Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
File:                     526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json)
Hash identifier:          nxDCUPTqul0fCxRwnsRzWs1t9TQcR0Y4I2f2zuYbwjM=
Subject key identifier:   3F:EE:D9:7F:00:D2:0E:81:32:FD:E0:AC:3D:F2:68:8A:10:36:31:93
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Certificate issuer:       /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial:       2C57224EA6D251F7B567ED14AC523836400EAC20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
Manifest number:          CA
Signing time:             Wed 07 Oct 2026 06:25:43 +0000
Manifest this update:     Wed 07 Oct 2026 06:20:43 +0000
Manifest next update:     Sat 10 Oct 2026 17:47:43 +0000
Files and hashes:         1: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=)
                          2: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=)
                          3: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=)
                          4: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=)
                          5: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=)
                          6: 3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa (hash: tuXYqVmE6ECVrR2hePGUfUEvZDi/5Mnaky6gOdgaZss=)
                          7: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=)
                          8: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=)
                          9: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=)
                          10: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: rJaqkFgDshwqpFv3S9ZhPs0Io6UMXlM4VjodKjnQcEI=)
                          11: 34332e3233392e3132302e302f32322d3232203d3e2034383337.roa (hash: +pyEGxsxJlmP0xnipvGwK3GS+xyc85YePa3acnQ6Uic=)
                          12: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:57:22:4e:a6:d2:51:f7:b5:67:ed:14:ac:52:38:36:40:0e:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
        Validity
            Not Before: Oct  7 06:20:43 2026 GMT
            Not After : Oct 10 17:47:43 2026 GMT
        Subject: CN=3FEED97F00D20E8132FDE0AC3DF2688A10363193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:b9:57:e5:45:b2:c7:54:d0:6b:e2:cc:76:
                    29:7a:a7:1d:9e:37:0c:85:d1:61:06:c4:61:2e:48:
                    76:8b:e9:20:4a:8e:2c:c4:50:d3:17:32:98:6a:cc:
                    4d:d3:7a:3d:29:3d:2d:9a:e2:d2:53:e4:4a:c5:30:
                    e5:84:2c:e1:7d:61:bc:31:76:da:2b:62:e1:57:22:
                    b4:9a:c9:c8:32:e1:42:54:47:36:e6:8c:fe:74:83:
                    51:67:3b:05:72:71:2b:3b:d4:6a:6a:3f:c1:1f:90:
                    37:98:04:c3:4b:73:c3:6c:c0:98:4c:b5:b7:ac:90:
                    85:c1:71:3e:e7:74:78:4b:ba:3c:55:d9:71:78:7a:
                    b6:83:af:d9:a8:05:47:30:1a:d0:01:09:85:d1:3c:
                    6c:cf:cc:36:92:4b:84:cb:c2:cd:54:a2:b8:43:b0:
                    7b:c5:6c:a9:2a:98:77:1e:e9:46:1e:77:f1:20:b6:
                    08:c1:95:b8:01:9c:e4:a8:5e:b9:2e:97:6f:17:ba:
                    cf:cf:d1:53:85:d2:7b:b3:c4:cc:2c:e8:17:f0:7a:
                    7e:1e:8d:46:59:b7:55:21:c5:bb:bd:88:00:b4:7a:
                    ed:8e:08:69:ae:e2:52:ae:13:27:38:ef:a9:99:1d:
                    72:d8:21:f7:3e:85:21:c2:0e:19:fa:13:b7:2b:78:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:D9:7F:00:D2:0E:81:32:FD:E0:AC:3D:F2:68:8A:10:36:31:93
            X509v3 Authority Key Identifier:
                keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:ed:c2:e4:f3:d1:ad:e2:0e:cf:b7:cb:3b:82:c4:12:a4:
         ac:cd:54:ef:b7:56:36:52:f9:d9:a5:05:ec:7c:58:1b:c0:a2:
         5c:7f:4f:72:5e:78:37:34:16:ca:5f:bf:e0:a8:8d:75:2a:da:
         79:5a:fe:03:7a:92:9f:4a:0b:02:1e:2e:ba:ae:42:33:5f:24:
         91:42:3a:ef:e5:b7:4a:f6:9a:c5:d2:1b:15:46:6d:f0:6d:3e:
         e4:9b:b2:f4:62:ee:74:3e:66:c7:8e:2f:06:52:4d:e1:49:e2:
         0b:fb:ea:23:57:20:e6:78:25:44:28:f9:41:d6:7e:0d:c9:17:
         5e:ce:ed:56:0a:ae:68:fd:d3:07:23:23:ae:b4:1e:25:3a:24:
         37:c3:ab:00:96:10:9e:46:9f:ca:eb:2c:91:b5:d4:8b:a0:78:
         e5:3a:c9:d2:fd:81:31:be:66:60:06:df:b7:31:be:e3:da:b6:
         b8:7d:c2:63:7a:a6:18:ba:19:ec:2f:20:8c:40:33:46:15:6f:
         39:b6:e3:5c:6d:36:a0:34:1e:13:85:56:7c:bf:6e:16:37:e0:
         5e:5a:1e:4b:85:aa:e9:5a:98:94:20:5f:d3:56:9d:d4:94:2d:
         02:38:a8:db:1b:58:7a:82:44:34:df:f1:6b:96:83:d1:a1:c2:
         12:81:9b:3b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULFciTqbSUfe1Z+0UrFI4NkAOrCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2
NTM3MTk4RjAeFw0yNjEwMDcwNjIwNDNaFw0yNjEwMTAxNzQ3NDNaMDMxMTAvBgNV
BAMTKDNGRUVEOTdGMDBEMjBFODEzMkZERTBBQzNERjI2ODhBMTAzNjMxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkblX5UWyx1TQa+LMdil6px2e
NwyF0WEGxGEuSHaL6SBKjizEUNMXMphqzE3Tej0pPS2a4tJT5ErFMOWELOF9Ybwx
dtorYuFXIrSaycgy4UJURzbmjP50g1FnOwVycSs71GpqP8EfkDeYBMNLc8NswJhM
tbeskIXBcT7ndHhLujxV2XF4eraDr9moBUcwGtABCYXRPGzPzDaSS4TLws1UorhD
sHvFbKkqmHce6UYed/EgtgjBlbgBnOSoXrkul28Xus/P0VOF0nuzxMws6Bfwen4e
jUZZt1Uhxbu9iAC0eu2OCGmu4lKuEyc476mZHXLYIfc+hSHCDhn6E7creMmtAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUP+7ZfwDSDoEy/eCsPfJoihA2MZMwHwYDVR0j
BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF
N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI1ODYxMTQvMC81MjYxOThDNkZFQzQ3
MjlFMkEwODIwOUNEQjA3RTdCRDY1MzcxOThGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9PtwuTz0a3i
Ds+3yzuCxBKkrM1U77dWNlL52aUF7HxYG8CiXH9Pcl54NzQWyl+/4KiNdSraeVr+
A3qSn0oLAh4uuq5CM18kkUI67+W3SvaaxdIbFUZt8G0+5Juy9GLudD5mx44vBlJN
4UniC/vqI1cg5nglRCj5QdZ+DckXXs7tVgquaP3TByMjrrQeJTokN8OrAJYQnkaf
yusskbXUi6B45TrJ0v2BMb5mYAbftzG+49q2uH3CY3qmGLoZ7C8gjEAzRhVvObbj
XG02oDQeE4VWfL9uFjfgXloeS4Wq6VqYlCBf01ad1JQtAjio2xtYeoJENN/xa5aD
0aHCEoGbOw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:15:51 2026 by rpki-client