Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File:                     Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier:          +rvijLeoojLcdBk+DAW4eEDBmkaThHywcZhwtnT/5cc=
Subject key identifier:   DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer:       /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial:       08D8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number:          08D6
Signing time:             Mon 20 Oct 2025 12:06:21 +0000
Manifest this update:     Mon 20 Oct 2025 12:06:21 +0000
Manifest next update:     Mon 20 Oct 2025 18:06:21 +0000
Files and hashes:         1: DIfl7bXQFvsh3gCOalGnbUgUcMk.roa (hash: +BdTskyWDVY72kL9VxG7J9DMW9izo6rXOBqj4uLMOeI=)
                          2: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: OgYKOTJJYf1zDeQHJPhCMTYmVonQHUPH+ma7hZSDqrA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 18:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
        Validity
            Not Before: Oct 20 12:06:21 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
                    ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
                    97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
                    a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
                    8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
                    3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
                    d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
                    2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
                    75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
                    45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
                    cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
                    fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
                    cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
                    8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
                    4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
                    f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
                    36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
            X509v3 Authority Key Identifier:
                keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:43:12:58:a4:45:14:e9:b0:34:40:54:e9:b6:bb:2f:bf:
         81:fc:60:93:53:de:de:d7:ea:1a:f4:63:c1:a2:0f:80:28:84:
         36:ad:db:34:ad:2c:2e:87:70:8c:a0:bf:83:c0:28:b5:20:ad:
         f8:2b:8c:5d:65:40:3f:dd:82:6d:4b:55:48:76:28:3a:ba:ac:
         13:b6:8f:83:5c:d4:4b:7c:cf:e4:1e:8e:bb:b9:fe:c2:cb:e2:
         35:c0:00:d8:fc:4b:26:35:c5:25:8f:66:9d:8f:de:1c:aa:3a:
         a9:ac:52:13:20:da:99:cf:c0:61:3a:f7:7c:86:ec:db:9f:5e:
         06:47:5c:a9:c0:16:a5:74:3b:ac:47:a9:58:3a:58:3a:b1:44:
         73:be:d1:dd:6a:11:de:4c:4f:ed:7a:bb:1e:31:2d:29:b8:e8:
         7c:68:79:a0:27:1d:ee:77:bb:ad:f4:d5:43:f8:81:bb:28:f7:
         eb:7a:21:c3:64:7d:8d:05:cf:f1:88:91:6f:57:db:fe:2a:bd:
         a4:c8:4b:08:0e:ab:7f:09:08:75:d3:c2:5a:36:a4:ef:03:11:
         1f:3c:1e:4e:9f:54:6c:6e:0c:b0:54:20:a0:dc:11:28:0d:4f:
         96:34:f6:eb:a3:5c:24:eb:c0:44:61:a9:70:a2:59:79:60:dc:
         86:75:e4:74
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVD
RjVCMjYyQTU2Rjg1MTM0QzhGRTk1RDY0REYwODlGMUI3NjJFNzAeFw0yNTEwMjAx
MjA2MjFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERCRDgwNEVDQjVCNUI3
QzZEMzVENzg2NDk1N0FCMzBDQjM3NTY5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdHpBN7H0RmnnonSL6i+7T5b4hRna2VdNmwgGFY5fq/Ma42M8w
nmrEAC3mmaAhn6u2ygPGVjJwEjIa24qOfJGPnh/I55vkx4ynaT+amn+8aYEvrQxP
lIZwYteLLvWIRvEZTwxJQAWdRy7TIrb0LLNMjl7ZGK+tgXUzCpyK3xaLmWx9yxkH
gEV5Myj1ti8QLNrZj4COBct5QIj91TorYmjrvIeI4/q/onbxOGMuwD/nsYLbUs9o
21YMknqVo5pp+ZBF+Yw/i4hhfkD6VVtXtXF81koFvcGFQrNpdG/Y5toU+/hBZz8d
G0y0vGYuiIVjujauvR+pA4uO0gjPNT2APFVhAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU29gE7LW1t8bTXXhklXqzDLN1aVkwHwYDVR0jBBgwFoAURc9bJipW+FE0yP6V
1k3wifG3YucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE4
Ny9SYzliSmlwVy1GRTB5UDZWMWszd2lmRzNZdWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JjOWJKaXBXLUZFMHlQNlYxazN3aWZHM1l1Yy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxODcvUmM5YkppcFctRkUw
eVA2VjFrM3dpZkczWXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADMLQxJYpEUU6bA0QFTptrsvv4H8YJNT3t7X6hr0Y8GiD4AohDat2zStLC6H
cIygv4PAKLUgrfgrjF1lQD/dgm1LVUh2KDq6rBO2j4Nc1Et8z+Qejru5/sLL4jXA
ANj8SyY1xSWPZp2P3hyqOqmsUhMg2pnPwGE693yG7NufXgZHXKnAFqV0O6xHqVg6
WDqxRHO+0d1qEd5MT+16ux4xLSm46HxoeaAnHe53u6301UP4gbso9+t6IcNkfY0F
z/GIkW9X2/4qvaTISwgOq38JCHXTwlo2pO8DER88Hk6fVGxuDLBUIKDcESgNT5Y0
9uujXCTrwERhqXCiWXlg3IZ15HQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:23:52 2025 by rpki-client