Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File:                     40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier:          jwcKzRRh7TaS1ZATk+sARHqHo4CtUf+PdKqiBWA8PFs=
Subject key identifier:   24:16:17:B0:EC:6C:9D:BE:08:25:AB:CA:D0:BC:63:F2:93:0A:8E:E2
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       50A2CEBF84B7B7BC3189F6EFDCE4AD75B7CD192F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number:          33
Signing time:             Sat 13 Jun 2026 08:41:35 +0000
Manifest this update:     Sat 13 Jun 2026 08:36:35 +0000
Manifest next update:     Sun 14 Jun 2026 11:53:35 +0000
Files and hashes:         1: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
                          2: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
                          3: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
                          4: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
                          5: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
                          6: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
                          7: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: pOMb1kmrbZtCVJAL2td+pTiVQNp7OJ0uvGXjtlUO72g=)
                          8: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
                          9: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
                          10: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
                          11: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
                          12: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
                          13: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
                          14: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
                          15: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
                          16: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
                          17: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
                          18: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
                          19: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
                          20: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
                          21: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
                          22: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a2:ce:bf:84:b7:b7:bc:31:89:f6:ef:dc:e4:ad:75:b7:cd:19:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Jun 13 08:36:35 2026 GMT
            Not After : Jun 14 11:53:35 2026 GMT
        Subject: CN=241617B0EC6C9DBE0825ABCAD0BC63F2930A8EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:0c:31:bb:9b:b8:9f:43:56:e5:e7:d4:85:
                    c3:da:24:86:ce:91:f4:ff:7f:5c:e6:ac:a4:ac:c3:
                    68:0d:7b:70:53:2e:0f:86:2c:e8:d5:1e:77:ae:d6:
                    67:6c:08:94:63:26:b5:06:6e:20:c9:cf:e6:0a:8c:
                    9b:a1:3d:00:3e:4e:d9:7e:1c:fd:5c:46:b3:54:a3:
                    0f:5d:9a:31:6d:b5:a4:48:10:c5:cd:a2:a1:88:cd:
                    64:72:d3:25:41:bf:09:2c:96:56:7d:21:e8:22:e0:
                    52:9b:87:8d:58:31:3f:26:1a:44:1c:a5:91:6b:29:
                    1a:45:d3:74:28:14:7f:f9:71:b7:fa:29:f2:0f:3b:
                    a6:95:17:ed:dd:6c:27:fb:14:7b:de:f1:ec:c6:77:
                    9b:c1:99:6f:b1:05:7d:79:e8:b9:9a:be:68:cb:1e:
                    15:73:5c:80:ed:ac:10:f2:74:e3:31:46:65:6d:40:
                    66:a7:92:b9:d4:8b:d3:94:eb:51:cb:86:90:d6:4a:
                    04:fe:db:74:d2:d3:51:82:38:01:be:6b:28:ba:1c:
                    a7:a7:c2:c1:55:2b:a6:cc:c3:08:9c:cb:eb:36:44:
                    eb:3b:1d:5b:37:9b:c3:bb:ea:ef:f4:e9:a6:db:cc:
                    2e:2f:be:3c:9f:c7:fb:63:e0:56:62:cd:63:47:5d:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:17:B0:EC:6C:9D:BE:08:25:AB:CA:D0:BC:63:F2:93:0A:8E:E2
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b2:2b:a5:ec:f2:93:6c:4d:41:ec:29:2d:81:d3:dc:93:57:
         d1:45:1a:55:30:2a:74:1f:cf:19:57:7e:5b:e2:03:46:2a:38:
         fc:21:6d:26:80:b3:44:be:c5:6b:25:1f:6f:47:e7:96:23:07:
         4a:0a:8d:39:50:36:65:b0:94:e9:50:ce:e8:3c:36:36:72:d8:
         43:d6:3a:a5:ee:79:bf:82:95:84:7d:48:ac:b2:2d:24:34:58:
         b3:13:f5:78:ac:a5:14:dd:2c:b3:db:6d:a6:6c:3e:38:72:f4:
         02:12:06:f1:0d:da:26:95:ac:9f:ee:0e:83:4d:41:9d:1b:13:
         68:b8:a8:64:24:3e:0c:7b:b1:f5:9b:4b:d0:2d:e4:98:9e:c1:
         33:a5:14:2d:c8:9c:96:b5:bf:21:29:1e:5c:0a:d8:ec:c6:dc:
         3d:e9:b2:80:3f:ae:68:d7:88:10:aa:e9:28:71:b8:92:f3:f2:
         bf:7d:e5:b5:e8:54:4f:09:9d:96:a2:02:88:f5:eb:aa:16:0d:
         41:f8:3d:59:70:8d:b6:2a:bf:58:28:b6:bf:c0:2c:2a:88:b7:
         9a:31:47:b4:3f:14:19:36:66:41:55:de:ea:e1:c7:02:8d:bd:
         52:2c:a2:9a:7f:b3:65:d3:87:89:44:08:7d:9c:f4:c2:38:3a:
         36:3b:84:93
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUUKLOv4S3t7wxifbv3OStdbfNGS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjA2MTMwODM2MzVaFw0yNjA2MTQxMTUzMzVaMDMxMTAvBgNV
BAMTKDI0MTYxN0IwRUM2QzlEQkUwODI1QUJDQUQwQkM2M0YyOTMwQThFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYAwxu5u4n0NW5efUhcPaJIbO
kfT/f1zmrKSsw2gNe3BTLg+GLOjVHneu1mdsCJRjJrUGbiDJz+YKjJuhPQA+Ttl+
HP1cRrNUow9dmjFttaRIEMXNoqGIzWRy0yVBvwksllZ9Iegi4FKbh41YMT8mGkQc
pZFrKRpF03QoFH/5cbf6KfIPO6aVF+3dbCf7FHve8ezGd5vBmW+xBX156LmavmjL
HhVzXIDtrBDydOMxRmVtQGankrnUi9OU61HLhpDWSgT+23TS01GCOAG+ayi6HKen
wsFVK6bMwwicy+s2ROs7HVs3m8O76u/06abbzC4vvjyfx/tj4FZizWNHXRQdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUJBYXsOxsnb4IJavK0Lxj8pMKjuIwHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY1MDMxNTU2NjA2MTk3OTMvMC80MEQ4NjcyNkRCMTRG
OUU1RTA2NjEwOTI4RkY2Qzc3MjI2RjE0ODc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALIrpezyk2xN
QewpLYHT3JNX0UUaVTAqdB/PGVd+W+IDRio4/CFtJoCzRL7FayUfb0fnliMHSgqN
OVA2ZbCU6VDO6Dw2NnLYQ9Y6pe55v4KVhH1IrLItJDRYsxP1eKylFN0ss9ttpmw+
OHL0AhIG8Q3aJpWsn+4Og01BnRsTaLioZCQ+DHux9ZtL0C3kmJ7BM6UULciclrW/
ISkeXArY7MbcPemygD+uaNeIEKrpKHG4kvPyv33ltehUTwmdlqICiPXrqhYNQfg9
WXCNtiq/WCi2v8AsKoi3mjFHtD8UGTZmQVXe6uHHAo29Uiyimn+zZdOHiUQIfZz0
wjg6NjuEkw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:17:23 2026 by rpki-client