Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
File:                     sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft (raw, json)
Hash identifier:          5Fff6F9oJGhPNDOaFqiZU034+neXQ8nW6oRlw3UawtE=
Subject key identifier:   70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       1EA3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
Manifest number:          1E3A
Signing time:             Fri 04 Apr 2025 14:09:51 +0000
Manifest this update:     Fri 04 Apr 2025 14:09:51 +0000
Manifest next update:     Fri 04 Apr 2025 20:09:51 +0000
Files and hashes:         1: -L7vEu8Qby9eJFQ5qsgXWchtcKo.roa (hash: cGK7qZIVhkyhjMZdbrc6PCnQHsFs6FIUMydy8WBzKKQ=)
                          2: 0-8debMYACIqhZmiB4ti6NxvSqM.roa (hash: FmkghrQPl+lV3iUA+0tb1/YJ8rEo9UhfZExu0TuqynI=)
                          3: 18KS5iIQxL6lUlsauyk7X8rMfEw.roa (hash: rHsJlzHQ3gRwPJ3n/LUiFjs0ZOofpjpP4rVKXGr7eSM=)
                          4: 2U-xmiM3fTs14uJFVzwJ7mo9dIk.roa (hash: TFL0/XFUs/Zeo14zQeX9vTN9QCvF6RNed05s271HUWk=)
                          5: 2iLGREyjvYMTsYArH5iFAHb40mI.roa (hash: g3OqZtQKJQzJIzs2j19EukUSWefnq3PzOpRn7e2GmQw=)
                          6: 4hnlvNimMC0u2UvZzaWPlpefK7o.roa (hash: wRxqGnpNxRuhu9cnJcTokP52MTEQGk5Hv03x5UtiZTM=)
                          7: 6ipJzxKA1U16y6aMGaAa1My3PzY.roa (hash: 5GlYZG5mQrW32aR4b3Xj7oXd3fuJz4o+MluHBYSQoy0=)
                          8: 8Sbm3gvLpfFAjq1f5G-EkUJm5x0.roa (hash: tFK4LIAiVv5MvZSN+Yw3jEy20StnU1WwXVY9svVJg94=)
                          9: 8SmGRlTlCy-GVDJpaOrk6aoXFik.roa (hash: d1fKrULhXVx/Z/wCgerizdbxLkRHVzGhmQc90ooiOG0=)
                          10: 91yIr8jS3tx_nTe1mOc68x72X9s.roa (hash: wEsUnnRLk4QMpxLak1cZohYgStWIRhG6AJdqim6daVw=)
                          11: Azoc-91zXDLxvv3xBd-PKdLYdqU.roa (hash: nxU+CDKTYCIRA4+qrT4bkptlCZnZ/PUr7AkT/2uVV6E=)
                          12: C4ExfFzXWxPGshzIAqdKqUCvSzo.roa (hash: GCkCVHTJ7uNuKPQsyUDKfw5IVDHC25E8+kopHfPQs+M=)
                          13: EPXJoA7shebX2lGfOch7bZHO6lk.roa (hash: cGr/+/z1yDFpu/uYkIDUKk5o7DMlPDKt7liyHvo2i4Q=)
                          14: F1YojpyGroHDj-V-Sq4BhLxcaUA.roa (hash: 2x088bxvbb0H1FOh1zs7KjWTwW6M73EQfAEhWHxKNik=)
                          15: FYuk0Ds0QmHNOkfLN0pvrGgw5Ys.roa (hash: Mwln78oGjGRfYvKvP2vSDO8/k7xIEIsQaYxjjb4alPs=)
                          16: G67fVSUA4NhTInZ885whmQEAABY.roa (hash: 2roDn4OZsfgqBuTEvLxPP8NsYwhdykP59HVOCwJ7J/g=)
                          17: GqcEl62XUFMD7_gtRMFMXgJUeEI.roa (hash: 4PkJ4JaQfzCykwCuQ5fXMiVkbF7VntTkAvzuLsuyvKU=)
                          18: I_M2IfoLHa9FPH9Vn1iaPXGSWSI.roa (hash: nN99pmX4MaJoqu6cF3+hEPfPGRIYxHOaeFeCvKXOynM=)
                          19: JBUGl-gAfuITHIySj4ELTLHtcGA.roa (hash: /K7O0JlkPko7spNR75aoysjh0NCjRuYwA59RGdLMdCs=)
                          20: JN-orGmo4EUJ1IXLHWlEmGgSqQw.roa (hash: xipJcpVSlnpeHteK7tGV1IKhb4Wx/LG6+nhoJGKQuIE=)
                          21: J_h6IP62vVvib6_bpcHqGmc9gB0.roa (hash: AAi0CdtNJatToNyb4dGxz7EYQVGmPml1Eq97pePytts=)
                          22: JtKB1_isXD8v87cTzUnRL0snKIM.roa (hash: sF0Z6jv11DK/nHpkXBaHyU1Q22agEdMHomvBX7gTDsw=)
                          23: K2DI8AWS4h2Xor0pP8dUnI921v4.roa (hash: jiR1NlU3L4wBKvgBnsV9v8uesIb3SdPMAF42w1v/P+0=)
