Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File:                     3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier:          BmFNHHyBWbspNj8cRrGUv/yJE2iXJ4uiAO7DB7RdNB8=
Subject key identifier:   5E:0F:5A:AB:55:CD:65:0A:24:CC:13:B6:00:85:60:78:47:64:D3:63
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       7489EEFEFD9B3D65DECDB6CC0F0AE97CBF4E7EAC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number:          11
Signing time:             Thu 16 Apr 2026 06:09:30 +0000
Manifest this update:     Thu 16 Apr 2026 06:04:30 +0000
Manifest next update:     Fri 17 Apr 2026 07:50:30 +0000
Files and hashes:         1: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
                          2: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
                          3: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: VWjofU57h7EpKlp3+k8ToEeDLaAm7fds8CoVTcV6ixQ=)
                          4: 323430313a373163303a633a3a2f34382d3438203d3e203536303430.roa (hash: fDVX+I2FOcVQ3obyZzr1wYMDmOo3Rr2BPcuXXsp6Ccw=)
                          5: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
                          6: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
                          7: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
                          8: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
                          9: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
                          10: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
                          11: 323430313a373163303a313a3a2f34382d3438203d3e203536303430.roa (hash: n2XTnpyAprEv7e/Z5xW/+G0rRQ750aelR5qlLA77lCY=)
                          12: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
                          13: 323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa (hash: XiwqRLKR9sKiu83ZEbZ2TPYO4yZID4j8S/i7bfLXm+s=)
                          14: 323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa (hash: KVh79S8ip/fjB9psUC8gIMB8sASXrOKNWoKVxtSVvR0=)
                          15: 323430313a373163303a3a2f34382d3438203d3e203536303430.roa (hash: DYSt7LcrpRcGKWtNUILrZZhd+UK60HHboULaA3yow5o=)
                          16: 323430313a373163303a373a3a2f34382d3438203d3e203536303430.roa (hash: pFG2KRWIRL52dYY3jCoq3RVFJ1BGL3wMe9XU4PmUVsY=)
                          17: 323430313a373163303a643a3a2f34382d3438203d3e203536303430.roa (hash: M3e3iFAVFJk+WeyjTA+jzteIvtgA7ZmjeRrt+3xpxrA=)
                          18: 323430313a373163303a623a3a2f34382d3438203d3e203536303430.roa (hash: EiUlUXENh5O/l09AkBho3o84rGG7+s6KB5lZQApJruk=)
                          19: 323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa (hash: mYBV5yfdvFGoyceOoR7wiykMsuzE3YF6Wqdx8zx0TPA=)
                          20: 323430313a373163303a353a3a2f34382d3438203d3e203536303430.roa (hash: KkMuJKHQEuX5yppkcONDr595+67RNuNBOuSNcWbib0k=)
                          21: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
                          22: 323430313a373163303a31313a3a2f34382d3438203d3e203536303430.roa (hash: FfdK7O2+HBfqWUFQkH/lbFpL6iWbHc5IuAFrQMiU3oQ=)
                          23: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
                          24: 323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa (hash: neZRC/PaTSmwfdGFI34mzZLwMyWoAIBSn/45jQ4Uk4U=)
                          25: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
                          26: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
                          27: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
                          28: 323430313a373163303a323a3a2f34382d3438203d3e203536303430.roa (hash: xKPMd9vsX/lngPXvff/QfST94o2Wg7AO0xAt70to8n0=)
                          29: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
