Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
File:                     A26A131411EAF25D645F4C22903078A445B073F7.mft (raw, json)
Hash identifier:          EHdtPhxNPp/PgWmBnG4HJ6nZp0naxuk6CXGENhKkP+c=
Subject key identifier:   4C:52:3D:96:E0:9C:3A:5F:82:3E:3E:59:97:3A:D3:DF:33:3D:19:06
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Certificate issuer:       /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial:       124562C5B43C7294A379DB8FFCD932D4BC20B2F4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
Manifest number:          D5
Signing time:             Mon 12 Oct 2026 21:32:23 +0000
Manifest this update:     Mon 12 Oct 2026 21:27:23 +0000
Manifest next update:     Fri 16 Oct 2026 05:02:23 +0000
Files and hashes:         1: 3135322e3130342e3232372e302f32342d3234203d3e2039393339.roa (hash: tK7ezxdNfJw3vpQOe60aF3bOavIsabAbgieKbkkT4xU=)
                          2: 3135322e3130342e3139322e302f31382d3138203d3e2039393339.roa (hash: tnDq4yiL8iHq+em2bzSb1AuqrAikab3yLQ8EL8C186k=)
                          3: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (hash: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0=)
                          4: 3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (hash: sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=)
                          5: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (hash: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=)
                          6: 3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (hash: bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=)
                          7: 3135322e3130342e3136382e302f32322d3232203d3e2039393339.roa (hash: bbuI9mTg692EuNsYr+lfVPVF7WIjp1uXcddstAbkdkU=)
                          8: A26A131411EAF25D645F4C22903078A445B073F7.crl (hash: wgB5PV7v24dZI6GaHoVTEIgdF+d9v0jb7Pe/wfE62Yk=)
                          9: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (hash: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=)
                          10: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (hash: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 10:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:45:62:c5:b4:3c:72:94:a3:79:db:8f:fc:d9:32:d4:bc:20:b2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
        Validity
            Not Before: Oct 12 21:27:23 2026 GMT
            Not After : Oct 16 05:02:23 2026 GMT
        Subject: CN=4C523D96E09C3A5F823E3E59973AD3DF333D1906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:d5:71:7a:c7:f6:ed:a3:1b:11:13:e2:7c:
                    e0:7e:1b:23:61:4e:64:0b:04:8a:eb:52:81:2b:fc:
                    05:fc:1d:7f:17:35:32:5c:23:58:30:2b:c1:3a:97:
                    31:e6:0e:ab:9d:0f:72:3c:57:d3:9f:07:06:9c:27:
                    f1:b6:f4:c9:90:32:06:66:9b:da:b6:d0:71:d6:1c:
                    0b:ba:56:0e:2b:d4:e2:24:5c:9b:db:00:d5:b1:39:
                    d5:87:9f:ca:3f:c9:a1:34:70:35:f3:1d:09:13:79:
                    13:78:c2:61:98:f7:9d:97:aa:c4:b9:3f:2c:cd:52:
                    38:5b:aa:c1:7e:0c:7c:ff:59:2e:38:5b:68:2e:58:
                    e0:ab:f5:7a:6f:b7:9c:77:e1:2c:86:97:06:1d:66:
