Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
File:                     dTJNO48dXrpXcOZh7havJKdQVU8.mft (raw, json)
Hash identifier:          9YoXAS76sogR/Nz9vKkehxAw1SnSTBQlGRSSnQ7Y/7o=
Subject key identifier:   94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Certificate issuer:       /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial:       1674
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
Manifest number:          164C
Signing time:             Tue 22 Jul 2025 21:43:12 +0000
Manifest this update:     Tue 22 Jul 2025 21:43:12 +0000
Manifest next update:     Wed 23 Jul 2025 03:43:12 +0000
Files and hashes:         1: 3bsxnWCV-58Fyia2RYTKsIF6lFo.roa (hash: c7zdBem/3Lq6TajecrUZTcy1bz8HaqngV1A2w4kKyvM=)
                          2: L8mlWuT5Oirs_67BnixYQYhtQjU.roa (hash: WAiFkUe3CyNLvHA0AV3WlyYG2Ppuo0qYajkZDdq0e4U=)
                          3: QCpxlqVembFTmfeMtuBzBESm-JA.roa (hash: xcpaUEvMmYAW2SGTqp3FuvaFDPrTL4CzFzU/n/pTTVA=)
                          4: Y9YxvW3iT58rtGc6ivfvJgmka48.roa (hash: Eh3qcOOmxut46QWkOjUJrfVq1p60qw7crgGaN5mLY6I=)
                          5: _lPMw5cHZkoIFnabusH1RcrzR20.roa (hash: upEdPmE9Qtl5KKW2RwdPr5fdTQBE0wA5+a6QjYLc15w=)
                          6: cr8TvbLh_i9F31jMe_k0h6Vd55M.roa (hash: KcHEQ++e8iAnNBFubT9HaRVGUUJjwPQ16vpBji4fbK8=)
                          7: dTJNO48dXrpXcOZh7havJKdQVU8.crl (hash: uug0dyzFxsG3At3wlTW2oCs1MWRf+0zdgVF/ZnjDrMc=)
                          8: ggdx-mcu0shZmPEtYMJfufUw3pU.roa (hash: fBLKKRGSlN4WW1ZnUwP/Np/OXAhH2RF44bTFLA0hSLk=)
                          9: hXR5z3cQZ9bSvOTA0Gcls8hBMkA.roa (hash: vppM1xbYB/LB5Zq4bW2pZgSjjPSW++xM/rdtdOXSSUw=)
                          10: kV9AEml-csA__CqqpnYCMCAIuy0.roa (hash: A5yckUhA+xMi/p84UjQVEu846ClLWJ01fmT4T/D8rGo=)
                          11: rUSEJt21P-SZTDhUlqSLzFTJBk0.roa (hash: OayZzUQ1Cvz6t+sRSLYRoH1XJsCFaIDQtnghp25qVlo=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 03:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5748 (0x1674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
        Validity
            Not Before: Jul 22 21:43:12 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=942C98690AF1BD352C2B5C935162D816D0C74B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:6d:b7:ac:cf:e1:f3:f2:d7:14:b6:37:28:
                    a4:6b:6b:57:e4:32:72:8a:20:2b:43:46:42:a8:cc:
                    7a:04:9f:3e:d9:bd:ca:36:e9:22:2e:b4:a8:ac:63:
                    89:e6:1e:5c:47:c6:99:ae:d5:7b:c4:66:62:3a:02:
                    4a:a2:f4:a4:4e:8a:71:04:a0:de:50:08:81:97:08:
                    12:25:fc:d1:a0:ac:55:e6:13:01:bb:e4:5f:a8:ab:
                    3d:df:0b:96:9e:81:98:dd:ba:a1:58:8d:da:3e:74:
                    f1:7a:a8:eb:6e:8e:a6:df:21:1a:79:1c:80:e5:f5:
                    12:d1:d8:4a:02:fd:ba:3c:38:d1:1a:10:c1:96:f9:
                    95:07:be:70:a8:e8:96:d4:94:f2:17:19:44:18:a6:
                    fb:08:c9:b3:c2:f4:0b:48:85:23:fb:2b:aa:83:ba:
                    5d:b5:69:9c:16:21:00:7e:f5:40:bc:ec:f2:72:59:
                    a6:fb:ef:63:34:49:cf:32:0e:81:eb:8a:be:df:c0:
                    cc:3e:7d:ba:a8:99:86:c0:ec:80:25:b1:73:32:3d:
                    c4:15:79:23:c5:06:b0:7e:12:03:26:07:82:70:49:
                    c0:e9:90:30:57:84:96:4a:47:ac:09:dc:39:74:20:
                    17:bc:d4:93:2d:ee:3e:ef:b0:b0:92:ed:d5:33:0d:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
            X509v3 Authority Key Identifier:
                keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:d2:d2:cf:3f:05:88:0c:0d:89:14:fc:65:01:16:dd:d7:
         76:c5:e5:1a:8c:46:a4:96:9a:e2:15:85:d8:f0:ab:66:39:89:
         ac:6f:6d:1e:8a:cf:ce:1d:52:6c:08:07:1b:10:2f:1f:b2:7e:
         60:2e:97:e3:48:46:5a:1b:a7:1b:e9:f5:dd:26:7b:5b:f7:b7:
         b3:4b:68:82:15:be:56:33:01:35:7f:b2:4d:3b:8d:5f:33:48:
         6d:16:1e:22:41:09:51:7e:55:f8:ad:9c:cf:60:31:57:19:c5:
         f3:7c:b8:b5:f2:8e:27:0d:89:58:3c:a5:8b:3b:8b:28:47:63:
         f0:ac:08:02:19:bc:0a:41:d6:3c:be:3f:08:4d:d3:ff:00:a6:
         ff:a3:8e:5b:87:8c:19:45:5d:d5:e6:86:13:f3:d8:df:9c:b0:
         99:6a:d8:28:0c:83:20:5f:f4:10:6f:22:f4:db:fb:fa:e7:84:
         9f:e4:71:07:02:5a:ae:fe:1e:52:29:bd:18:53:c8:74:6d:75:
         2c:32:fe:b7:04:96:c7:2e:13:6b:f2:a8:d2:2d:4a:e8:46:dc:
         90:1a:38:b5:b0:35:cf:a9:e5:b6:0d:5d:39:b4:1b:7b:cf:97:
         0b:84:e5:cd:1b:73:fc:bb:78:b3:5f:9c:d6:3e:cf:ff:64:fa:
         24:21:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:48:57 2025 by rpki-client