Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
File:                     5253565A27C06C800009631402F5A6EE85C46456.mft (raw, json)
Hash identifier:          50IRA5ndKV/ZFvGca8IUy3l+wy5vgQ9OKQ4EU0NkzWs=
Subject key identifier:   74:9D:E3:E5:4C:E2:85:14:5D:37:99:2C:C3:EB:94:74:1C:86:A3:D6
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       1D286CCA7C99149B494B6A4DC26FB84146384204
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
Manifest number:          CB
Signing time:             Sat 26 Sep 2026 04:23:09 +0000
Manifest this update:     Sat 26 Sep 2026 04:18:09 +0000
Manifest next update:     Tue 29 Sep 2026 15:26:09 +0000
Files and hashes:         1: 323430313a396130303a31303a3a2f34382d3438203d3e203137343930.roa (hash: edNJO3tgJflXtE2pxSL0Jz5aQLDorgkCvrm65ROQZOk=)
                          2: 323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa (hash: 4WychwwCHETIc36fWKONOxE90QNLPpoRYeH8tjTiyTU=)
                          3: 36312e32382e3130382e302f32342d3234203d3e203137343930.roa (hash: fncXqOd2R+5Fk1BqsrlCFUki0Yj3TQ3y2SYjcEIQInU=)
                          4: 323430313a396130303a323a3a2f34382d3438203d3e203137343930.roa (hash: Qkd/TrB1FwnDEWoxFetfBBMJiWF07/UVufNNUX2AlUI=)
                          5: 323430313a396130303a383a3a2f34382d3438203d3e203137343930.roa (hash: O+HIIilvauQNGRRvPqVyRbUt8NY0XmsweQceHuXPx2M=)
                          6: 36312e32382e32322e302f32342d3234203d3e203137343930.roa (hash: c8dY+eezDL5du11b5N5DH68Kfu9k1THfO3vCNk1QYJU=)
                          7: 323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa (hash: K5GFCeRtG5eFgO77/YBKJJ0Xp/CpMEePW3+Bb4pst68=)
                          8: 323430313a396130303a633a3a2f34382d3438203d3e203137343930.roa (hash: cyhqHUx7FxY/klJoThrEUSrLal/Y8cWq0DRRV24hHu4=)
                          9: 323430313a396130303a3a2f34382d3438203d3e203137343930.roa (hash: a53DIz4343BtEOhzoSxy1mzLQYRgyq5r+Xpoi4EjhPQ=)
                          10: 323430313a396130303a31313a3a2f34382d3438203d3e203137343930.roa (hash: YguQcbTYy8e55MeGIKzFtjZfx/+QyV6fJL4ytZgPoYA=)
                          11: 323430313a396130303a313a3a2f34382d3438203d3e203137343930.roa (hash: D3KMVnUdw9HkJGR5TFgO2dGECQoKdicJBADCOLOm2Qc=)
                          12: 323430313a396130303a31333a3a2f34382d3438203d3e203137343930.roa (hash: fVuUEvzF5pDm8OuYpA7QZRE7ZotE/vijLFzoPVryJDs=)
                          13: 323430313a396130303a653a3a2f34382d3438203d3e203137343930.roa (hash: Ek3ZmzuUDDnv7JT5Gm0lw8VliEMF62nTyCu08SMjOdw=)
                          14: 323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa (hash: iTrXfILKpX9nf1Oxuo48nIwZr8cg+TV+XoxRLsRYWbg=)
                          15: 36312e32382e34392e302f32342d3234203d3e203137343930.roa (hash: 1qAL1pYEAu0DoDcmCnnrMvVFEKrQOKExgEB4+TQvGO4=)
                          16: 36312e32382e32302e302f32342d3234203d3e203137343930.roa (hash: gcRJWMv4hzquoRvAdEge38qqL47KkxPgYFvdxOJg3H0=)
                          17: 323430313a396130303a31323a3a2f34382d3438203d3e203137343930.roa (hash: roC3g9hg2xhQmTXIKdI7W62+OtngNo/raGTK6tOfDno=)
                          18: 323430313a396130303a333a3a2f34382d3438203d3e203137343930.roa (hash: 3irNDoSEmVkY64rNTXFtoc+fz4qnZMnxycpbcc3Dd5k=)
                          19: 323430313a396130303a623a3a2f34382d3438203d3e203137343930.roa (hash: g/ZKVIFc+IRf2mnYP7GmQBBIzQKwBB5hIWin4U8QLpk=)
                          20: 323430313a396130303a343a3a2f34382d3438203d3e203137343930.roa (hash: MzEiYbVf+tu2q5rOdMEkXZogss4MET1R4kV3RWA+5lw=)
