Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
File:                     YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json)
Hash identifier:          b2UJxYiTljhkG801Cujxg5IjtfL6svL7Ujy531Kk1SM=
Subject key identifier:   39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Certificate issuer:       /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial:       15FB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
Manifest number:          15F3
Signing time:             Fri 04 Jul 2025 15:13:30 +0000
Manifest this update:     Fri 04 Jul 2025 15:13:30 +0000
Manifest next update:     Fri 04 Jul 2025 21:13:30 +0000
Files and hashes:         1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=)
                          2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=)
                          3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: u4QFnoltml9sqlFCKToVwCGC8ZYSLrrWUV8Va3Dhgq0=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 21:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5627 (0x15fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
        Validity
            Not Before: Jul  4 15:13:30 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5:
                    5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f:
                    f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90:
                    6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9:
                    14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc:
                    ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c:
                    3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2:
                    68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a:
                    3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e:
                    a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1:
                    23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54:
                    76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47:
                    5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8:
                    8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7:
                    b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59:
                    48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91:
                    7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3
            X509v3 Authority Key Identifier:
                keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:e4:8f:d2:42:24:f2:70:fb:50:00:09:3f:fd:4b:7d:c5:
         64:e4:2b:09:6e:6d:11:17:c5:7c:9e:23:a1:30:df:57:f6:2f:
         51:62:89:31:b5:fd:46:c4:9b:d2:f9:32:73:19:ae:15:cc:3d:
         3b:5f:87:a6:9a:c9:aa:c6:f7:f0:e8:58:f1:21:28:07:a7:42:
         e8:43:f7:db:9a:f9:86:c5:bf:7c:12:e6:df:76:e8:ac:74:ed:
         af:05:c8:e8:11:39:0c:39:55:ca:33:cc:9d:45:cd:54:cf:07:
         6a:e0:b8:3c:d5:81:b5:14:ed:9a:c4:f5:79:41:46:55:83:4f:
         a3:51:cc:6f:21:a2:42:b5:42:34:53:2b:89:52:3b:7c:e5:a9:
         5c:63:8c:96:ef:a9:39:b9:d0:11:a0:91:da:7f:56:cb:36:04:
         4c:59:7f:33:e3:48:09:97:c3:16:e3:2c:2d:81:78:2c:ac:5b:
         92:60:ac:fd:88:b7:e8:f4:34:13:e7:50:83:44:8e:57:3d:e3:
         f9:69:94:d5:ad:12:68:d0:fd:10:f8:30:e2:39:f9:56:f4:09:
         7f:1e:cc:25:f0:40:5b:37:78:72:0a:3e:a7:22:73:bd:dc:62:
         cb:e1:c0:73:c9:3d:11:28:47:50:9e:2a:5a:36:82:36:c4:89:
         c0:ac:14:53
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5
MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNTA3MDQx
NTEzMzBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2
OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf
3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW
h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn
LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR
24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX
UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa
jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw
MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ
UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAI5b5I/SQiTycPtQAAk//Ut9xWTkKwlubREXxXyeI6Ew31f2L1FiiTG1/UbE
m9L5MnMZrhXMPTtfh6aayarG9/DoWPEhKAenQuhD99ua+YbFv3wS5t926Kx07a8F
yOgROQw5VcozzJ1FzVTPB2rguDzVgbUU7ZrE9XlBRlWDT6NRzG8hokK1QjRTK4lS
O3zlqVxjjJbvqTm50BGgkdp/Vss2BExZfzPjSAmXwxbjLC2BeCysW5JgrP2It+j0
NBPnUINEjlc94/lplNWtEmjQ/RD4MOI5+Vb0CX8ezCXwQFs3eHIKPqcic73cYsvh
wHPJPREoR1CeKlo2gjbEicCsFFM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:44:07 2025 by rpki-client