Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
File:                     vevthkDLplk9qfmj3SKNOJEkWOo.mft (raw, json)
Hash identifier:          2X3SmfHaXnCDKX3OzBIDj/XKxG7a/2NX3AuB1gq6d0c=
Subject key identifier:   E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       8110
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
Manifest number:          543E
Signing time:             Sun 19 Oct 2025 22:08:57 +0000
Manifest this update:     Sun 19 Oct 2025 22:08:57 +0000
Manifest next update:     Mon 20 Oct 2025 04:08:57 +0000
Files and hashes:         1: 0WPOtftbuv6XlKwcQGdJTy2bHA0.roa (hash: 9tX1zuaC2IO1pFc6Vgg+czbS5gB1j28C2GhJnMBvnxc=)
                          2: 1E0n4ROZj5qS1mv3Psb2nYulmJ4.roa (hash: qhmNRZc3ESeMJG2OfLqEuQh9vQeNOyj9lfUcEXerXMg=)
                          3: 2ykehmXXhoverS1razLaK2Cw9oM.roa (hash: BSCO+LsBWKbxlEIZbqfXb6ME3jR325sZ52zJEe8kEzU=)
                          4: 3H3gaPCVIYoYKAvpRUdu2IZ2rQY.roa (hash: w9bDHp7UsgmhtfqUjhGkTJDkTqNN3EnOHWc7Ki+SSKg=)
                          5: 3JXnXy6rNiFmIZZQPMZ6BwgQVnk.roa (hash: PDtlpCGRSUE3QdQ/9iYK+EM9l9dOKEXrGFKB1zphtPY=)
                          6: 4DU-LJELvAAVgage-9De6WBxyfo.roa (hash: Cn37iZuJd5YlTecj+msAdD2+d++n3EN1QkDnelO3l5w=)
                          7: 6SxtQP3DrofnLHda_35CH9nSdtE.roa (hash: EltO10fLVmTZNw1eX5XH7pnxpe70KdZMzCibcxk66xc=)
                          8: 6oJCwq3huRhuptRwkUvV4orD08M.roa (hash: 29C14QBs1Lskn1hNbX+Sv5gQlo/YIeXBaAz7YsJVGj0=)
                          9: 6qdARHxgqLb_sc1enXb0ZCiDZZ0.roa (hash: 6bueCw5EAsSKsvnDFv0t/AIuvd95Q3wQuAvbWELMnQ4=)
                          10: 89256y-OFuaNZAVPS-Eol6VomIQ.roa (hash: bDvlmrdnFJhvCbcQbgqwKymZOt28MdyoXQRfTofiEoI=)
                          11: 8Y3ARoNlpif3hLe1po3sEvqXx5Y.roa (hash: a9fsM/bA5t/CqWUJprqpz3b1cg5JnQMeBptwjbcfIWc=)
                          12: 9TjiVGAygYB_IsTra7l53EO3Fyc.roa (hash: Wsy50zullNoYup/ZGDTq9u3Gqpmd4TW9gi+aGfYH9gU=)
                          13: B679Oh4-vdKsws-ydVTtHssgfzg.roa (hash: TFY4T4RqczNfz6PykeC1FmVSt0OH0ge/vOR3eWezFIg=)
                          14: DCzDScpGmfQbeVQCu7XBIwf5uEM.roa (hash: D6GVPWMEg+Je4T/sFiTPcW47ZzT8olDgepJm4uT3Ldg=)
                          15: E8k6HOUpJcgGSHBnvAJUc3RzsFQ.roa (hash: 9cwtJW5exCVRvI29LdcswfWX+79bTzBtMVJ0k2OU9AM=)
                          16: EDc1WzC-RYuvqgE1wf0J8IAEcKc.roa (hash: Cb0TWy+OJEN2x9k4JhcH8/M/N8ErAy6tjvZc/qnkgpk=)
                          17: F40yyzr-rK6Hpf7hTocwOAXCGBI.roa (hash: eLshj3lyqfRCYc5jfVqKe/soyYADrOvnc3G/RrfmhPQ=)
                          18: HENqmW8P5dcEQIfswIqgbjfICaE.roa (hash: 2uQSitIo9B3RR+cJnZzNJCmzNIkok2Z3w96MqLM6zRk=)