                          24: KofTQezOKO0tRcxGvhhrzeIHajI.roa (hash: 7czSbGHciu/s/5L42o3q2c0zkZWTCYUIkVFVzPR58PY=)
                          25: OHvPk4rBe6rYnxWR-IGvTNLW3v4.roa (hash: gjcgYWPQGBH0nCigLkahNCzNhcpgPyN7LF+qFsU1XMM=)
                          26: PAZ0llh8p6EuiK2qQClbgtHTfak.roa (hash: gqp0BgZsLEsKDpR2lDA0Qdjcah+9uqAtQR8mtb2ZaeQ=)
                          27: PyaDEUX3UYK68uji1PH0NrhGA4w.roa (hash: LP5Ie6DQh3pioVE+jmaE0LWv8jsfKfHNUPTnbydT0QE=)
                          28: Q1rsKoujdiHNqktENqeOXuHVNnM.roa (hash: 4D+MNZUweKH7/QuFOGyZbROpGIVNhE+FjniWK0U1Vq4=)
                          29: QQ4ztE3DX0FSCt7OQoSGoZ7BXb8.roa (hash: uN5rvQj7kOFrib6cf2SL8yjslUmuLTp0PZwHaYzW1f0=)
                          30: QoygC503zB9UhYQRK0yJAngXydE.roa (hash: KNez+K6+OCeScScg77MsRmHq7Z5IruqTKrpc4Ul+Pf0=)
                          31: T2rWZVXy8FJFbwCXKXapPtPZbDg.roa (hash: hlonYY2TB94S7FVVhD9ExFwUWK8n6dOKUWgXUoJv4bc=)
                          32: T70JM1dsEdyEagg2AiRA_INIVBQ.roa (hash: MYiNG1aRIKGA8T4VpvslE4c9z9Bl3IPVFFEV/sDOVYI=)
                          33: TnHJZsdWshdhGq548ZeGr3-nbgQ.roa (hash: h1vU5yCRFK/34vuUVReG68i9daCHROPqfEAYgOfwnxk=)
                          34: XNKoyejBViRIgL87tCmEKS9Uxok.roa (hash: IcGDguJle7febbgIlB/Wm+o1KMQy6OkBxwY3Xu5KP7o=)
                          35: Zy2_ijF9MhZWSCBZGdXW5qEx600.roa (hash: A3hsZLa/W8GcuMM4ZW9yurYGaKSxRAvk2xvJmdxH6J4=)
                          36: _MtzjNitONdbQbC41IfGV65z-oA.roa (hash: 2XunPCHAUDgtlW/+bFiHpO1/yazElI4wpcEp3CSOBM4=)
                          37: bCACi8IYyPR19jU-7QrGH4JnDNk.roa (hash: FUCJRFUzYz1fX9WYuE9LFGdGrjfMp5t6U9c8etdt6dc=)
                          38: eQrSBdvHvcAd3uNF5zItMbln6eM.roa (hash: u05z8aH+OJPUjgdWyhQdVbYLiuu1IsqL2sKsvq3njnU=)
                          39: hu7fPe6J5JUaliyOtZpOr3Jio1Y.roa (hash: zz8Yn1YAtZN8RT0omllVKHwfw+qxYpOJrOYEpGrFDX4=)
                          40: i-zEHrjuzVmCeKQacq_I_GrbIjM.roa (hash: 4jIAHYbM8h0eu8A1lHF4SP+ky/m/jEGn8s6FDvyDPxY=)
                          41: iKhz5lKomsG5jbv73xkgcfLdy0U.roa (hash: FYii//NbVRPfcseMrH0o9NKWHE/w0D1zp9HrGhWhTco=)
                          42: iuNLjW5aNVuPizS31DIcoCGoV2w.roa (hash: nQzkZCMfDtMP9rCWIskW7i99TB9f3yRw/FKCNkfUaQU=)
                          43: jPyeujDdJLCsm8RQz3fhynOJ3D0.roa (hash: XWwJH3zM4vubFmY1hasr3Tyn8xtTljuoY8sZoWagBkk=)
                          44: knG3g1GBFXMV_TCfnvLJ-72k9xI.roa (hash: 20FUjDsJjI6NZ5IC1Ulzav0e2+9fm/A9tSSH6goKlB0=)
                          45: lL2_JlGGHP8mykrPp-4SOEOh8Ao.roa (hash: RnyXtSj1vCGpe16tNcj85rS2jdK0T7jlPFkeCkcAPSA=)
                          46: qaQsj97RIgR0fO-aCsGf9j3F6Oc.roa (hash: VyklnB2JyWdtvARiWzho5oE3/MWhkSznyQaJBpqxO6E=)
                          47: roNbvnzntd4hFggqzvSOvD8GBo4.roa (hash: jnQeeDRNvGc6YPUue6KtT9CoBJ8jcHEkTD4xddJyMXs=)
                          48: sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl (hash: dx1vrFcd/jKDt8+lqLcujArYI1xMhWVc5ERMPvEISzE=)
                          49: skDXWyyzv0Lj1KvgNCBvi2FUFcw.roa (hash: HIzGV285TxasR5i0TQi5pKyFAroFWvKaLNRXopy1JKA=)
                          50: snqxTbhGTS8THOr07dDBizPw_e4.roa (hash: KOBxwK7MLoxz5FUlL+ZP387s61F045vkyPorLhr1u+8=)
