Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          QFUkph9yKGr6LbbCGItuYIySgr15oxiZ4R9f5FX47Io=
Subject key identifier:   DB:20:31:08:76:23:83:F5:1D:12:01:73:84:F5:46:79:65:55:76:73
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       451B34E86A3A32EFE321D2F298D058FEA2E79EBB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          C1
Signing time:             Tue 28 Jul 2026 17:42:24 +0000
Manifest this update:     Tue 28 Jul 2026 17:37:24 +0000
Manifest next update:     Wed 29 Jul 2026 20:57:24 +0000
Files and hashes:         1: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          2: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
                          3: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
                          4: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
                          5: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          6: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          7: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
                          8: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: //I+6qV/UHBnAmg+fzdYDvtxHQQdEFL4q7ONybB6qos=)
                          9: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          10: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          11: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          12: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          13: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
                          14: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          15: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
                          16: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
                          17: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          18: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          19: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
                          20: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
                          21: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
                          22: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          23: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
                          24: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
                          25: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          26: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          27: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
                          28: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          29: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
                          30: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          31: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
                          32: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
                          33: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
                          34: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
                          35: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
                          36: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
                          37: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          38: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1b:34:e8:6a:3a:32:ef:e3:21:d2:f2:98:d0:58:fe:a2:e7:9e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Jul 28 17:37:24 2026 GMT
            Not After : Jul 29 20:57:24 2026 GMT
        Subject: CN=DB203108762383F51D12017384F5467965557673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:31:95:3c:50:97:b3:6a:12:b1:c6:35:8c:
                    76:10:26:ad:13:aa:9a:72:3a:61:d1:29:af:ab:d8:
                    62:d6:dd:00:f0:01:d2:30:00:19:cb:e5:1f:7b:48:
                    b1:53:99:10:3a:3d:96:3c:ba:00:3a:8a:e1:35:a5:
                    8d:22:e1:45:5f:01:0e:64:44:e6:cf:0a:57:7e:c0:
                    bd:34:0d:b6:79:0e:7d:5c:8e:32:21:95:1d:b0:7f:
                    7c:93:0c:ea:ea:c4:7a:d7:36:60:ec:e2:82:c1:c2:
                    76:38:da:42:42:a7:a3:6a:b4:59:39:c0:40:ea:db:
                    71:10:1a:16:84:5b:43:e3:70:8d:63:7f:39:31:16:
                    f3:7b:94:fb:f1:61:d4:75:71:5b:af:7b:90:cd:59:
                    11:89:94:8c:b5:e7:3c:0c:fb:b3:5e:b0:5c:cb:cc:
                    b6:0a:8b:60:4b:6f:2e:e6:ec:fd:f5:e8:ba:11:f5:
                    b9:65:07:6e:37:57:3d:9c:db:00:5c:34:a6:47:39:
                    4d:6e:e6:aa:26:da:e2:b1:53:33:24:93:b1:01:00:
                    59:6f:e9:9c:4d:a9:aa:89:0a:74:9f:d3:da:99:5f:
                    67:5c:a8:0c:4e:ef:e1:97:1c:eb:9a:40:71:5e:91:
                    bb:3c:09:27:d6:a8:f1:11:79:6e:8b:51:f0:c8:03:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:31:08:76:23:83:F5:1D:12:01:73:84:F5:46:79:65:55:76:73
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:ca:af:32:42:c6:80:86:aa:54:79:21:80:21:69:e5:e5:
         e4:5f:03:f7:68:7a:bc:cc:86:18:2a:c2:3d:4c:51:24:90:a0:
         c0:9b:6d:e7:d3:91:0c:ef:93:93:e5:18:3e:aa:88:59:66:0a:
         9e:a8:5e:1c:cd:9b:0f:a9:0f:69:cb:2c:35:9d:85:b3:20:d9:
         56:4b:ab:f3:13:2f:13:f9:78:6f:bc:61:ef:e0:c2:24:59:df:
         f9:f7:d0:c1:d2:86:e3:6e:11:84:a4:c9:7e:4b:93:9d:d8:3e:
         dd:29:e4:5d:82:e0:71:fc:a5:8b:59:13:4e:66:7b:67:be:31:
         37:6c:89:e7:b6:fc:aa:20:c0:bd:ec:f0:0d:11:33:e2:33:2b:
         c0:8f:c7:be:2c:ed:f7:da:24:4a:c6:67:8f:a0:1f:a1:fb:24:
         ad:d1:82:72:a9:18:83:b4:e7:fc:4c:a8:3f:d7:56:ef:5e:d3:
         f9:b2:b0:8a:fc:5b:da:1c:43:d1:02:2f:66:e6:54:07:a6:58:
         92:e0:1e:7f:a8:89:b7:f0:25:59:5b:bb:a1:65:37:36:5f:b0:
         98:4f:e6:fe:20:7d:57:be:f8:07:bb:17:8c:c4:39:94:6b:9e:
         c8:04:83:a7:b0:7c:18:00:37:7a:a5:25:db:20:a0:fc:d7:02:
         d7:a9:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:47 2026 by rpki-client