF7EB66DC2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:88:eb:30:12:1d:7b:a0:7d:52:45:35:1c:
                    29:06:0f:b2:e8:04:6b:29:c2:43:6a:a8:93:aa:8f:
                    f6:01:7d:e0:e9:2a:2a:ef:e6:13:93:2f:13:3f:1d:
                    6a:c9:a6:5f:4f:b3:4e:2e:06:72:1d:96:49:2d:1b:
                    c8:cf:1f:0f:c0:cd:30:04:9b:00:52:b5:ff:35:88:
                    90:6e:7b:63:65:05:71:e1:61:21:70:7e:56:f5:bc:
                    da:c1:8b:20:ed:58:15:79:a5:5a:c4:6a:04:08:32:
                    a2:51:40:3e:4a:ea:d8:c0:b4:af:b0:30:27:1e:c6:
                    f1:d0:c6:38:a7:fb:82:cf:ec:d5:c7:42:8f:68:9f:
                    fb:f9:1c:f5:de:d8:87:29:e2:5a:ba:27:64:e0:15:
                    15:93:49:bf:bc:5e:8b:b8:4f:4c:8e:3c:c1:22:27:
                    7d:90:71:cd:c2:b0:12:80:0c:b4:99:ed:9f:21:94:
                    fe:1a:18:53:fe:ab:6a:b9:96:57:df:bb:82:f2:2a:
                    f1:87:8e:43:ce:63:22:39:3a:1e:0e:35:16:a0:a3:
                    d8:23:34:38:b7:70:3a:9b:c5:e4:b4:0d:9c:cc:b9:
                    f6:19:ce:bb:e1:41:ee:c6:84:8d:d3:d3:aa:a7:b1:
                    fb:1f:df:fb:6f:dd:84:39:f8:b7:a7:30:8f:28:5f:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B8:B0:71:94:BA:8F:09:DD:67:C5:B3:3C:A0:AF:7E:B6:6D:C2:EF
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:71:b7:81:68:6d:02:2e:6b:18:10:90:04:ef:9d:7d:9d:
         19:23:c3:22:d1:dc:d6:2a:39:dd:7e:d0:7f:d9:2d:52:b7:7a:
         f2:e7:a3:8e:65:ad:35:2e:55:23:19:4a:df:b9:1c:0b:ed:91:
         53:3d:28:d6:35:c7:b2:b9:28:17:89:3c:6d:cb:52:06:6e:5c:
         75:89:f1:6d:5a:fc:2f:65:62:9f:9a:e2:5b:9c:c4:b5:b4:e2:
         66:97:73:14:a6:a3:a8:9c:b0:40:ed:4a:fa:a3:0a:1d:9a:3b:
         47:98:81:53:08:98:95:ec:08:55:36:02:ed:8b:34:2e:69:07:
         66:d7:c9:4d:f6:c2:69:0a:6f:c6:d9:a9:30:a8:d7:aa:d9:9b:
         a5:9d:f8:4b:51:60:49:a2:75:7d:3d:f3:15:aa:6f:76:42:d9:
         8d:88:dd:9e:61:b6:23:08:92:ca:85:49:1c:32:2e:80:74:7c:
         a7:11:a2:ef:3d:2c:76:43:91:ef:53:96:06:4c:7d:b7:d4:68:
         a3:4a:21:14:23:42:9f:67:ed:c1:08:9f:17:c1:4e:ca:93:62:
         5b:40:1b:6b:81:31:68:26:21:1b:fb:18:50:e9:f0:a0:2c:12:
         0d:57:22:4f:35:49:e2:86:40:14:ee:a7:0a:ad:fc:cf:0f:77:
         7d:66:6c:01
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUREp6AsXemFQxm3SbTAVZFRSIE3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0
NUIwNzNGNzAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzExMjA0MDRaMDMxMTAvBgNV
BAMTKDRFQjhCMDcxOTRCQThGMDlERDY3QzVCMzNDQTBBRjdFQjY2REMyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY94jrMBIde6B9UkU1HCkGD7Lo
BGspwkNqqJOqj/YBfeDpKirv5hOTLxM/HWrJpl9Ps04uBnIdlkktG8jPHw/AzTAE
mwBStf81iJBue2NlBXHhYSFwflb1vNrBiyDtWBV5pVrEagQIMqJRQD5K6tjAtK+w
MCcexvHQxjin+4LP7NXHQo9on/v5HPXe2Icp4lq6J2TgFRWTSb+8Xou4T0yOPMEi
J32Qcc3CsBKADLSZ7Z8hlP4aGFP+q2q5llffu4LyKvGHjkPOYyI5Oh4ONRago9gj
NDi3cDqbxeS0DZzMufYZzrvhQe7GhI3T06qnsfsf3/tv3YQ5+LenMI8oX+z5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTriwcZS6jwndZ8WzPKCvfrZtwu8wHwYDVR0j
BBgwFoAUomoTFBHq8l1kX0wikDB4pEWwc/cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8wL0EyNkExMzE0MTFFQUYyNUQ2NDVGNEMyMjkwMzA3
OEE0NDVCMDczRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0NUIwNzNGNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc5MjM3MTUvMC9BMjZBMTMxNDExRUFG
MjVENjQ1RjRDMjI5MDMwNzhBNDQ1QjA3M0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWZxt4FobQIu
axgQkATvnX2dGSPDItHc1io53X7Qf9ktUrd68uejjmWtNS5VIxlK37kcC+2RUz0o
1jXHsrkoF4k8bctSBm5cdYnxbVr8L2Vin5riW5zEtbTiZpdzFKajqJywQO1K+qMK
HZo7R5iBUwiYlewIVTYC7Ys0LmkHZtfJTfbCaQpvxtmpMKjXqtmbpZ34S1FgSaJ1
fT3zFapvdkLZjYjdnmG2IwiSyoVJHDIugHR8pxGi7z0sdkOR71OWBkx9t9Roo0oh
FCNCn2ftwQifF8FOypNiW0Aba4ExaCYhG/sYUOnwoCwSDVciTzVJ4oZAFO6nCq38
zw93fWZsAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 29 08:10:25 2026 by rpki-client