                          30: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
                          31: 323430313a373163303a663a3a2f34382d3438203d3e203536303430.roa (hash: r7s+Zo1yZPVkRH+mE9SlExouQlXJFy6iETfLDNjLT+8=)
                          32: 323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa (hash: agd5o34u0yHgl5NHtrOaUSVUO5n0IZPoEWqOR4tkyMU=)
                          33: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
                          34: 323430313a373163303a653a3a2f34382d3438203d3e203536303430.roa (hash: T4FDqX8/hQnhVU1b2mr7YxNDZjPVQ/tmsX5xKa2oJOE=)
                          35: 323430313a373163303a383a3a2f34382d3438203d3e203536303430.roa (hash: J0xigY65ck9pjSejCDnpLgmDLrC/wOQKNFSvKbDpEiM=)
                          36: 323430313a373163303a613a3a2f34382d3438203d3e203536303430.roa (hash: BkDr/YuA+kh4okfJETQbMwLftUsJWE41p5O0oV5ceNI=)
                          37: 323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa (hash: J56KTf+Z3lImwU3Szgl0qvomW0Nqm0PiU7MnAkWe7S4=)
                          38: 323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa (hash: yTM+1LqbhmntxQdQu1uu0UkmKP1vHFK/Jrbf9D5hUMs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 07:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:89:ee:fe:fd:9b:3d:65:de:cd:b6:cc:0f:0a:e9:7c:bf:4e:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 16 06:04:30 2026 GMT
            Not After : Apr 17 07:50:30 2026 GMT
        Subject: CN=5E0F5AAB55CD650A24CC13B6008560784764D363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:08:50:08:43:bb:47:1b:29:14:0c:10:48:
                    21:cc:93:91:ae:72:6f:cc:d7:42:c4:ec:44:2f:ec:
                    84:96:f2:90:5a:21:e7:0f:a2:f1:b8:04:24:f9:65:
                    46:d3:78:54:59:52:84:01:bb:a5:23:bc:f0:64:43:
                    9e:47:45:d7:19:c6:82:c9:51:a4:38:06:cc:4f:da:
                    e5:39:0e:3b:53:41:45:be:d3:25:76:94:a4:6b:38:
                    3c:6d:7c:55:7a:52:53:d9:14:49:55:83:61:de:62:
                    3e:94:42:3d:8c:8b:f4:96:77:c0:44:22:98:ad:e9:
                    34:b3:0a:6a:11:5e:88:06:73:e8:69:2b:8e:bf:f5:
                    e6:c4:e4:3e:df:21:09:9c:b9:cd:89:1e:39:db:47:
                    06:48:cb:2b:d9:c4:cd:1c:ba:7e:a4:9d:70:73:91:
                    00:4a:a9:2e:60:ea:da:62:ee:b1:bc:36:2b:86:60:
                    eb:d1:2c:b1:25:03:58:5c:c0:0f:7d:c8:38:83:fb:
                    fb:55:be:e2:14:9a:5a:a5:df:15:f4:e1:5f:c1:3a:
                    0f:dc:92:29:fd:b4:b1:35:41:5b:a4:a3:cf:69:40:
                    58:55:12:06:de:01:b6:3b:f7:c9:e6:f3:84:63:e9:
                    e5:e7:07:fc:a6:4a:f0:b7:7b:4b:68:82:54:e7:10:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:5A:AB:55:CD:65:0A:24:CC:13:B6:00:85:60:78:47:64:D3:63
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:08:de:64:18:7b:07:da:c7:77:90:0d:07:3c:b2:00:dd:46:
         d6:33:35:de:c8:dd:5e:7e:a4:36:24:6f:c2:7c:78:f4:cb:56:
         35:2a:d3:b9:34:5b:d2:54:a7:7a:cf:a7:ca:5f:b4:93:14:e8:
         b6:4d:8c:20:8a:07:cc:73:61:04:8a:ad:fd:bb:2b:89:0f:9a:
         c8:23:fc:5e:7a:d7:c9:60:c0:c6:49:e8:88:16:e6:d3:6a:31:
         68:51:17:65:a1:89:3e:38:ac:69:75:52:8c:05:e4:87:d7:3d:
         dc:78:fa:a1:79:72:39:04:5c:60:e4:f3:f9:5f:2d:1c:e4:5a:
         14:75:a7:02:63:a3:f2:3d:9b:34:4d:98:a0:8d:0f:36:ac:7d:
         5e:48:af:1c:4a:c2:f7:40:28:eb:9b:c8:79:9f:f1:20:32:2f:
         a1:26:60:f2:2c:51:53:64:09:41:7d:05:43:ab:eb:81:a9:fe:
         44:23:01:3c:67:97:ff:82:d9:19:0c:08:05:e8:92:37:b0:7b:
         4e:0b:24:da:0f:53:74:32:cc:4b:44:b5:41:7d:54:68:bc:a6:
         27:9f:4f:3d:83:2e:1a:de:41:58:95:eb:5c:41:50:0c:60:2c:
         76:2e:69:05:1c:8e:5f:61:f2:4b:b7:4f:71:8b:34:97:68:86:
         a9:1a:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:53:53 2026 by rpki-client