Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File:                     vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier:          r5chMyKGip3rI5A+DrtzQ7lC+o6J5Bvs6ZgGN3eOPLA=
Subject key identifier:   E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       8044
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number:          5372
Signing time:             Mon 08 Sep 2025 04:07:20 +0000
Manifest this update:     Mon 08 Sep 2025 04:07:20 +0000
Manifest next update:     Mon 08 Sep 2025 10:07:20 +0000
Files and hashes:         1: 0WPOtftbuv6XlKwcQGdJTy2bHA0.roa (hash: 9tX1zuaC2IO1pFc6Vgg+czbS5gB1j28C2GhJnMBvnxc=)
                          2: 1E0n4ROZj5qS1mv3Psb2nYulmJ4.roa (hash: qhmNRZc3ESeMJG2OfLqEuQh9vQeNOyj9lfUcEXerXMg=)
                          3: 2ykehmXXhoverS1razLaK2Cw9oM.roa (hash: BSCO+LsBWKbxlEIZbqfXb6ME3jR325sZ52zJEe8kEzU=)
                          4: 3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa (hash: w9bDHp7UsgmhtfqUjhGkTJDkTqNN3EnOHWc7Ki+SSKg=)
                          5: 3JXnXy6rNiFmIZZQPMZ6BwgQVnk.roa (hash: PDtlpCGRSUE3QdQ/9iYK+EM9l9dOKEXrGFKB1zphtPY=)
                          6: 4DU-LJELvAAVgage-9De6WBxyfo.roa (hash: Cn37iZuJd5YlTecj+msAdD2+d++n3EN1QkDnelO3l5w=)
                          7: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (hash: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc=)
                          8: 6oJCwq3huRhuptRwkUvV4orD08M.roa (hash: 29C14QBs1Lskn1hNbX+Sv5gQlo/YIeXBaAz7YsJVGj0=)
                          9: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (hash: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4=)
                          10: 89256y-OFuaNZAVPS-Eol6VomIQ.roa (hash: bDvlmrdnFJhvCbcQbgqwKymZOt28MdyoXQRfTofiEoI=)
                          11: 8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa (hash: a9fsM/bA5t/CqWUJprqpz3b1cg5JnQMeBptwjbcfIWc=)
                          12: 9TjiVGAygYB_IsTra7l53EO3Fyc.roa (hash: Wsy50zullNoYup/ZGDTq9u3Gqpmd4TW9gi+aGfYH9gU=)
                          13: B679Oh4-vdKsws-ydVTtHssgfzg.roa (hash: TFY4T4RqczNfz6PykeC1FmVSt0OH0ge/vOR3eWezFIg=)
                          14: DCzDScpGmfQbeVQCu7XBIwf5uEM.roa (hash: D6GVPWMEg+Je4T/sFiTPcW47ZzT8olDgepJm4uT3Ldg=)
                          15: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (hash: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM=)
                          16: EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa (hash: Cb0TWy+OJEN2x9k4JhcH8/M/N8ErAy6tjvZc/qnkgpk=)
                          17: F40yyzr-rK6Hpf7hTocwOAXCGBI.roa (hash: eLshj3lyqfRCYc5jfVqKe/soyYADrOvnc3G/RrfmhPQ=)
                          18: HENqmW8P5dcEQIfswIqgbjfICaE.roa (hash: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk=)
                          19: Hxoh_L710oEY2VOZAXmyZQvV0iw.roa (hash: TD/RqD8yyMI0So/HO9LjHV0xvt3Q5yA+8bIrub4KPuI=)
                          20: JmkbA9C4Ve43qq7vdxNTnHY2lSc.roa (hash: Eja4/Uz9ntt5ezaTERprjyG28TScDFjCB1FF4thwWH8=)
                          21: P6v82Fruxw-1SeCErOe5-P9Jp7Q.roa (hash: jColINLDU073VLMONpbTtK+frDdA9jiFVgjQwo0m394=)
                          22: Qw65VpafvAKV0-0DyJqQaA2TsdQ.roa (hash: 5myDnZrTfpBjIUV3HQvZ67XIaNP5FEgYF1UUAXGUYsE=)
                          23: RxEYtKW6qcUTYdvI3Y4qGmnDjDM.roa (hash: TgBe+m/zxo6tZkyJDyW/qdXzf7gm/P/eGDEVP6kWE9Y=)
                          24: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (hash: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ=)
                          25: TEeTO1E3vBmhX1zAcKT7lm-3mWA.roa (hash: sMNyC/W8hJu8s6CyNVERsiOZIY/Zg8Rw4bKY1DVf/cA=)
                          26: VqiBBV-b3i7iECrnzuRfjpYxvio.roa (hash: FRFdxO6TuIzqcetERdcscnhSb+5o8PvLuaDd4kMnN+M=)
                          27: YthLqDjiD_roL8ZjQakwVYhdZm0.roa (hash: HP5cmcqgYRONvP3Vl8/il14eyKAI9IW9j+0yzYttN0s=)
                          28: dCgMf9XJsxgj5oMyIijm2CObJ-c.roa (hash: ArcxUILWhZ2km3Tezbi+tFxMRHHL9SOyKO00i3Dz3uk=)
