Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
File:                     25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json)
Hash identifier:          YyrF+2qRV9nUxYKAOhdyz6Rf/KnNqBSywh4mXZBoZ4M=
Subject key identifier:   75:02:D8:3D:3F:4C:E4:B4:C2:71:45:6C:1D:A1:66:08:D9:F9:55:70
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       6C0F81583628492C193979DB48E04CB2554C01BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
Manifest number:          0157
Signing time:             Sun 27 Sep 2026 14:00:02 +0000
Manifest this update:     Sun 27 Sep 2026 13:55:02 +0000
Manifest next update:     Wed 30 Sep 2026 17:16:02 +0000
Files and hashes:         1: 3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa (hash: 9lNsOYHlBt3jOOWXIqM/tEhd4rY9Jo/RkS+XO3kphW4=)
                          2: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=)
                          3: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=)
                          4: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=)
                          5: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=)
                          6: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=)
                          7: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=)
                          8: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=)
                          9: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=)
                          10: 3130332e3234382e3135322e302f32322d3232203d3e20313331353136.roa (hash: BEPDI9JjyhWXovz7qdW56OXAxRKMxAl3iJ8iWpozrBs=)
                          11: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: qc3m/KmbUoZpt917EpjdYeeEJ7GrsPyJ+0iVy3eKoHs=)
                          12: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=)
                          13: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=)
                          14: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: ns/4vnh7Qg/cBleicn0Ca/x5/P57QmT0GW6Or50M+cw=)
                          15: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=)
                          16: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=)
                          17: 323430373a323363303a3a2f34382d3438203d3e20313331353136.roa (hash: wcGi4BVAeDcAp/nOf2xkGsZ/mRWopZ/upq8jqtv04OM=)
                          18: 323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa (hash: HooXl0STL7+vA4y5loKAhiQ0ttCXS6FWqk90oFrQCFE=)
                          19: 3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (hash: zylkQSDdSSl6QtRcDZGJs7GJMA91i9cQsqPB36TdA1c=)
                          20: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=)
                          21: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=)
                          22: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=)
                          23: 3130332e3234382e3135322e302f32322d3232203d3e2034383337.roa (hash: tTioZtMfA6LFLhFJnqTItEnqrP0K5duf4eFzlBRimiI=)
                          24: 3130332e3234382e3135322e302f32342d3234203d3e20313331353136.roa (hash: cIq9MgWj4NH0uaLLMAKtqZDrNxWys9C1vRXMwCMHMP0=)
                          25: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=)
                          26: 3130332e3234382e3135342e302f32332d3233203d3e2034383337.roa (hash: bFUXV7r+rSsEUVYMUqo14Vw3PumvgJpm1BUWD3yTOkM=)
                          27: 3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa (hash: RjJHANjcAdvy65zfoA1JZXtiUKo0l8e+tJU+O7hVZOg=)
                          28: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (hash: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=)
                          29: 3130332e3234382e3135322e302f32342d3234203d3e2034383131.roa (hash: IA2hFi2CzsnZHIr72bt17O67Ue+IFnsgu8KG1Q9hGIw=)