                          51: soKJeUZnFtg31eeZcxL74xhwJv8.roa (hash: CS2Xi7Zo9aQimulKtItRKq+AbR0HAPc0pMn63HVFzgw=)
                          52: ugLBHAruDo-HLfV3MPDsSLfPrDQ.roa (hash: GgpbtMXk+DJHRtZr7NYYV2eywP2kSc/r1HHxxECEh40=)
                          53: vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa (hash: qeph6TaWsxJrjSvtHO865ouZdWx6dEi/4utM437idZ0=)
                          54: wyyhYmhsRlOedYv8Pp8ptWluHEs.roa (hash: SV/9o/A+bqrb9GxRr+S83K6dIdxMimol1vcqw9oOuYA=)
                          55: xmSdNw8vTvHxebUKi4UpDpx1CJs.roa (hash: A1QzeTfVykyXWtMtANpc8bho4vGpwZsb4Z9PkCGSZhE=)
                          56: xwiKXyfZT7rcFyVbef0xEvxGtIs.roa (hash: ch/yLdyqsy7u+6k7xBc39ccMtqVoHeMr4eHlczum8QU=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 20:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7843 (0x1ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Apr  4 14:09:51 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=709D2767D865E6BECCF1F640F30794F5EC0800ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:88:f8:9c:de:4a:a8:b4:7f:66:46:5e:4b:
                    ad:9e:67:25:04:f7:94:14:9d:82:ea:f5:4b:c3:30:
                    20:f7:b2:7e:31:92:f3:76:7d:c2:fe:c3:fc:9a:8f:
                    09:e1:14:68:7d:77:dc:dc:e0:5b:95:9f:ce:c3:ea:
                    51:89:1a:77:a5:2e:34:ba:41:6e:50:c8:0d:cb:07:
                    35:72:91:9d:8f:2a:06:1c:f7:7a:53:34:b9:db:f5:
                    b7:6d:cd:27:76:4a:93:89:d2:4d:25:45:76:36:15:
                    e4:01:39:bb:1a:0a:00:d2:1b:bd:e3:33:63:be:a1:
                    c5:e1:8b:1a:13:7c:80:ac:af:06:fd:59:f5:95:60:
                    04:d9:25:42:0a:20:0c:9d:92:9c:0b:82:c0:d6:22:
                    da:fb:c2:58:de:f3:07:f3:72:4b:7e:9c:81:a3:35:
                    8c:1b:e7:3a:74:0a:6e:60:a0:f6:17:03:07:6a:e6:
                    14:61:e9:4e:e6:bc:b9:c8:7f:55:58:d1:7f:b8:a4:
                    a2:53:d3:24:96:b7:a4:5f:8c:7b:af:99:12:b5:a4:
                    76:d5:92:46:93:a3:f5:9c:e6:15:5e:ef:89:7c:e3:
                    1a:6e:87:d9:d3:73:9f:52:c0:ae:e2:63:34:c5:a5:
                    14:91:0d:7e:77:83:97:87:74:93:21:82:5f:69:f6:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:28:4f:f8:c1:aa:7f:8e:16:69:d8:4d:7d:30:7a:41:c1:ca:
         21:62:93:c9:57:f4:51:e1:f2:ee:5c:61:d5:be:f8:0e:ff:6c:
         5f:3f:34:50:ef:43:07:0a:c3:bc:57:1f:99:4c:0a:84:30:23:
         40:56:7d:de:02:c1:0c:d5:49:e1:16:c4:2c:47:32:14:c8:d2:
         c6:ab:f9:d0:fb:72:d2:4c:10:98:5d:86:d0:be:e2:8c:cc:b1:
         bd:e2:8f:ab:3c:c1:bd:a0:f4:b5:31:87:08:76:1a:5e:3a:06:
         33:98:3f:50:70:b9:f1:fb:f3:92:71:30:10:fe:a4:10:7c:23:
         4d:ff:5c:80:39:d5:76:12:d2:45:f4:fa:89:e0:77:9f:5c:a9:
         b8:15:1e:c1:2d:e1:4a:91:bd:8a:7f:e0:eb:49:d5:60:a6:91:
         e5:36:5a:1e:6a:82:23:e8:2d:66:a8:bb:8f:b0:8b:52:45:6c:
         42:e7:cb:9e:a6:a8:45:19:69:e6:bf:b3:ea:40:45:cb:23:8e:
         27:ac:e5:05:c6:db:4b:d3:fe:ac:cb:7a:91:7f:b3:e8:95:f3:
         bb:11:69:21:38:2c:f9:a9:5e:27:7a:e1:63:1b:d4:c7:87:e0:
         a2:b8:87:0f:f6:84:05:7a:82:49:d2:9f:bb:ae:cd:d6:59:32:
         6d:4f:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:50 2025 by rpki-client