Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.mft
File:                     -3g5E2fIrZfRqcIaNTKFrV5ojRw.mft (raw, json)
Hash identifier:          Os4smiORo5kyH0rQk+iAF6CoR5KDVte4O1KxEpiygPw=
Subject key identifier:   42:02:F5:BE:89:7E:F9:F2:A7:97:A1:A6:D0:F6:61:A0:1D:08:D0:C9
Authority key identifier: FB:78:39:13:67:C8:AD:97:D1:A9:C2:1A:35:32:85:AD:5E:68:8D:1C
Certificate issuer:       /CN=FB78391367C8AD97D1A9C21A353285AD5E688D1C
Certificate serial:       17AE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-3g5E2fIrZfRqcIaNTKFrV5ojRw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.mft
Manifest number:          17AD
Signing time:             Wed 23 Jul 2025 09:12:17 +0000
Manifest this update:     Wed 23 Jul 2025 09:12:17 +0000
Manifest next update:     Wed 23 Jul 2025 15:12:17 +0000
Files and hashes:         1: -3g5E2fIrZfRqcIaNTKFrV5ojRw.crl (hash: ZABFDQltqCczuySElkYnm+aTfDULPjCiOt7v/+mFrL8=)
                          2: -IRe54bpv1-TQux1UjZl7eXOe8k.roa (hash: Wla7VV+qPSO8J9AN9n88AWkJuu/D49QzJW/C/8t30IQ=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-3g5E2fIrZfRqcIaNTKFrV5ojRw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 13:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6062 (0x17ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB78391367C8AD97D1A9C21A353285AD5E688D1C
        Validity
            Not Before: Jul 23 09:12:17 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=4202F5BE897EF9F2A797A1A6D0F661A01D08D0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:aa:3f:8d:88:71:a4:d3:cb:f5:44:bd:3d:
                    ac:7a:37:61:44:ba:34:1e:3d:23:2b:f6:78:07:e7:
                    56:11:e3:cd:24:ad:03:22:cc:7a:f0:6b:5f:98:eb:
                    2c:d6:41:e7:5c:14:02:aa:3f:81:2a:08:06:28:38:
                    f7:4e:79:f2:76:8f:fc:fd:c9:5c:d0:94:a0:28:2c:
                    27:c2:50:63:87:b6:2c:ba:5f:9f:cc:99:8e:a0:8a:
                    97:25:e2:12:03:11:95:dc:cb:c9:8a:51:d2:b2:70:
                    a4:d5:5a:6b:32:be:e6:46:bc:0e:fd:4a:69:9a:4a:
                    65:29:81:73:ec:5d:b0:9a:87:0c:c9:48:c1:20:03:
                    4b:5d:ba:4e:f1:7c:f3:0a:11:8a:31:e8:58:7b:e0:
                    58:41:35:90:38:af:98:42:f2:e6:12:cb:13:35:75:
                    61:96:e4:23:ce:05:9a:8f:68:6e:a3:72:de:df:21:
                    68:db:7b:64:b7:27:79:96:f9:f1:e8:8f:ae:52:a3:
                    d4:c8:8c:73:90:aa:ce:28:ec:c8:7b:9a:1b:08:31:
                    0c:c3:36:21:a2:a4:e5:38:5a:61:84:1a:2f:d0:60:
                    25:bb:6b:fd:81:46:ab:fd:f3:58:90:36:1d:ac:c8:
                    9e:06:9f:2c:17:44:bc:2f:de:c1:fe:fe:95:ea:77:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:F5:BE:89:7E:F9:F2:A7:97:A1:A6:D0:F6:61:A0:1D:08:D0:C9
            X509v3 Authority Key Identifier:
                keyid:FB:78:39:13:67:C8:AD:97:D1:A9:C2:1A:35:32:85:AD:5E:68:8D:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-3g5E2fIrZfRqcIaNTKFrV5ojRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2508/-3g5E2fIrZfRqcIaNTKFrV5ojRw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:04:88:95:21:fd:72:5b:ab:a7:89:3b:cc:82:53:fb:31:
         62:ec:c3:e1:41:31:44:fa:d3:1c:6e:ea:07:a5:72:a7:77:d1:
         8b:6c:db:4a:f2:5f:b9:ee:11:fe:47:15:9e:24:4b:4e:a8:c1:
         e4:65:25:ff:e9:bd:62:a8:06:84:96:8a:73:6d:bf:fb:08:2c:
         d1:a1:0a:aa:99:e2:43:1d:e0:b8:16:02:c0:b8:f7:ac:54:0e:
         bd:94:71:df:b4:b9:91:7f:e2:0b:8b:e9:96:33:98:12:79:19:
         25:d5:de:36:b9:8d:7a:a6:f4:b1:f7:cf:df:aa:04:47:84:11:
         68:e7:af:f9:7e:8d:70:a2:00:9c:ea:6e:c0:3a:3f:dd:39:05:
         62:f7:f1:ae:80:6a:98:d8:a4:d5:50:4f:c3:d6:bb:1f:cb:3b:
         21:0e:16:4d:d6:4c:c4:0d:ba:06:9c:01:90:ec:17:f5:29:f0:
         e7:83:e9:5b:99:84:1b:74:8c:d4:06:41:ab:25:50:45:7c:9d:
         28:90:45:17:90:5f:4c:99:4a:99:cd:a7:e8:29:6b:25:54:ae:
         63:1d:7c:c6:79:1d:5a:76:bb:97:b7:a8:0a:60:de:10:04:a2:
         38:7a:38:95:4a:c4:e7:f1:e2:ed:48:4e:cf:2f:fc:3f:b3:eb:
         2a:8d:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 10:55:07 2025 by rpki-client