                          30: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 17:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:81:58:36:28:49:2c:19:39:79:db:48:e0:4c:b2:55:4c:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Sep 27 13:55:02 2026 GMT
            Not After : Sep 30 17:16:02 2026 GMT
        Subject: CN=7502D83D3F4CE4B4C271456C1DA16608D9F95570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:e3:24:60:23:e3:60:43:02:83:8c:86:e5:
                    aa:94:81:e4:de:57:10:38:f6:91:fe:4c:de:ff:d5:
                    87:43:3a:77:b4:cb:fa:2d:89:da:1a:5c:66:c2:77:
                    11:25:27:a8:64:8c:f0:2f:77:28:2c:db:f8:bc:d3:
                    20:3f:b3:17:2b:0c:41:ac:bc:69:c1:24:ba:49:fe:
                    b6:4b:6b:be:d5:f1:fa:ad:53:38:d3:54:cf:0c:22:
                    33:03:96:70:05:65:ea:75:ba:ba:b1:1e:6f:37:96:
                    59:ed:e6:34:6f:25:34:82:2c:77:68:b1:b2:16:58:
                    92:ae:d1:bc:e4:ef:f5:c2:23:28:2a:29:ce:a4:05:
                    38:4a:09:08:1d:bd:ab:a5:1b:19:33:24:37:0d:b7:
                    da:25:7f:08:63:f0:5c:2a:8e:1d:45:96:cf:81:ee:
                    6a:02:7d:f3:ce:18:b2:39:96:e5:7e:75:da:19:d5:
                    df:e3:e1:26:33:33:02:d0:53:71:9f:3a:6d:b8:c7:
                    85:66:8f:2b:d3:d6:22:6f:37:68:e9:df:e7:5d:52:
                    1d:ad:bc:b6:fd:7d:b9:72:73:37:8c:68:da:53:1e:
                    72:9e:0e:3e:04:a8:d9:7f:ee:f1:9b:0f:e7:9a:0d:
                    1c:42:2e:27:e3:fb:1d:f4:0d:b8:43:dc:cf:54:47:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:02:D8:3D:3F:4C:E4:B4:C2:71:45:6C:1D:A1:66:08:D9:F9:55:70
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:a5:c4:d2:02:d4:ae:6a:13:66:36:8f:2d:be:a4:21:64:
         a5:9e:46:84:50:6d:36:13:55:08:65:06:11:bb:09:de:4e:df:
         13:d1:d4:c8:45:62:19:df:41:cf:eb:ae:ae:ae:8e:85:2d:58:
         dc:2a:36:81:67:d3:88:f3:58:ca:0a:85:94:4a:b9:f4:ef:30:
         be:f5:31:e9:2e:87:21:a7:88:f5:8a:b3:8b:de:63:7d:a0:0c:
         fb:d7:15:b5:be:d0:07:37:bf:b7:8c:06:5d:5f:9a:87:56:9c:
         c2:5c:58:f8:42:0c:3d:d6:8b:2f:f4:bd:bf:84:7e:99:46:1d:
         b8:90:d4:b8:fb:97:f0:25:d5:57:2a:59:bd:29:91:ee:b0:0c:
         0a:49:c8:ba:c1:1f:18:7f:c8:6b:df:cc:c5:be:9d:2a:c7:2c:
         b6:6f:e2:ab:88:82:e3:9d:b9:df:e6:5e:f1:f6:7f:16:42:1e:
         e5:28:4c:b6:ca:97:f6:39:86:73:cf:59:8d:ac:66:11:7a:97:
         80:d5:c7:fd:0f:ec:3e:22:1b:be:5e:be:a5:f2:56:e4:5d:af:
         78:66:ad:8e:fa:dd:14:76:4f:75:5e:ba:7b:42:bb:33:12:d7:
         42:fa:ba:e3:59:d1:6f:d7:4f:d3:66:99:0d:dd:24:82:b4:61:
         68:02:70:00
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbA+BWDYoSSwZOXnbSOBMslVMAbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC
QUQzQzQyRDAeFw0yNjA5MjcxMzU1MDJaFw0yNjA5MzAxNzE2MDJaMDMxMTAvBgNV
BAMTKDc1MDJEODNEM0Y0Q0U0QjRDMjcxNDU2QzFEQTE2NjA4RDlGOTU1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzQuMkYCPjYEMCg4yG5aqUgeTe
VxA49pH+TN7/1YdDOne0y/otidoaXGbCdxElJ6hkjPAvdygs2/i80yA/sxcrDEGs
vGnBJLpJ/rZLa77V8fqtUzjTVM8MIjMDlnAFZep1urqxHm83llnt5jRvJTSCLHdo
sbIWWJKu0bzk7/XCIygqKc6kBThKCQgdvaulGxkzJDcNt9olfwhj8Fwqjh1Fls+B
7moCffPOGLI5luV+ddoZ1d/j4SYzMwLQU3GfOm24x4VmjyvT1iJvN2jp3+ddUh2t
vLb9fblyczeMaNpTHnKeDj4EqNl/7vGbD+eaDRxCLifj+x30DbhD3M9URzIFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdQLYPT9M5LTCcUVsHaFmCNn5VXAwHwYDVR0j
BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG
MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2
MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1qlxNIC1K5q
E2Y2jy2+pCFkpZ5GhFBtNhNVCGUGEbsJ3k7fE9HUyEViGd9Bz+uurq6OhS1Y3Co2
gWfTiPNYygqFlEq59O8wvvUx6S6HIaeI9Yqzi95jfaAM+9cVtb7QBze/t4wGXV+a
h1acwlxY+EIMPdaLL/S9v4R+mUYduJDUuPuX8CXVVypZvSmR7rAMCknIusEfGH/I
a9/Mxb6dKscstm/iq4iC45253+Ze8fZ/FkIe5ShMtsqX9jmGc89ZjaxmEXqXgNXH
/Q/sPiIbvl6+pfJW5F2veGatjvrdFHZPdV66e0K7MxLXQvq641nRb9dP02aZDd0k
grRhaAJwAA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:53:17 2026 by rpki-client