Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
File:                     BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft (raw, json)
Hash identifier:          3C8QdP4foI5HmDuQFXabjnkZlWrRne6utnlI5qfCQMg=
Subject key identifier:   CE:6A:F2:57:E2:29:D6:59:42:3B:8C:0E:5E:DD:D8:D0:93:DE:6B:08
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       399E847593ECE0294156328A4984D6C6E4B44F5C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 14:16:51 +0000
Manifest this update:     Sat 13 Jun 2026 14:11:51 +0000
Manifest next update:     Sun 14 Jun 2026 17:52:51 +0000
Files and hashes:         1: 3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (hash: zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=)
                          2: 3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (hash: J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=)
                          3: 3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (hash: yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=)
                          4: 3132322e3131352e3233322e302f32312d3231203d3e203233373234.roa (hash: yvHJeUNbBLjIA1uCIwuozmaBxyAk+8Qro/Cz4RL6dn8=)
                          5: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (hash: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=)
                          6: 3130362e332e31362e302f32302d3230203d3e203233373234.roa (hash: lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=)
                          7: 34352e3131342e39362e302f32322d3232203d3e203333363738.roa (hash: t0MWhrASdQRMLyBv3kSVEOD5luNKKNMMpjuRAyutYn4=)
                          8: 3130332e35342e34382e302f32322d3232203d3e203536323832.roa (hash: njKoSaWfi1fkQuUrNF9621tCcCYx26fOri8fTHRgZt0=)
                          9: 3130332e35342e35302e302f32332d3233203d3e203536323832.roa (hash: kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=)
                          10: 3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (hash: Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=)
                          11: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl (hash: UiRC//ZDh6DwhFWgZMro7FHhllAN4YiRfb1Zkuy0gys=)
                          12: 3130362e332e3139322e302f32302d3230203d3e203233373234.roa (hash: VwFeq3QNx8C1znAV513FBBjmORwGRi/MbWfhasR7FLc=)
                          13: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (hash: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=)
                          14: 3131342e3131352e302e302f31372d3137203d3e203233373234.roa (hash: GfJl+8k+x926XIyhzeOnyi2P7nB+2KG8yC4nA0cG9PA=)
                          15: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (hash: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9e:84:75:93:ec:e0:29:41:56:32:8a:49:84:d6:c6:e4:b4:4f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: Jun 13 14:11:51 2026 GMT
            Not After : Jun 14 17:52:51 2026 GMT
        Subject: CN=CE6AF257E229D659423B8C0E5EDDD8D093DE6B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:79:21:12:22:1f:2b:67:9d:d9:b6:3a:c7:
                    fa:60:9f:07:4d:a4:8a:df:a3:1d:ac:70:14:7c:9b:
                    7f:16:ca:f3:e3:41:6e:40:ec:0b:ea:69:96:4c:b8:
                    cb:0f:ec:11:70:db:4f:3b:15:8b:7b:db:8d:6b:db:
                    db:ae:b5:f0:5c:37:9e:2f:be:5d:ab:5e:21:75:35:
                    87:22:29:d6:1c:14:d3:51:bf:c8:58:65:05:da:8b:
                    12:4c:3d:dc:ac:68:68:51:b8:6a:27:2f:b2:73:12:
                    7b:63:de:e7:04:de:39:f0:6b:3b:2d:66:e8:85:da:
                    c7:08:e8:0a:a0:3e:2b:6a:35:3b:7a:22:80:02:fe:
                    f7:59:31:1d:3f:fc:35:a6:3e:75:e8:f5:21:0a:51:
                    6f:4f:cd:00:32:f9:81:a9:13:92:fd:f2:8b:67:0a:
                    fd:d6:53:28:0c:a0:77:15:da:ec:3a:fa:90:de:88:
                    40:b3:24:41:2d:28:ef:1c:c6:48:9d:91:90:48:bf:
                    4c:a8:a7:34:a3:d1:6f:b0:18:f0:51:33:fb:b8:69:
                    7f:ea:12:52:58:be:01:dd:6a:ae:20:a4:99:de:d0:
                    e2:f7:6b:39:fc:0e:e1:c9:a0:1f:a8:70:84:49:de:
                    fe:2b:d7:83:79:87:5b:fe:7b:62:29:f9:0c:f4:5f:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:F2:57:E2:29:D6:59:42:3B:8C:0E:5E:DD:D8:D0:93:DE:6B:08
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:ce:98:d5:f9:75:ba:2b:d7:1e:34:0c:b7:b6:7c:49:1f:
         37:a9:a0:1b:8b:7a:84:88:4b:43:fa:6d:03:21:46:6b:8d:22:
         5d:95:e8:ef:7c:2a:74:0f:74:8c:71:56:a0:07:fd:69:ae:95:
         6d:01:06:a3:6e:8b:05:b4:a7:72:0d:5e:f2:ed:72:68:5e:4b:
         1d:a4:e6:9c:e6:32:b9:d3:9b:0d:43:34:b5:1f:43:9c:08:b8:
         36:1d:06:02:22:ac:c1:7f:ff:05:13:ba:4c:9e:b6:18:f3:e9:
         22:9a:f5:96:64:91:00:b0:47:07:fb:d4:e8:de:a9:ca:e7:f3:
         8f:d9:c9:b0:1e:cd:76:47:d3:56:71:5a:cf:e1:a4:80:39:eb:
         8b:45:e0:f8:f1:23:e1:84:d0:fb:1a:91:25:ca:ae:3d:72:3e:
         df:26:5a:06:0d:9b:71:2a:a6:b2:62:1f:53:ab:f6:29:82:13:
         50:4d:c5:d1:18:c0:0b:7d:e4:84:b6:ab:1f:c4:38:00:7f:03:
         a9:7b:52:84:64:17:32:7c:5e:54:0a:e2:42:66:50:80:99:79:
         71:27:9c:fc:25:8b:e9:40:ba:9a:d2:98:3b:01:79:c0:3f:49:
         dd:2f:93:98:d4:31:e7:6d:5a:7b:1c:a6:78:e5:34:00:b4:ec:
         dc:92:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:32 2026 by rpki-client