Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          BojFnpAUznrKTmC7Yt7+y6PK+Y5lvhP3mxkHVSioJlE=
Subject key identifier:   E4:4A:D8:CC:96:78:90:AF:1C:0C:37:20:9E:03:CE:DD:B6:14:A2:D5
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       7D3799F786C7130399216E5B56476A64F7074FE5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          85
Signing time:             Sat 13 Jun 2026 10:56:45 +0000
Manifest this update:     Sat 13 Jun 2026 10:51:45 +0000
Manifest next update:     Sun 14 Jun 2026 14:21:45 +0000
Files and hashes:         1: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          2: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          3: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
                          4: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          5: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          6: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          7: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          8: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          9: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          10: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          11: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          12: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          13: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          14: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          15: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          16: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          17: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          18: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          19: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          20: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          21: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          22: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          23: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          24: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          25: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
                          26: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          27: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          28: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          29: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: aaNkXbDaaXkZzR+SYkNhU/7XKLLnN8y18si3G0yWMZw=)
                          30: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          31: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          32: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          33: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          34: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          35: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          36: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          37: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          38: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:37:99:f7:86:c7:13:03:99:21:6e:5b:56:47:6a:64:f7:07:4f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jun 13 10:51:45 2026 GMT
            Not After : Jun 14 14:21:45 2026 GMT
        Subject: CN=E44AD8CC967890AF1C0C37209E03CEDDB614A2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:15:3f:ce:33:ff:00:10:36:2a:6d:b7:23:
                    60:cd:de:9c:12:6b:e0:ac:f2:8d:4f:6c:c1:b2:3e:
                    8f:af:a3:a5:50:6b:e9:5e:a0:4f:76:99:02:02:cb:
                    57:18:d9:9b:34:60:80:40:0b:5a:f4:47:cd:01:ce:
                    60:4f:9b:67:96:c6:35:05:cb:78:92:e0:ff:d1:32:
                    cf:5c:b2:94:5d:b7:48:ba:1f:7f:47:83:f8:e8:85:
                    73:b2:29:83:6f:86:87:7a:87:8c:d6:3d:d0:af:69:
                    52:64:4c:bf:01:6d:76:a7:cb:37:78:90:2c:1e:d9:
                    33:50:f9:e4:82:ad:81:1b:8d:76:57:66:21:65:3c:
                    98:b5:55:cb:f4:9b:57:ab:e4:97:85:d0:b2:69:01:
                    af:8e:74:3f:f1:53:36:b5:da:11:12:9f:10:de:a4:
                    f0:94:e3:cb:cd:ba:a2:ed:d7:80:2c:73:1a:de:be:
                    78:e7:06:e4:f1:fe:45:7e:cc:a7:a2:34:a6:65:27:
                    96:73:9c:94:9b:65:16:0b:e4:6b:4f:68:fc:10:7f:
                    91:93:a8:7f:8a:c0:59:8c:a5:8f:3a:12:2f:4f:c8:
                    5a:86:ea:aa:56:34:e0:81:8a:20:6a:d2:39:cb:1d:
                    c6:43:d5:3a:f6:e8:a0:50:0a:35:68:20:ab:8f:38:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:D8:CC:96:78:90:AF:1C:0C:37:20:9E:03:CE:DD:B6:14:A2:D5
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:4b:c4:6b:3b:29:80:09:62:d5:93:0a:d5:2f:85:a4:be:
         be:10:05:77:18:18:1f:38:b1:0a:a9:ae:f8:bf:ef:ff:b9:9f:
         fe:8a:8b:27:66:be:7b:01:c4:56:82:78:4f:2c:8c:85:1a:2a:
         c4:c0:bd:76:47:f5:6e:d0:02:c3:b6:e2:81:83:f7:24:23:b8:
         f9:00:74:73:e4:1b:30:29:3d:6a:d7:87:8b:f1:0b:d5:37:a4:
         7b:3f:51:73:2d:3e:cd:f9:72:e7:55:8b:9d:54:a9:c3:93:8c:
         49:ea:6f:05:ee:41:a9:fc:84:de:22:98:07:eb:e5:36:70:f2:
         08:d8:bf:5b:4f:93:71:68:0c:d1:40:84:08:0f:43:90:47:6d:
         c3:17:b4:35:de:fa:1e:22:48:4f:d9:5e:6d:5e:3d:2d:92:09:
         95:9b:0f:41:07:f5:91:8a:15:69:11:17:d1:18:63:66:0d:97:
         72:90:6f:e5:de:7d:35:dc:1c:7a:22:ae:cb:10:85:81:3d:0e:
         36:2a:a8:55:9e:f7:49:eb:80:1f:a9:d3:35:e8:cd:83:af:4b:
         c6:6d:21:00:02:06:f1:9d:46:ef:93:35:d9:32:00:4c:94:71:
         af:e1:c9:6c:dc:46:83:94:0c:32:3d:39:be:20:3d:c7:30:df:
         97:80:d3:fd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfTeZ94bHEwOZIW5bVkdqZPcHT+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA2MTMxMDUxNDVaFw0yNjA2MTQxNDIxNDVaMDMxMTAvBgNV
BAMTKEU0NEFEOENDOTY3ODkwQUYxQzBDMzcyMDlFMDNDRUREQjYxNEEyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QBU/zjP/ABA2Km23I2DN3pwS
a+Cs8o1PbMGyPo+vo6VQa+leoE92mQICy1cY2Zs0YIBAC1r0R80BzmBPm2eWxjUF
y3iS4P/RMs9cspRdt0i6H39Hg/johXOyKYNvhod6h4zWPdCvaVJkTL8BbXanyzd4
kCwe2TNQ+eSCrYEbjXZXZiFlPJi1Vcv0m1er5JeF0LJpAa+OdD/xUza12hESnxDe
pPCU48vNuqLt14AscxrevnjnBuTx/kV+zKeiNKZlJ5ZznJSbZRYL5GtPaPwQf5GT
qH+KwFmMpY86Ei9PyFqG6qpWNOCBiiBq0jnLHcZD1Tr26KBQCjVoIKuPOCv5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU5ErYzJZ4kK8cDDcgngPO3bYUotUwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zRDQyNkJFQTQ0QzU2
MTA5NzA3NjAyOTIzNjY4RDQwRjQ0NThGQkVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuJLxGs7KYAJ
YtWTCtUvhaS+vhAFdxgYHzixCqmu+L/v/7mf/oqLJ2a+ewHEVoJ4TyyMhRoqxMC9
dkf1btACw7bigYP3JCO4+QB0c+QbMCk9ateHi/EL1Tekez9Rcy0+zfly51WLnVSp
w5OMSepvBe5BqfyE3iKYB+vlNnDyCNi/W0+TcWgM0UCECA9DkEdtwxe0Nd76HiJI
T9lebV49LZIJlZsPQQf1kYoVaREX0RhjZg2XcpBv5d59NdwceiKuyxCFgT0ONiqo
VZ73SeuAH6nTNejNg69Lxm0hAAIG8Z1G75M12TIATJRxr+HJbNxGg5QMMj05viA9
xzDfl4DT/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:42 2026 by rpki-client