Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
File:                     526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json)
Hash identifier:          OsqlBqI8E/hjwyNCM9YkBNw2Ld0j1UMWRPAvVDeMEnM=
Subject key identifier:   B5:61:6E:F6:F8:5F:0A:77:E7:B2:FA:61:BF:95:E9:E6:06:33:A3:45
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Certificate issuer:       /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial:       247DD55581B3F34F3DA9F881EDBCDFC6FEB7A710
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
Manifest number:          C9
Signing time:             Mon 05 Oct 2026 02:48:33 +0000
Manifest this update:     Mon 05 Oct 2026 02:43:33 +0000
Manifest next update:     Thu 08 Oct 2026 06:21:33 +0000
Files and hashes:         1: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=)
                          2: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=)
                          3: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=)
                          4: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=)
                          5: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=)
                          6: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: 8y+WZgRXE7bMQyjROD9Hpws1sR9/NDat6NNMGJbaW5Y=)
                          7: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=)
                          8: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=)
                          9: 3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa (hash: tuXYqVmE6ECVrR2hePGUfUEvZDi/5Mnaky6gOdgaZss=)
                          10: 34332e3233392e3132302e302f32322d3232203d3e2034383337.roa (hash: +pyEGxsxJlmP0xnipvGwK3GS+xyc85YePa3acnQ6Uic=)
                          11: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=)
                          12: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 14:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:d5:55:81:b3:f3:4f:3d:a9:f8:81:ed:bc:df:c6:fe:b7:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
        Validity
            Not Before: Oct  5 02:43:33 2026 GMT
            Not After : Oct  8 06:21:33 2026 GMT
        Subject: CN=B5616EF6F85F0A77E7B2FA61BF95E9E60633A345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:d5:23:47:67:98:a8:f5:61:ad:fe:1d:26:
                    9c:2c:9b:dc:d3:41:98:02:9c:02:00:3c:0a:c4:74:
                    8d:28:7c:74:fe:79:78:ec:d0:f4:f9:d4:f6:12:82:
                    8e:25:b8:8e:a6:54:9e:1b:8b:ce:e3:24:05:73:3b:
                    d7:a0:04:02:1b:74:2d:37:07:39:f9:86:96:3e:eb:
                    15:0e:80:44:5e:3a:2a:45:bc:5b:61:10:11:a9:cb:
                    60:14:3d:52:ff:5e:96:d3:70:4c:ba:2f:ef:cd:18:
                    8a:d0:d8:37:d2:44:4d:e1:35:5b:fb:bf:56:af:bd:
                    1f:ff:27:6d:87:7d:18:55:49:b3:e9:af:e1:81:0d:
                    71:dc:a6:59:85:fb:3f:eb:26:b3:2b:cc:94:e9:f8:
                    79:9d:8c:98:fa:88:2f:21:73:d3:dd:f6:ee:5f:2a:
                    66:f9:22:8c:e3:74:11:32:ef:f2:bf:0f:1b:1b:b2:
                    0b:d9:84:9f:ab:9e:f6:e3:df:d3:32:19:e1:a1:46:
                    0e:8f:a6:d0:ad:35:6d:15:95:16:bf:9f:19:63:08:
                    97:cc:d9:7c:69:89:dc:37:dc:58:cd:e0:4f:20:f1:
                    b3:06:47:62:75:23:17:27:e8:32:52:fd:3e:02:24:
                    35:3e:2b:12:88:06:1a:90:f6:ca:25:ad:f9:a6:94:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:6E:F6:F8:5F:0A:77:E7:B2:FA:61:BF:95:E9:E6:06:33:A3:45
            X509v3 Authority Key Identifier:
                keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:30:e6:e4:b1:36:c3:cb:b2:e3:d8:b3:77:d2:70:e8:b1:
         8e:08:fc:6d:83:38:94:d9:47:51:61:82:e9:67:3c:e0:b7:fe:
         de:fd:7c:cd:3a:2c:74:19:ae:2b:24:a5:07:13:f7:cf:d5:82:
         71:8c:54:09:a4:57:a2:c0:89:a2:be:4d:e9:ac:13:ff:40:71:
         ac:69:7c:ae:7d:ee:32:67:28:a3:69:6e:f8:78:31:09:b5:bc:
         b7:b9:b0:4d:a2:c2:4f:4f:e1:f4:1b:3e:b0:55:20:e5:12:db:
         70:15:1e:9f:a1:af:a5:6b:08:fe:82:8f:93:f4:e6:e5:6c:50:
         d7:5e:d2:51:b0:2f:7e:11:d4:6b:f0:aa:17:f9:6f:63:c6:08:
         b6:74:06:62:81:eb:13:dd:42:7d:eb:1c:ec:de:c1:ac:b3:79:
         e5:dd:20:25:bf:28:3c:c7:fd:31:e5:e4:38:02:75:3e:da:08:
         55:71:67:8b:d3:0f:15:c5:fa:7e:fd:69:ca:10:eb:a1:3d:0d:
         a0:49:02:24:94:a0:40:f5:03:12:a0:03:6b:7c:a5:62:a4:8c:
         a3:a1:77:a7:bd:ed:69:91:cd:c7:11:3c:7e:b4:d1:06:17:1c:
         b6:e9:e6:35:5c:df:1b:72:11:23:57:f8:97:33:d5:a4:5c:2d:
         b8:d8:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:55:27 2026 by rpki-client