Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
File:                     LznWwjiJNFGgbrNMUtd6vBiQa-A.mft (raw, json)
Hash identifier:          8NlH/mLaNIhYwUpy8p0+wFBbvU0x+HRrYgWXYo30Rj4=
Subject key identifier:   2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Certificate issuer:       /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial:       200B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
Manifest number:          2002
Signing time:             Mon 25 Aug 2025 03:06:50 +0000
Manifest this update:     Mon 25 Aug 2025 03:06:49 +0000
Manifest next update:     Mon 25 Aug 2025 09:06:49 +0000
Files and hashes:         1: LznWwjiJNFGgbrNMUtd6vBiQa-A.crl (hash: a68GFv/k9z6UdkfsidmhY73nqQigX31IKYJn8PKLqlQ=)
                          2: TFHfVA751cHS7jHgiJVox534jDc.roa (hash: 6uhr4XPAMsXDZRhUd2yY0O3csi02n5IkElZ1806zd3s=)
                          3: d7cwv4DUcWOjqOPvssJYW2Q6SzE.roa (hash: uDrdkDtV0+glPcCXYcNhF6UYlio1F2EoZKjIywgkxLA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 09:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8203 (0x200b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
        Validity
            Not Before: Aug 25 03:06:49 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=2F4059F1B7DA8AB0E612967F7C4FD308DF777777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:ca:33:df:74:25:87:a5:16:88:35:68:4d:
                    40:cc:11:97:81:e4:7f:5a:b8:8f:59:bb:88:5d:8a:
                    a9:23:5b:ad:d6:41:67:10:ec:9c:dd:3b:83:52:15:
                    a0:d7:e2:6d:7e:48:e3:55:d1:fa:db:c7:a5:7c:82:
                    02:79:9f:e1:ef:35:3f:16:cd:5e:67:3f:16:b0:7e:
                    46:56:a0:53:04:d3:14:d2:ef:3f:e1:4d:35:d0:df:
                    04:b8:80:d0:74:88:d2:59:e2:33:97:42:57:c2:c5:
                    8f:df:da:13:2a:6a:34:08:4f:09:9c:0c:68:da:8f:
                    bd:d2:3e:79:02:e2:df:ee:a3:c1:37:e8:3a:f2:64:
                    1f:5b:f8:67:33:5a:03:f6:17:cd:c3:89:62:aa:a0:
                    4c:6a:66:e0:cf:cc:f0:b5:22:c6:80:e7:80:2f:62:
                    be:e2:72:3d:d4:5f:e9:99:f7:22:cf:8e:86:b1:70:
                    4c:00:08:e4:0a:6a:d1:90:31:cf:a2:f6:fb:d8:a1:
                    87:6a:a8:fa:17:02:7d:54:58:9e:a4:e7:dc:be:57:
                    a7:c3:e1:c7:eb:18:4c:7b:79:19:98:8f:d9:65:28:
                    58:2f:14:c3:93:ab:bb:73:95:ec:b8:05:94:8a:0d:
                    94:bf:07:df:a7:05:c6:1b:f8:0e:90:09:d7:09:34:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
            X509v3 Authority Key Identifier:
                keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a1:fb:5f:6d:21:8c:77:bc:2c:bd:fc:83:86:3c:1e:a6:ac:
         fb:f3:f8:b0:8f:0f:ac:00:b6:12:f0:02:84:84:46:61:c9:f5:
         38:40:70:b1:f9:32:8b:1e:63:9c:88:b4:78:dd:ef:46:84:39:
         1f:bc:a5:49:60:b0:7f:1c:d2:10:11:3b:3c:f2:9b:41:5d:ec:
         54:8a:e2:fa:e2:a2:48:e0:73:18:02:58:13:a9:f1:9b:0c:01:
         42:17:bf:59:da:57:b4:cb:a2:2a:55:51:65:4a:89:17:07:94:
         1f:34:63:a1:f6:df:87:ec:8f:02:f2:30:58:bd:96:04:1b:5c:
         b5:18:dc:29:04:35:