Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
File:                     25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json)
Hash identifier:          3HNXCWP83QWe/Bq4ea5sIoeloMU4AmD4JsjU5FdPznE=
Subject key identifier:   9B:B6:B2:4C:72:53:7D:78:4D:80:01:BC:80:37:3F:95:B6:DF:DD:23
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       2A3F8FEE5E39A75B927E80BE7EEB5ED3ED3450A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
Manifest number:          015E
Signing time:             Tue 13 Oct 2026 16:58:11 +0000
Manifest this update:     Tue 13 Oct 2026 16:53:11 +0000
Manifest next update:     Sat 17 Oct 2026 01:51:11 +0000
Files and hashes:         1: 3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa (hash: 9lNsOYHlBt3jOOWXIqM/tEhd4rY9Jo/RkS+XO3kphW4=)
                          2: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=)
                          3: 3130332e3234382e3135322e302f32342d3234203d3e20313331353136.roa (hash: cIq9MgWj4NH0uaLLMAKtqZDrNxWys9C1vRXMwCMHMP0=)
                          4: 3130332e3234382e3135322e302f32342d3234203d3e2034383131.roa (hash: IA2hFi2CzsnZHIr72bt17O67Ue+IFnsgu8KG1Q9hGIw=)
                          5: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=)
                          6: 3130332e3234382e3135322e302f32322d3232203d3e20313331353136.roa (hash: BEPDI9JjyhWXovz7qdW56OXAxRKMxAl3iJ8iWpozrBs=)
                          7: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=)
                          8: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=)
                          9: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=)
                          10: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (hash: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=)
                          11: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=)
                          12: 3130332e3234382e3135342e302f32332d3233203d3e2034383337.roa (hash: bFUXV7r+rSsEUVYMUqo14Vw3PumvgJpm1BUWD3yTOkM=)
                          13: 3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa (hash: RjJHANjcAdvy65zfoA1JZXtiUKo0l8e+tJU+O7hVZOg=)
                          14: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=)
                          15: 3130332e3234382e3135322e302f32322d3232203d3e2034383337.roa (hash: tTioZtMfA6LFLhFJnqTItEnqrP0K5duf4eFzlBRimiI=)
                          16: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=)
                          17: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=)
                          18: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=)
                          19: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=)
                          20: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: 7OyEUyAzjMRpQOAi7Iq5Cs3eRVfNZN55oqvsHNKv4WE=)
                          21: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: qc3m/KmbUoZpt917EpjdYeeEJ7GrsPyJ+0iVy3eKoHs=)
                          22: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=)
                          23: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=)
                          24: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=)
                          25: 323430373a323363303a3a2f34382d3438203d3e20313331353136.roa (hash: wcGi4BVAeDcAp/nOf2xkGsZ/mRWopZ/upq8jqtv04OM=)
                          26: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=)
                          27: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=)
                          28: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=)
                          29: 323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa (hash: HooXl0STL7+vA4y5loKAhiQ0ttCXS6FWqk90oFrQCFE=)
                          30: 3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (hash: zylkQSDdSSl6QtRcDZGJs7GJMA91i9cQsqPB36TdA1c=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 01:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:8f:ee:5e:39:a7:5b:92:7e:80:be:7e:eb:5e:d3:ed:34:50:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Oct 13 16:53:11 2026 GMT
            Not After : Oct 17 01:51:11 2026 GMT
        Subject: CN=9BB6B24C72537D784D8001BC80373F95B6DFDD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:c8:6d:2b:d1:3d:7b:c8:ca:f8:4b:48:e3:
                    e2:9a:e0:dc:18:bf:df:fd:c9:b4:1f:d8:89:20:b7:
                    c5:8e:9d:61:26:f0:ed:a4:03:d9:a7:07:72:da:fe:
                    b7:d2:1b:5c:29:53:df:11:f9:6c:0b:13:6e:5b:fd:
                    03:be:fd:4c:d9:c9:50:b2:cf:56:f1:8e:07:e7:94:
                    a7:82:24:28:89:0f:14:b4:91:7b:26:72:c4:c0:02:
                    5a:f8:bd:bd:dc:e9:ce:ff:d4:46:f7:44:89:58:47:
                    10:1f:1b:52:bc:dc:23:47:a8:04:b3:b1:ea:a2:1e:
                    37:73:c5:5d:57:2e:64:0f:9d:1a:cd:99:b3:4f:13:
                    5b:ec:e3:f9:45:66:7d:0b:f8:54:47:f1:63:ba:31:
                    a6:85:4d:d2:1c:74:36:d9:be:8a:63:d3:72:5e:33:
                    92:86:7e:7f:2e:99:6d:b0:90:d3:ff:4e:f9:a9:79:
                    76:dc:de:84:e5:4a:78:e9:e6:88:ad:6b:8f:37:ae:
                    26:91:93:98:dc:05:79:b2:9a:af:32:e0:94:17:c4:
                    5a:7d:21:b6:12:91:4c:58:73:e5:cd:e1:8d:64:8b:
                    53:41:ad:a4:51:62:c2:36:19:83:1b:1f:37:a9:57:
                    d0:02:94:b6:46:19:10:d0:f0:d1:cc:da:b0:12:42:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B6:B2:4C:72:53:7D:78:4D:80:01:BC:80:37:3F:95:B6:DF:DD:23
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:8d:07:e7:37:60:f2:01:8c:f2:8e:38:52:8f:91:36:10:
         9d:ed:ab:e1:50:fa:c5:91:b3:76:d2:93:4d:98:0d:13:72:72:
         8f:69:be:2f:a0:ae:57:76:e4:67:8f:dd:75:ae:ab:fc:b1:70:
         96:09:f7:ef:4a:67:2a:62:79:38:be:4a:66:c7:d0:93:e2:ac:
         98:15:95:90:9b:29:7d:73:d3:34:02:1f:13:ac:f1:7a:4a:78:
         11:74:7f:1a:b1:d8:0a:b6:b8:5e:76:a9:17:2f:88:61:c9:00:
         63:fc:ea:e5:66:85:c7:9f:1c:b6:63:b8:4c:59:8c:43:75:a4:
         05:21:1f:91:5d:e7:a1:1f:e1:b9:58:98:b6:d6:40:89:96:64:
         46:a0:55:63:c8:73:4c:a9:de:36:d0:26:24:40:c0:e7:da:95:
         ca:b1:b2:3b:1a:b5:5d:f2:c1:6b:0a:bf:1d:90:57:f3:94:11:
         87:95:93:a1:02:39:20:65:98:a5:e9:f6:4e:bd:47:b1:37:55:
         44:5c:5b:88:11:70:79:58:07:86:f0:bc:e2:00:6c:39:45:db:
         6a:a9:ab:9c:86:51:21:69:4a:2a:57:a2:eb:37:01:20:2b:e5:
         d9:5b:6b:c8:67:8c:aa:b4:27:fd:5c:27:98:46:ee:30:6a:66:
         71:0c:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:00 2026 by rpki-client