Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
File:                     BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft (raw, json)
Hash identifier:          Ts4jTsMOlVZuip26BFQi9Bf6RHlb/8b8mNRYqJ4tRpA=
Subject key identifier:   A9:2B:58:CF:91:50:8A:A9:BD:90:50:A2:DB:20:F0:87:B6:75:4C:02
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       5277C92291BE2058BF164D34856751E9579EF0C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
Manifest number:          A7
Signing time:             Wed 14 Oct 2026 18:44:24 +0000
Manifest this update:     Wed 14 Oct 2026 18:39:24 +0000
Manifest next update:     Sat 17 Oct 2026 21:13:24 +0000
Files and hashes:         1: 3130362e332e31362e302f32302d3230203d3e203233373234.roa (hash: lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=)
                          2: 3130362e332e3139322e302f32302d3230203d3e203233373234.roa (hash: VwFeq3QNx8C1znAV513FBBjmORwGRi/MbWfhasR7FLc=)
                          3: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (hash: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=)
                          4: 3130332e35342e34382e302f32322d3232203d3e203536323832.roa (hash: njKoSaWfi1fkQuUrNF9621tCcCYx26fOri8fTHRgZt0=)
                          5: 34352e3131342e39362e302f32322d3232203d3e203333363738.roa (hash: t0MWhrASdQRMLyBv3kSVEOD5luNKKNMMpjuRAyutYn4=)
                          6: 3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (hash: yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=)
                          7: 3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (hash: J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=)
                          8: 3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (hash: Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=)
                          9: 3131342e3131352e302e302f31372d3137203d3e203233373234.roa (hash: GfJl+8k+x926XIyhzeOnyi2P7nB+2KG8yC4nA0cG9PA=)
                          10: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (hash: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=)
                          11: 3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (hash: zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=)
                          12: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl (hash: HRP6mnqapsRHA9FpURRFULZnqzzWHWchhQ/p+LrfP2w=)
                          13: 3130332e35342e35302e302f32332d3233203d3e203536323832.roa (hash: kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=)
                          14: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (hash: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=)
                          15: 3132322e3131352e3233322e302f32312d3231203d3e203233373234.roa (hash: yvHJeUNbBLjIA1uCIwuozmaBxyAk+8Qro/Cz4RL6dn8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:c9:22:91:be:20:58:bf:16:4d:34:85:67:51:e9:57:9e:f0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: Oct 14 18:39:24 2026 GMT
            Not After : Oct 17 21:13:24 2026 GMT
        Subject: CN=A92B58CF91508AA9BD9050A2DB20F087B6754C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:b5:f5:21:e5:4b:19:1c:9c:58:0f:72:79:
                    55:bb:0a:c2:14:ba:42:e3:fc:dd:40:3b:04:37:82:
                    37:3d:43:9a:c4:55:0d:83:53:29:88:ad:4a:c3:78:
                    98:13:f3:69:3b:b6:f2:7a:07:cf:61:6b:b4:27:65:
                    3a:ee:ff:ec:15:68:77:9e:71:bd:13:5b:f2:0e:7a:
                    e4:6a:c8:51:39:d5:f2:ee:36:8d:64:db:25:98:82:
                    ca:f6:6d:ae:69:b7:c6:fb:15:ca:10:e9:8b:ec:a6:
                    26:d9:13:f7:c2:c5:ae:73:cb:42:57:cd:f8:00:2d:
                    70:35:dd:26:8f:5b:3e:d9:c8:73:26:3e:17:1f:7e:
                    07:06:e0:d2:d6:f7:73:fb:79:c5:ca:9b:a6:b8:94:
                    52:49:32:64:c8:3d:17:e3:ce:87:75:0b:e9:be:60:
                    c8:57:f0:b3:8c:ba:3d:f9:f1:7a:b8:8b:90:01:c4:
                    1b:4a:a9:bc:ba:39:f1:a2:21:e0:73:65:39:9d:bc:
                    9c:7b:9b:c8:5b:8e:40:e2:5d:99:a9:66:57:9e:cf:
                    84:b5:3e:db:f3:b1:81:6f:d9:03:30:e8:d9:dd:9d:
                    ee:aa:dc:5f:23:df:8f:b6:bc:98:7d:b7:a2:5b:79:
                    5c:1a:ee:1a:e6:90:11:36:63:a9:2d:8f:09:8c:a2:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:58:CF:91:50:8A:A9:BD:90:50:A2:DB:20:F0:87:B6:75:4C:02
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:34:f1:7c:01:06:2b:2a:be:25:ae:5f:5e:15:9d:39:c0:6e:
         e9:6a:48:5c:fb:0f:62:26:b2:4b:83:a2:50:1b:bd:a6:fb:9e:
         7b:1b:2c:a5:ad:19:ab:8c:fd:ed:f2:42:4e:a0:66:83:b9:71:
         77:d7:29:c5:f0:e5:94:ab:fa:c9:60:04:f8:c7:e9:31:2a:9d:
         d5:c0:16:6f:32:ee:b4:72:61:ef:e1:03:50:30:69:11:65:07:
         4e:66:51:0d:54:71:9e:92:1e:e9:4b:4a:38:c6:d5:c5:a7:05:
         45:7a:ff:29:c9:02:9e:5c:9f:fa:59:f3:7f:68:c9:2c:76:05:
         b0:e2:9c:eb:0f:99:86:19:74:54:78:3d:40:bc:7b:8c:71:e8:
         86:6c:85:df:0c:6f:85:d1:e8:8e:b6:af:a2:87:5c:3b:d6:7c:
         31:90:9f:ea:32:7a:14:06:8f:ef:bc:73:27:a8:f5:33:d7:e6:
         48:d4:27:5f:67:cf:a2:67:22:c3:4c:a3:fc:7f:d5:7d:0f:c3:
         35:2a:05:ac:3f:87:96:c1:30:a8:a3:4d:cb:ce:d7:ba:74:71:
         97:8d:bd:d9:70:44:db:45:b5:49:10:fd:4e:eb:f2:a7:34:eb:
         27:a4:f0:60:5f:8a:a2:85:5b:2f:a2:14:25:0f:ba:a3:61:59:
         c2:a9:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:34 2026 by rpki-client