                          21: 323430313a396130303a613a3a2f34382d3438203d3e203137343930.roa (hash: 3j0O2oIdg9zPFjb9gV7rPUE3nFTUDkhHET2qyQRev40=)
                          22: 5253565A27C06C800009631402F5A6EE85C46456.crl (hash: EfZ7hh+bAeaiQkdhL9cgX9ypbW6wpj2WkMx71awBQJk=)
                          23: 323430313a396130303a373a3a2f34382d3438203d3e203137343930.roa (hash: Ejzf6ECRZr8TMMbk9Fcen/daT4ZIbkgFcVAHvCYvUzY=)
                          24: 36312e32382e3131322e302f32302d3230203d3e203137363232.roa (hash: X4nDtq1yPQl3eS5Rz6w0DvCrEIe8LHuYUCYvWu2V2ZQ=)
                          25: 323430313a396130303a643a3a2f34382d3438203d3e203137343930.roa (hash: A9uaSWXoT79HYHnGjvmraGV5OJoWMLbKxHM7r3vs7Is=)
                          26: 323430313a396130303a663a3a2f34382d3438203d3e203137343930.roa (hash: /ojxASI/6dDTqH6qfVIU2lQSV/GcqOusYyU5C9w541I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:28:6c:ca:7c:99:14:9b:49:4b:6a:4d:c2:6f:b8:41:46:38:42:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: Sep 26 04:18:09 2026 GMT
            Not After : Sep 29 15:26:09 2026 GMT
        Subject: CN=749DE3E54CE285145D37992CC3EB94741C86A3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:df:27:11:b6:96:70:80:a6:ae:ea:ed:9d:35:
                    c6:b7:1e:c2:f9:0e:64:2b:29:bb:74:e4:29:bf:eb:
                    40:05:0f:85:8d:18:56:c1:94:05:cd:35:71:01:d8:
                    22:8c:84:5e:d3:0d:3a:94:7a:5f:17:92:c3:18:30:
                    01:e5:61:1e:03:70:41:ed:58:41:2f:7f:15:c7:2c:
                    8b:15:19:80:82:76:30:0a:ff:b2:4d:b2:41:e7:22:
                    20:b2:09:c4:18:b3:a5:2e:f6:ad:0c:a2:70:0f:e1:
                    0d:6b:1e:8c:9b:e2:03:f8:5f:6a:06:0e:73:76:28:
                    93:fd:80:39:9d:0c:2e:dd:0e:ad:7a:88:94:c1:2d:
                    10:a8:f5:e9:4a:6d:09:ea:31:ec:96:73:aa:aa:86:
                    e9:95:8c:fc:bf:32:04:6f:c3:30:be:8b:d0:5a:18:
                    f3:fc:85:94:53:7c:e7:cf:1f:56:0f:f8:76:44:d0:
                    4b:2e:80:0e:c0:ea:e5:c6:eb:ae:9c:8e:69:6e:68:
                    02:aa:19:de:9a:3e:e2:48:42:08:1d:e5:68:13:cc:
                    fa:1b:ed:d0:9c:cf:0a:42:8c:ee:a3:86:9d:2e:01:
                    ad:e6:5e:da:21:c5:d7:31:17:9e:63:8e:54:a0:cc:
                    f6:f6:6b:08:3b:fb:79:1f:b7:3b:32:bd:49:d5:13:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:E3:E5:4C:E2:85:14:5D:37:99:2C:C3:EB:94:74:1C:86:A3:D6
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:e2:c4:76:fe:6d:e6:48:db:23:13:4a:c0:67:2f:2e:b7:
         cb:31:99:da:2b:09:99:a0:10:1c:25:2a:ae:f3:00:bd:f5:2a:
         2a:74:6b:1c:07:e0:f3:cb:88:12:c4:15:6d:19:79:2b:cf:ea:
         2b:72:4c:6e:8a:fd:4f:d5:1a:43:c1:5b:80:f8:ae:f1:f0:25:
         f9:d6:a5:74:19:6b:99:07:0e:0f:70:af:78:90:2f:ed:05:38:
         0e:53:66:ad:35:9b:fc:5f:0d:0e:97:15:b7:f2:63:f2:8f:2e:
         3e:00:ca:85:ed:13:11:6a:4a:25:7b:cb:ff:54:5a:b0:26:d1:
         05:39:cf:89:b0:35:b1:33:0e:c5:b9:93:1d:6f:d0:d2:93:be:
         0d:ea:0c:b6:cf:00:20:db:56:d4:af:85:8c:84:86:c3:82:b2:
         66:03:8f:d7:d6:d8:06:89:45:3b:21:de:c0:7d:36:50:24:a7:
         95:b2:7c:f8:48:8f:64:55:fd:62:29:04:83:c8:e7:41:79:98:
         f8:6a:78:0e:6a:7e:58:56:58:8f:f1:82:de:c0:7b:35:a3:27:
         89:4f:c4:f0:2d:c5:b7:47:49:ba:ad:d3:f8:1a:73:13:86:6f:
         97:de:43:4a:33:2a:0f:c0:96:bf:85:09:41:62:60:60:19:43:
         2c:42:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:49:36 2026 by rpki-client