Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
File:                     3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json)
Hash identifier:          qO75f0A9Gz0WDRA5idTW4fjg/GqO5fGl2jrzT5HnLA8=
Subject key identifier:   7F:DE:25:5E:EA:CD:39:F6:2F:18:18:C1:96:34:F6:96:1E:49:70:2C
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Certificate issuer:       /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial:       48688401DBA48D89F66ABD55C236E2E59D72BE7C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
Manifest number:          AD
Signing time:             Sun 11 Oct 2026 03:00:11 +0000
Manifest this update:     Sun 11 Oct 2026 02:55:11 +0000
Manifest next update:     Wed 14 Oct 2026 11:41:11 +0000
Files and hashes:         1: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=)
                          2: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=)
                          3: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=)
                          4: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: ue+5e8RhKt9nqsW0MbGoqhety6n7Z1RPpPhvR7Jcl5M=)
                          5: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 11:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:68:84:01:db:a4:8d:89:f6:6a:bd:55:c2:36:e2:e5:9d:72:be:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
        Validity
            Not Before: Oct 11 02:55:11 2026 GMT
            Not After : Oct 14 11:41:11 2026 GMT
        Subject: CN=7FDE255EEACD39F62F1818C19634F6961E49702C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:fa:61:28:9b:c9:90:30:2a:27:55:96:88:
                    2f:90:fc:aa:30:09:c7:26:48:8b:e1:8f:c3:e8:63:
                    cd:fb:3d:9d:4a:41:30:f7:14:49:5c:9f:a0:d7:6a:
                    24:a0:5b:24:9e:65:47:55:05:78:0b:bb:68:96:21:
                    2e:2f:d5:6e:4a:ee:5d:f9:b4:81:a7:56:53:cd:d4:
                    60:80:6d:8f:e0:25:0f:8f:eb:11:a1:3b:63:7a:b2:
                    9b:f6:cd:8b:cc:7f:b3:27:4a:1a:47:2f:21:3b:b1:
                    b5:94:29:8b:7c:c0:d2:58:50:4d:25:68:45:b1:ef:
                    38:73:3f:20:c3:a4:d2:1d:fd:1b:04:33:3f:7e:c4:
                    39:d8:a2:f2:62:5c:b0:23:a7:6d:17:47:dd:da:02:
                    e3:a0:44:1c:16:3e:a6:2f:89:57:46:c9:bf:4f:42:
                    4b:21:11:0e:0f:76:84:8f:af:cd:75:5b:85:66:bd:
                    cb:17:54:d9:60:06:9e:7a:4c:aa:73:1e:36:5f:f0:
                    ce:82:76:cd:8e:45:ef:5a:07:46:3c:56:46:0f:4a:
                    b8:2d:ff:52:f9:9f:87:e4:73:23:f7:fd:22:c9:20:
                    3d:28:7b:dc:e9:1f:de:79:56:78:ef:a9:b5:55:cd:
                    54:0d:70:1f:ac:05:a9:b9:1e:64:c9:e3:71:41:82:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:25:5E:EA:CD:39:F6:2F:18:18:C1:96:34:F6:96:1E:49:70:2C
            X509v3 Authority Key Identifier:
                keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:04:cc:02:20:0c:c1:55:13:38:b9:08:69:cf:23:9a:06:c6:
         8c:d3:08:7d:b8:55:2a:62:f9:84:12:c0:84:75:04:f3:c3:5f:
         b8:0d:2c:36:1e:d4:41:86:1e:15:e5:ef:5e:a7:1c:98:b5:ed:
         43:20:a2:7b:94:be:f5:b8:03:e8:c8:b7:dc:b5:df:cb:4d:ef:
         78:8d:23:ed:cd:0d:19:a3:78:fb:c2:19:bf:9b:4e:76:17:46:
         8d:b4:04:77:1c:ac:36:1f:65:47:8b:3b:d5:b8:cb:27:33:a6:
         f1:4a:e3:2c:9b:a6:70:20:e9:12:67:33:49:80:1f:54:5a:43:
         2d:6f:38:f3:bb:2f:be:9b:11:fd:47:73:f1:2d:b6:67:d8:48:
         51:82:4e:96:1b:43:57:17:70:de:32:7f:66:4e:5f:c2:50:17:
         54:95:63:b8:c3:3c:74:69:63:89:2a:07:5a:f2:b6:08:80:fe:
         7d:0e:cc:53:b0:fb:b1:87:71:16:e7:fa:f2:3c:cb:a8:2e:5d:
         5b:da:11:d5:65:d4:90:10:12:64:eb:c3:00:64:72:d3:50:38:
         33:f3:c1:73:9b:9f:9e:2e:34:52:7b:f4:19:67:22:a4:bb:8d:
         9b:ce:42:32:f2:e3:91:99:ab:9b:7e:b9:29:27:92:ef:67:57:
         d0:7e:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:40:14 2026 by rpki-client