                          29: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (hash: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA=)
                          30: fXvxjkxv2gWy_3cun_FTjfx5SQA.roa (hash: 0Pu3ybTislFO6gg9e4amXypT9qUdLSSk1iKedwaARe4=)
                          31: fn06Y1Bm-KeePI6AAJySEwvAaY0.roa (hash: zzYSr88nFNz+P5uXb8vBbXcZU/idj3/rIigYlBhSi2M=)
                          32: frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa (hash: QaaLY/xsJTYXx5yIvrGiyO28iEd1LXpGcFH+Sn8p/Us=)
                          33: hx0tyEUQsVMeThffkgpe2O2ceLU.roa (hash: IwIDtdr6+OYt3HasXBCZsocJppL1Kz9oaZymlBuju/0=)
                          34: iJXesGmzm64-koYvSYz2T1LIMAU.roa (hash: BbjYrEHzNP4BiAwUlEwGX70hp79k8GaPLLdWUC+wWYo=)
                          35: iZu8_KB3gM46XY3h2RL7rkNyfaY.roa (hash: UrX8KljlZ9ePQUhFlv6h0wf1lJULnQx2q87SMT/gBPs=)
                          36: q7CXJRH13TusfD8L3DVSCTfz70o.roa (hash: zCYFqQJBqwdMQBxIBX5zjVeFKyTawBzRbf6jYYpHu4I=)
                          37: sV_AAIAwAhYk14W3TQoWU0zjoRc.roa (hash: mNQa0Qkk+V2b2ChQfyzPFSWOCOpric0Xhzo7Dd1gO+E=)
                          38: smtX13zKoaBh5jvgSXUfMywsBtY.roa (hash: p3yEJdTvX2XbkA5KCvfLbfqTk4tncsnb6xiZc4/3eqI=)
                          39: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: hYVCXowrP4mJpEDpJ+kHQsXODHPDDJ/WncptrasDIpU=)
                          40: x6lluZzLr_zG1Sq5du8HtQL3ioc.roa (hash: dVgzYhXlp+UzsNjIsjeBSuuyI+LTDovWntfnwui4bdQ=)
                          41: zpuaFHKL3UcXE0R08JLlXZyxl1M.roa (hash: zrteVbxUv9b4I/nDY1o/omsx6LH+udfXZkUYre6/YDc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Sep 2025 07:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32836 (0x8044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Sep  8 04:07:20 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
                    a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
                    6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
                    e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
                    74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
                    aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
                    f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
                    74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
                    4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
                    21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
                    3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
                    d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
                    45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
                    42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
                    95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
                    e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
                    4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:4a:36:d1:77:e0:c6:3d:58:1e:5b:a6:52:88:31:85:e7:
         6b:2d:6c:5c:c3:ca:7c:95:57:bf:01:70:e6:8f:22:d4:39:98:
         75:92:f1:b4:fa:7a:95:5a:cb:d8:ee:ec:31:a2:65:26:7d:6d:
         cc:5b:5d:5e:d9:15:53:ca:3f:51:06:54:f4:79:ca:81:59:35:
         aa:79:e9:0b:0c:79:0a:bb:e1:04:cf:39:8c:00:5c:a4:e8:a0:
         4c:a7:02:c7:2f:f2:fc:e0:5c:8f:7e:93:8a:9a:0a:f1:be:e0:
         7c:a3:3d:73:6f:37:67:8f:3e:b6:3a:ee:f2:8d:77:ff:7d:91:
         14:4d:f7:41:57:63:fa:8a:8a:79:ea:4c:7d:fe:af:cc:43:a9:
         5d:c7:95:4f:4e:62:f1:33:3d:89:b4:dc:f7:9d:08:32:15:8c:
         58:76:20:24:08:0d:04:c9:a4:e7:0e:12:1f:a7:60:c6:29:75:
         12:04:58:32:6a:9c:73:2f:21:b6:5b:05:a6:f2:61:5d:17:f1:
         cb:e9:23:4b:d3:3e:eb:83:be:30:c7:2f:98:de:7e:48:52:02:
         77:23:e5:38:b7:aa:21:6c:a1:78:71:5c:9b:4c:98:bc:64:07:
         ec:83:25:c3:a6:a3:7e:bf:2f:0e:a0:f7:72:64:69:dd:25:91:
         dd:48:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----