Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
File:                     25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json)
Hash identifier:          o9mWZJt3FGsTYg4UBIs236b6OCzys6WFhe2qum4mLlQ=
Subject key identifier:   BD:2C:6A:F3:47:83:C4:52:DB:08:32:DA:8C:07:C6:D2:9E:89:F8:90
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       53EFB89C4639D4CE044747AB57D32F376EA973A3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
Manifest number:          B0
Signing time:             Wed 13 May 2026 10:41:03 +0000
Manifest this update:     Wed 13 May 2026 10:36:03 +0000
Manifest next update:     Thu 14 May 2026 11:54:03 +0000
Files and hashes:         1: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: 8ZraEktX3VtCYvzeeQU+MzLd5o1i1pDGkDAgGT9Uhp4=)
                          2: 323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa (hash: r7RuRxDknaWXm06Dy5betKYQwsDUO7ouhImWyjv2B6g=)
                          3: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=)
                          4: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=)
                          5: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=)
                          6: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=)
                          7: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=)
                          8: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: mlOkDk7g79wiDzVjie87spdlZEtFjcffbwPRmsUBJqc=)
                          9: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=)
                          10: 3130332e3234382e3135322e302f32322d3232203d3e20313331353136.roa (hash: BEPDI9JjyhWXovz7qdW56OXAxRKMxAl3iJ8iWpozrBs=)
                          11: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (hash: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=)
                          12: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=)
                          13: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=)
                          14: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=)
                          15: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=)
                          16: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=)
                          17: 3130332e3234382e3135322e302f32322d3232203d3e2034383337.roa (hash: tTioZtMfA6LFLhFJnqTItEnqrP0K5duf4eFzlBRimiI=)
                          18: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=)
                          19: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=)
                          20: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=)
                          21: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=)
                          22: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=)
                          23: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: ayxs+w4/JeX6PHaC3sPkLMgzAQlZveMnqBCO9/aNy4o=)
                          24: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:b8:9c:46:39:d4:ce:04:47:47:ab:57:d3:2f:37:6e:a9:73:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: May 13 10:36:03 2026 GMT
            Not After : May 14 11:54:03 2026 GMT
        Subject: CN=BD2C6AF34783C452DB0832DA8C07C6D29E89F890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:59:07:db:49:f7:f4:48:18:d9:8c:26:c5:3e:
                    ea:76:a3:ef:74:33:27:b5:00:5d:76:22:f2:5e:96:
                    95:7c:90:7d:54:35:76:9f:e5:ae:ac:bc:a5:84:4e:
                    63:bd:00:04:b2:95:45:6c:41:67:0a:87:37:8d:40:
                    a3:1c:b4:75:e4:cc:cb:f1:09:e3:fa:0c:83:76:9c:
                    34:40:5d:de:f9:bb:75:9e:d3:e2:40:08:4d:8a:2b:
                    de:d2:52:cb:bb:e7:24:a0:65:35:75:e0:3c:27:01:
                    e0:19:0c:24:4a:b9:7d:3f:21:9a:ff:d3:41:01:2c:
                    79:ff:f6:69:c4:9d:95:ae:c1:ab:77:9f:50:34:37:
                    65:28:0c:2c:96:ba:e7:f3:4d:09:c0:b9:08:4b:52:
                    fa:0f:92:66:b9:ab:9d:10:f0:67:aa:41:96:2a:15:
                    f9:a8:30:d5:b5:90:7f:9c:e3:5e:e6:9f:28:7b:5d:
                    e0:ab:a2:52:53:a2:50:48:56:70:eb:31:78:b2:59:
                    d7:ed:6e:67:77:9c:b1:63:fa:1d:fd:e2:b8:73:1d:
                    c4:a7:8f:4a:e8:64:f9:04:c9:11:87:f8:2f:c1:8f:
                    39:c3:7a:e7:e6:a5:9e:fb:86:5b:fb:37:b4:db:77:
                    2e:56:04:f7:84:eb:cf:85:f8:3a:6e:26:45:38:1a:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:6A:F3:47:83:C4:52:DB:08:32:DA:8C:07:C6:D2:9E:89:F8:90
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:91:ab:15:2e:ee:03:3b:aa:25:af:c9:36:4f:aa:89:62:57:
         25:cc:4c:33:24:9d:44:5b:5b:69:a5:66:74:dc:ee:fc:11:11:
         d6:c1:fe:16:4f:22:6f:88:dd:3c:bc:f9:b5:6d:e2:2c:9f:69:
         9e:aa:14:31:1c:05:41:a1:d9:b5:7e:fd:eb:70:3c:4a:89:7e:
         14:c1:f8:d8:62:cc:08:25:5b:28:15:de:a7:90:1d:b2:56:89:
         83:49:b9:32:ae:cf:4f:c8:14:60:45:fa:08:a6:7e:7d:d7:8d:
         a4:82:b9:b8:3b:d8:92:f9:03:79:13:c9:c4:cc:d3:ac:92:8e:
         07:5f:4d:a6:3a:a2:2f:40:fe:93:c0:3c:90:82:53:a4:42:33:
         79:68:11:d7:5d:5a:84:05:fe:2b:e4:15:5f:d7:cb:52:e1:03:
         d1:b2:04:ff:b3:ff:2e:36:a4:4e:6a:8e:71:b0:c5:92:0b:b2:
         85:5e:7e:ae:b2:3d:f2:74:e1:dd:d4:06:fc:46:56:e2:0b:d3:
         a8:05:1c:be:50:27:ff:b9:a3:36:c8:2c:96:d6:9b:8c:3a:e8:
         e2:82:71:15:73:52:c1:44:00:27:89:ca:9b:d6:13:d6:51:76:
         74:ab:ed:73:66:5b:b4:38:97:71:4f:86:80:de:12:c5:38:93:
         8f:76:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:28 2026 by rpki-client