                    7c:09:e5:10:26:e7:2e:0a:ab:01:32:2a:4f:d0:da:
                    06:c4:be:17:12:bd:6d:6b:c4:1e:58:57:e5:53:ac:
                    16:6a:56:e0:40:91:f3:36:85:a8:da:9d:0e:e2:61:
                    a1:d7:2d:4a:4a:aa:b1:44:d1:fc:49:69:50:cf:78:
                    4e:e4:a2:f8:6c:97:10:94:fd:b3:90:fc:73:25:be:
                    3f:84:6c:d1:8e:d8:72:df:a3:7a:33:ae:e9:2f:49:
                    a6:ec:ad:f4:0f:c4:fd:c6:8b:9c:41:19:21:32:4c:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:52:3D:96:E0:9C:3A:5F:82:3E:3E:59:97:3A:D3:DF:33:3D:19:06
            X509v3 Authority Key Identifier:
                keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:8e:8f:0f:75:51:27:26:91:30:aa:89:56:bc:82:cf:99:
         0f:dd:7d:80:5d:aa:c0:8e:ae:2b:51:60:d4:87:c1:85:ce:2e:
         25:a5:52:c0:01:ca:84:60:07:44:de:5a:ac:64:8e:c7:f3:0b:
         3c:c6:10:ac:50:be:7f:11:1f:18:2e:b2:3c:a1:20:41:e1:59:
         f0:63:c8:9a:32:00:7c:8f:2f:6c:5f:6a:63:9d:ad:6f:43:6a:
         34:cb:c4:28:33:a4:7b:62:41:ba:14:49:8a:c2:f9:ab:a8:16:
         24:a8:ed:3b:20:41:cd:07:d4:19:9a:db:cf:d5:9e:bb:d8:8f:
         9b:a4:82:86:42:51:be:8a:30:fb:36:6d:6a:20:a8:c9:2c:91:
         c2:4e:fb:2e:46:64:62:f3:ac:77:e7:42:a7:bc:41:04:00:81:
         84:08:38:06:0b:3e:8c:66:3c:ab:9e:f8:33:53:f2:cd:d5:00:
         0b:e7:6a:b6:48:5e:c2:8e:ed:dd:79:58:54:e1:28:76:5e:c3:
         6a:92:86:ad:02:95:54:c4:a9:8e:06:98:be:e3:8c:6d:c2:85:
         b3:d4:bc:4c:5a:26:8a:4b:06:b4:ed:18:d5:0c:5b:78:57:88:
         cb:25:44:71:ea:b7:07:54:23:27:05:29:15:2e:56:00:6d:1f:
         fa:06:a0:7d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEkVixbQ8cpSjeduP/Nky1LwgsvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0
NUIwNzNGNzAeFw0yNjEwMTIyMTI3MjNaFw0yNjEwMTYwNTAyMjNaMDMxMTAvBgNV
BAMTKDRDNTIzRDk2RTA5QzNBNUY4MjNFM0U1OTk3M0FEM0RGMzMzRDE5MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EdVxesf27aMbERPifOB+GyNh
TmQLBIrrUoEr/AX8HX8XNTJcI1gwK8E6lzHmDqudD3I8V9OfBwacJ/G29MmQMgZm
m9q20HHWHAu6Vg4r1OIkXJvbANWxOdWHn8o/yaE0cDXzHQkTeRN4wmGY952XqsS5
PyzNUjhbqsF+DHz/WS44W2guWOCr9Xpvt5x34SyGlwYdZnwJ5RAm5y4KqwEyKk/Q
2gbEvhcSvW1rxB5YV+VTrBZqVuBAkfM2hajanQ7iYaHXLUpKqrFE0fxJaVDPeE7k
ovhslxCU/bOQ/HMlvj+EbNGO2HLfo3ozrukvSabsrfQPxP3Gi5xBGSEyTKiDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTFI9luCcOl+CPj5ZlzrT3zM9GQYwHwYDVR0j
BBgwFoAUomoTFBHq8l1kX0wikDB4pEWwc/cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8wL0EyNkExMzE0MTFFQUYyNUQ2NDVGNEMyMjkwMzA3
OEE0NDVCMDczRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0NUIwNzNGNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc5MjM3MTUvMC9BMjZBMTMxNDExRUFG
MjVENjQ1RjRDMjI5MDMwNzhBNDQ1QjA3M0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm12Ojw91UScm
kTCqiVa8gs+ZD919gF2qwI6uK1Fg1IfBhc4uJaVSwAHKhGAHRN5arGSOx/MLPMYQ
rFC+fxEfGC6yPKEgQeFZ8GPImjIAfI8vbF9qY52tb0NqNMvEKDOke2JBuhRJisL5
q6gWJKjtOyBBzQfUGZrbz9Weu9iPm6SChkJRvoow+zZtaiCoySyRwk77LkZkYvOs
d+dCp7xBBACBhAg4Bgs+jGY8q574M1PyzdUAC+dqtkhewo7t3XlYVOEodl7DapKG
rQKVVMSpjgaYvuOMbcKFs9S8TFomiksGtO0Y1QxbeFeIyyVEceq3B1QjJwUpFS5W
AG0f+gagfQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:47:11 2026 by rpki-client