Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File:                     40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier:          b/xApMv22Z60O1UeDu6Zwn/L4vKeLhMnttgG0BLL9LI=
Subject key identifier:   9E:04:98:49:A3:42:8A:5F:9A:A5:2E:92:04:A2:EC:77:55:E3:3A:C3
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       40B6869707DCAD1B0B9CB18F13C6049682019A39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number:          AC
Signing time:             Sun 11 Oct 2026 17:30:45 +0000
Manifest this update:     Sun 11 Oct 2026 17:25:45 +0000
Manifest next update:     Wed 14 Oct 2026 20:51:45 +0000
Files and hashes:         1: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
                          2: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
                          3: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
                          4: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
                          5: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
                          6: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
                          7: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
                          8: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
                          9: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
                          10: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
                          11: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
                          12: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
                          13: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
                          14: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
                          15: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
                          16: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
                          17: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
                          18: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
                          19: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
                          20: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
                          21: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
                          22: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
                          23: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
                          24: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
                          25: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: +2pbSGyjuWgSUtrd/yTz54XW6M4xt/IzKxUuA19Gf2U=)
                          26: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
                          27: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
                          28: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 20:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:86:97:07:dc:ad:1b:0b:9c:b1:8f:13:c6:04:96:82:01:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Oct 11 17:25:45 2026 GMT
            Not After : Oct 14 20:51:45 2026 GMT
        Subject: CN=9E049849A3428A5F9AA52E9204A2EC7755E33AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:d9:ec:b4:68:27:02:57:57:05:93:2d:bf:
                    31:10:82:ca:5b:43:18:bb:bf:9d:d0:3c:5f:77:7d:
                    29:e6:92:1e:e9:d7:2a:c2:72:00:0c:99:ff:40:3a:
                    6e:62:8e:c2:3a:a8:cf:1d:d1:2f:0c:c0:b9:5e:61:
                    28:52:97:c1:3c:14:2f:d7:a6:93:51:7d:d4:d5:e5:
                    1e:4c:21:e0:c7:27:3b:f9:f1:c6:c0:e7:df:0f:fb:
                    2b:03:c4:85:2b:e4:19:9d:a4:f1:e7:eb:2a:bb:72:
                    6d:da:29:38:e5:c1:09:44:09:6b:a9:ce:ca:e1:f6:
                    6e:79:56:a7:2b:c1:23:6f:cc:a0:4d:0d:b2:28:a0:
                    47:cd:ef:89:90:77:8d:51:1f:d0:27:5c:d1:4a:4b:
                    8c:85:49:35:8b:7e:55:b9:13:c1:98:68:a5:ec:08:
                    22:be:fc:10:3d:46:6d:ba:0e:1c:49:91:b0:80:f7:
                    8c:c4:5c:22:a3:90:13:c9:bd:86:10:63:83:cd:a9:
                    3e:b4:08:98:92:77:96:c4:6f:70:a1:be:4b:88:2e:
                    03:ed:53:f8:68:39:95:d1:0a:20:f6:85:25:ff:e5:
                    5c:06:b9:a0:d6:f7:12:d7:7b:21:b5:a7:dc:bc:4f:
                    88:1d:c1:07:a3:07:05:5d:d3:bb:68:45:7a:e9:74:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:04:98:49:A3:42:8A:5F:9A:A5:2E:92:04:A2:EC:77:55:E3:3A:C3
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:af:73:5d:de:2b:92:a8:91:62:01:4a:c6:2c:f8:79:47:
         57:5f:a9:d9:b7:10:c4:ac:92:a4:3a:01:c7:db:22:11:8d:03:
         29:ee:87:a7:2f:ea:28:79:ec:01:2d:ae:3d:fd:d4:59:13:e4:
         0a:f9:09:3c:ed:74:76:48:bc:57:79:be:61:08:c9:66:66:6a:
         ae:be:d0:69:25:25:e1:e5:78:d3:09:18:02:1d:53:e0:03:5d:
         80:5a:aa:44:f9:bc:a8:7b:c7:be:c0:eb:b5:48:be:5e:ce:92:
         ea:18:5f:18:a8:34:c8:26:c8:92:a4:50:cd:67:b0:a9:a6:77:
         cb:d6:2a:f6:f8:b7:52:03:a3:a9:9f:85:62:4b:99:aa:08:db:
         bf:c4:bb:56:87:fe:d8:9a:a8:8e:20:76:d8:48:ef:0d:4d:e3:
         14:a9:de:40:47:6a:d9:24:08:bf:39:89:a4:9a:ba:5d:f0:16:
         7a:63:9e:78:c6:e7:b5:fd:a1:b9:d1:0a:78:10:9c:9b:5f:65:
         b6:04:e3:10:84:8a:fc:f9:77:8c:f0:de:62:8a:0b:95:de:63:
         12:2d:d5:a6:b8:34:de:d0:2e:86:b7:ce:c5:19:24:8a:32:ce:
         9d:6d:22:d2:4d:74:63:0a:1d:26:0d:47:8c:f1:d9:d8:7f:73:
         0f:07:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:18:38 2026 by rpki-client