                          19: Hxoh_L710oEY2VOZAXmyZQvV0iw.roa (hash: TD/RqD8yyMI0So/HO9LjHV0xvt3Q5yA+8bIrub4KPuI=)
                          20: JmkbA9C4Ve43qq7vdxNTnHY2lSc.roa (hash: Eja4/Uz9ntt5ezaTERprjyG28TScDFjCB1FF4thwWH8=)
                          21: P6v82Fruxw-1SeCErOe5-P9Jp7Q.roa (hash: jColINLDU073VLMONpbTtK+frDdA9jiFVgjQwo0m394=)
                          22: Qw65VpafvAKV0-0DyJqQaA2TsdQ.roa (hash: 5myDnZrTfpBjIUV3HQvZ67XIaNP5FEgYF1UUAXGUYsE=)
                          23: RxEYtKW6qcUTYdvI3Y4qGmnDjDM.roa (hash: TgBe+m/zxo6tZkyJDyW/qdXzf7gm/P/eGDEVP6kWE9Y=)
                          24: S8k9PiQQfX4pGdZ3vCQc8Kx3G6I.roa (hash: U0eDChCQOiousTE3KapYoV736YuqG8Eqol2uOWGx9XQ=)
                          25: TEeTO1E3vBmhX1zAcKT7lm-3mWA.roa (hash: sMNyC/W8hJu8s6CyNVERsiOZIY/Zg8Rw4bKY1DVf/cA=)
                          26: VqiBBV-b3i7iECrnzuRfjpYxvio.roa (hash: FRFdxO6TuIzqcetERdcscnhSb+5o8PvLuaDd4kMnN+M=)
                          27: YthLqDjiD_roL8ZjQakwVYhdZm0.roa (hash: HP5cmcqgYRONvP3Vl8/il14eyKAI9IW9j+0yzYttN0s=)
                          28: dCgMf9XJsxgj5oMyIijm2CObJ-c.roa (hash: ArcxUILWhZ2km3Tezbi+tFxMRHHL9SOyKO00i3Dz3uk=)
                          29: dwtM8IvxpnRcEvVh7Cyv0u7G7C0.roa (hash: KyC8NCezfjeRtd9aDyBaeuIag6fWROOAIKe36HPDndA=)
                          30: fXvxjkxv2gWy_3cun_FTjfx5SQA.roa (hash: 0Pu3ybTislFO6gg9e4amXypT9qUdLSSk1iKedwaARe4=)
                          31: fn06Y1Bm-KeePI6AAJySEwvAaY0.roa (hash: zzYSr88nFNz+P5uXb8vBbXcZU/idj3/rIigYlBhSi2M=)
                          32: frp6Ym7FxvRqEtyXjUtzPAYZ2NU.roa (hash: QaaLY/xsJTYXx5yIvrGiyO28iEd1LXpGcFH+Sn8p/Us=)
                          33: hx0tyEUQsVMeThffkgpe2O2ceLU.roa (hash: IwIDtdr6+OYt3HasXBCZsocJppL1Kz9oaZymlBuju/0=)
                          34: iJXesGmzm64-koYvSYz2T1LIMAU.roa (hash: BbjYrEHzNP4BiAwUlEwGX70hp79k8GaPLLdWUC+wWYo=)
                          35: iZu8_KB3gM46XY3h2RL7rkNyfaY.roa (hash: UrX8KljlZ9ePQUhFlv6h0wf1lJULnQx2q87SMT/gBPs=)
                          36: q7CXJRH13TusfD8L3DVSCTfz70o.roa (hash: zCYFqQJBqwdMQBxIBX5zjVeFKyTawBzRbf6jYYpHu4I=)
                          37: sV_AAIAwAhYk14W3TQoWU0zjoRc.roa (hash: mNQa0Qkk+V2b2ChQfyzPFSWOCOpric0Xhzo7Dd1gO+E=)
                          38: smtX13zKoaBh5jvgSXUfMywsBtY.roa (hash: p3yEJdTvX2XbkA5KCvfLbfqTk4tncsnb6xiZc4/3eqI=)
                          39: vevthkDLplk9qfmj3SKNOJEkWOo.crl (hash: DHjHwpRt/u570nE89Sigpj2cH8YqcHZdJLn7DfboINw=)
                          40: x6lluZzLr_zG1Sq5du8HtQL3ioc.roa (hash: dVgzYhXlp+UzsNjIsjeBSuuyI+LTDovWntfnwui4bdQ=)
