Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File:                     40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier:          7xtdt5WPU8kEh4DUfVVuAWnVjil06Nijilm95xnMy24=
Subject key identifier:   53:ED:BE:92:4B:54:70:C8:C5:B6:0C:B2:B4:1C:07:47:91:33:24:A4
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       53886E34E4B6B5A0879901A19117CF2654E1FB70
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number:          AD
Signing time:             Tue 13 Oct 2026 20:53:13 +0000
Manifest this update:     Tue 13 Oct 2026 20:48:13 +0000
Manifest next update:     Fri 16 Oct 2026 23:19:13 +0000
Files and hashes:         1: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
                          2: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
                          3: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
                          4: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
                          5: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
                          6: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
                          7: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
                          8: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
                          9: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
                          10: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
                          11: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
                          12: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
                          13: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
                          14: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
                          15: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
                          16: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
                          17: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
                          18: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
                          19: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
                          20: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
                          21: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
                          22: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
                          23: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: vCVjekxylSklalGj23i6+Nps9wYmNjV8m7jSR2wlTrQ=)
                          24: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
                          25: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
                          26: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
                          27: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
                          28: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 23:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:88:6e:34:e4:b6:b5:a0:87:99:01:a1:91:17:cf:26:54:e1:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Oct 13 20:48:13 2026 GMT
            Not After : Oct 16 23:19:13 2026 GMT
        Subject: CN=53EDBE924B5470C8C5B60CB2B41C0747913324A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:f7:53:5f:7d:87:70:c7:d6:71:c9:fb:a9:
                    38:ca:13:b8:6c:95:89:49:a1:e7:24:c5:99:9d:d0:
                    e2:98:f6:76:8d:e9:c3:9e:7c:ed:d1:d5:ab:9b:89:
                    b6:d8:b2:78:2d:81:5c:e9:d5:6b:14:ce:42:76:d8:
                    c4:00:fd:7d:d3:74:71:28:d7:e9:66:ff:c4:ee:38:
                    48:d1:9e:fe:8e:9a:aa:c0:6d:a1:aa:e0:4a:71:76:
                    c1:b7:8d:04:a7:95:40:71:49:18:22:2a:8b:26:c0:
                    bd:22:8b:11:fc:98:3a:5d:d0:82:55:01:98:20:f3:
                    a0:90:45:a5:1e:61:c0:fd:f7:60:cc:16:40:dd:96:
                    80:ac:91:ac:1d:03:4a:0d:c1:4f:59:52:ff:ad:f1:
                    32:ca:fa:4a:a0:ac:99:8c:84:94:69:63:21:75:aa:
                    42:ca:d7:78:4b:78:37:11:40:ee:50:33:cb:02:cf:
                    ee:29:51:f5:24:ab:f5:b4:9d:85:3e:8a:ca:12:2d:
                    21:2c:7b:23:f6:9c:3d:9f:92:1c:c5:63:e9:53:a3:
                    58:e9:16:8a:f5:d5:26:8a:9a:b0:49:66:a7:b4:16:
                    dd:a2:d2:d0:af:38:4c:81:65:90:d3:6b:87:9e:6f:
                    65:76:53:84:c5:9d:1c:c1:89:53:f4:46:8b:e2:bc:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:BE:92:4B:54:70:C8:C5:B6:0C:B2:B4:1C:07:47:91:33:24:A4
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:8b:8b:97:ea:6b:b8:1a:8d:f0:7b:5b:f6:35:e4:7f:a4:
         78:d7:03:07:9a:0e:18:bd:a4:95:ea:93:e8:d2:b8:6a:5b:5b:
         3f:ae:a4:33:27:54:7a:2b:02:d8:45:ee:23:e6:26:92:b2:7e:
         de:df:c9:6a:b5:e2:9c:cc:3c:3e:7f:0b:77:ba:20:ff:b9:19:
         be:55:a6:51:32:0a:e6:47:c1:d8:1b:c1:e9:56:f5:a0:9d:7c:
         35:49:9e:18:19:cf:69:ba:a4:54:55:60:e6:b0:c7:cc:a3:a1:
         a6:36:3f:7b:8a:6c:5e:08:f5:c9:60:4b:a1:a2:84:e7:54:0f:
         01:09:99:86:b3:72:f1:86:e0:ca:93:45:22:6b:a6:0c:ae:a9:
         9a:2f:e4:7f:b4:ee:8b:54:6d:b9:65:9e:95:61:0d:0b:08:88:
         64:02:3e:5c:31:5b:0e:27:ff:ee:55:ce:f1:96:c1:08:21:73:
         2f:f6:0f:33:81:34:da:28:d0:43:25:92:6e:01:45:b5:13:03:
         b1:ae:10:02:ad:2f:68:4f:61:27:d8:62:85:db:23:78:af:68:
         7d:a6:db:b2:f1:87:02:b8:c1:d0:6b:71:1e:21:52:e2:ca:b4:
         91:61:a9:99:34:be:37:9a:85:79:44:2f:66:ee:2c:54:a6:b7:
         78:05:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:50 2026 by rpki-client