Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
File:                     cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft (raw, json)
Hash identifier:          VFxBvfTgrcc5qPduUbAj0T0uojIHeCe6tDEcmmkb9N0=
Subject key identifier:   05:60:1F:71:D0:96:7E:10:9D:DC:79:0E:17:26:4E:7D:85:BF:EF:56
Authority key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB
Certificate issuer:       /CN=715B46D9F995777FA3143263D54A6E676A906EAB
Certificate serial:       4FF5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
Manifest number:          4FE0
Signing time:             Wed 11 Jun 2025 02:41:56 +0000
Manifest this update:     Wed 11 Jun 2025 02:41:56 +0000
Manifest next update:     Wed 11 Jun 2025 08:41:56 +0000
Files and hashes:         1: 8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa (hash: StSo0cVjWN1em0gavnIIDJ9P278UpnjzSIZioUED/ys=)
                          2: Lz4k_p57itKi1f-iLXvudLF9AGo.roa (hash: vX6kPDDSWg02SEYFQkJIrAjDaDzUhGOgsptrXAQ9QyQ=)
                          3: MfqtZ3nWWXvGuHydwfjAPKninEk.roa (hash: RceomI2xn8/ICTIqp+3Tx1zm70K9f3U1+HhNKeiqpcA=)
                          4: cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl (hash: UDKR2HH+FoCZMHV9S8OuVcTIImzNYaLZdwjlTivgljA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 08:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20469 (0x4ff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715B46D9F995777FA3143263D54A6E676A906EAB
        Validity
            Not Before: Jun 11 02:41:56 2025 GMT
            Not After : Apr  9 06:41:15 2026 GMT
        Subject: CN=05601F71D0967E109DDC790E17264E7D85BFEF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:32:c9:60:1c:13:8f:08:df:cf:14:c7:e2:
                    82:28:a5:bb:c6:1f:07:fc:25:7b:55:72:3f:70:f8:
                    09:d4:0e:c2:28:6e:a3:74:7b:89:a3:ca:42:4f:e1:
                    57:02:4f:81:e4:9a:ef:c5:93:d0:af:00:21:b2:7e:
                    43:5d:18:7b:a7:b9:33:ef:99:3b:78:7d:2e:8a:0b:
                    08:ba:68:38:c8:bd:97:d1:32:1c:f4:cc:41:b2:4d:
                    36:35:92:20:6f:66:5e:18:8e:ea:4c:e1:f3:96:18:
                    a3:90:de:f9:25:7c:f3:61:4d:b9:51:b3:2b:c8:6f:
                    7d:fe:49:9c:0e:05:a3:0e:c2:e0:70:0f:0a:a3:d9:
                    02:cd:14:d5:5f:05:3b:a3:42:c7:84:05:90:84:64:
                    7f:04:6b:83:d0:60:8a:f6:97:44:72:e8:58:11:05:
                    6d:93:09:06:0f:ff:1f:25:fb:ea:ed:fe:39:b8:6a:
                    b3:bb:df:05:89:f3:b1:a0:f0:94:55:b2:7e:41:40:
                    02:e6:c1:90:00:5f:10:ca:c2:48:63:15:8c:2d:66:
                    90:cc:c5:42:7e:6b:dc:43:76:1f:9b:ab:25:8a:48:
                    72:2c:06:a5:d0:58:7e:ff:95:1a:4c:40:a3:cb:8e:
                    82:a0:a0:d8:15:fd:09:f4:79:6d:e1:fd:6d:b8:25:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:1F:71:D0:96:7E:10:9D:DC:79:0E:17:26:4E:7D:85:BF:EF:56
            X509v3 Authority Key Identifier:
                keyid:71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:9e:84:a4:e3:42:ad:24:84:8b:d2:5b:3b:12:3f:d7:b8:
         de:80:0d:32:fb:56:1e:45:31:5f:77:3a:53:7e:de:06:99:76:
         59:4e:4a:42:66:9a:0c:fd:a9:95:fd:a2:7a:b7:9a:20:30:24:
         dd:e5:43:04:ff:a9:b2:49:fa:5c:d5:f9:45:cb:55:24:00:71:
         17:63:e9:33:23:75:b5:6d:84:ea:11:5c:37:c5:2f:6f:9d:9e:
         29:00:32:a7:e3:e0:7f:40:3d:3a:ef:ac:83:36:f5:71:20:d9:
         82:eb:1a:c2:16:ee:a2:fb:2d:d8:f2:a1:77:eb:e9:ac:75:f1:
         96:52:54:84:36:c9:76:5d:1a:a9:a9:35:6e:af:ce:ee:18:bc:
         ce:3e:d4:32:d4:d5:cf:73:ed:73:99:2f:0f:0f:28:86:0a:35:
         70:f0:e3:0f:b6:ea:0f:22:10:c4:10:c6:64:ab:8d:d7:7d:67:
         92:78:60:e0:17:c9:76:2f:5c:e7:12:23:f2:aa:43:7d:e3:c7:
         ed:34:84:d6:1f:12:be:7d:ca:28:2d:bc:c8:8d:e7:dc:e0:77:
         16:c5:d9:e7:36:0a:6a:f8:4c:7d:80:43:cb:f5:d0:a8:c7:cc:
         1e:8e:ed:6f:6f:50:64:2c:25:34:3b:71:f6:76:ab:5f:2f:09:
         05:81:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:18:23 2025 by rpki-client