                          41: zpuaFHKL3UcXE0R08JLlXZyxl1M.roa (hash: zrteVbxUv9b4I/nDY1o/omsx6LH+udfXZkUYre6/YDc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 04:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33040 (0x8110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Oct 19 22:08:57 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E892465B0A4F35613D692B3B68536E8EC10E0BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d1:e8:f6:24:57:3c:ef:97:6d:d5:2b:6c:
                    a0:43:f7:62:68:e2:1a:b2:45:65:5e:23:9b:ef:ef:
                    6f:f8:4f:e5:a0:c5:16:77:ae:b9:40:6d:d2:ec:5d:
                    e8:22:56:4e:fb:f3:2c:d2:21:f5:4c:e2:31:de:06:
                    74:58:9c:d1:2c:39:10:7c:8a:23:b3:4d:7b:a7:fe:
                    aa:4a:f0:65:09:b9:5b:b2:09:d3:01:18:53:fc:2a:
                    f1:cf:04:ed:ed:09:eb:7a:94:4a:8f:e7:76:d8:7c:
                    74:e3:f8:2d:52:45:b0:57:fc:8f:5d:ed:fc:ab:86:
                    4c:1a:d4:e7:24:b7:00:86:7d:89:b0:2a:df:0b:ab:
                    21:f8:b4:42:82:cd:ed:c4:73:34:ee:9f:c9:84:2c:
                    3b:49:c6:b8:64:46:8f:82:9b:c8:80:ed:4f:05:7c:
                    d3:e0:23:00:7d:52:4b:26:12:68:09:26:58:58:70:
                    45:bf:d7:26:7d:05:7f:60:d7:79:78:7b:49:0f:ed:
                    42:71:86:b3:fe:5f:7b:e7:42:fa:6e:e8:76:8c:0c:
                    95:8b:59:fb:88:e9:4a:6a:f2:12:bb:78:82:36:ce:
                    e9:40:51:2f:09:2c:a5:c8:6c:2b:fe:61:5b:54:e4:
                    4a:c0:cd:b3:ac:60:48:f5:bd:2a:93:0a:fc:aa:ad:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:46:5B:0A:4F:35:61:3D:69:2B:3B:68:53:6E:8E:C1:0E:0B:B3
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:02:e9:5e:0e:01:48:a4:da:b0:d3:13:b3:d0:4d:fa:74:eb:
         31:ca:88:15:7e:1d:8b:05:46:e0:c5:94:c8:15:75:60:f0:ba:
         9f:8f:94:84:2a:bf:2a:d0:a2:8a:00:51:63:1a:21:8d:15:81:
         80:71:62:57:e9:0b:e4:85:46:ef:e1:67:b1:62:33:4e:6a:b7:
         be:d1:ec:c9:b1:c4:81:84:52:d7:26:53:87:bb:87:14:c5:d3:
         e0:82:75:cd:b5:fe:b6:96:8e:72:47:82:7d:01:ca:59:54:c6:
         9a:ff:8a:d3:8a:12:57:40:57:af:3e:dd:c7:a3:10:0f:57:17:
         a2:4e:9d:ff:b1:7f:0f:07:e3:62:40:24:ff:f2:8b:6b:ec:73:
         32:97:54:6c:30:8f:9f:ea:16:d9:f9:bb:fe:48:06:46:97:77:
         b9:b6:d8:36:f0:58:55:97:38:49:da:29:f2:f6:4d:2b:16:50:
         41:98:1a:e5:67:29:a7:9c:a8:01:c0:a9:c9:70:e6:9d:92:32:
         33:4c:a8:76:51:17:5a:8c:e0:05:d0:9f:02:b7:74:f0:60:95:
         14:00:43:31:0b:df:b6:47:ee:b1:57:fd:80:60:70:ca:b7:92:
         90:c7:76:4e:31:ea:44:11:38:c8:79:8f:43:b4:dd:13:5c:e1:
         14:7e:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----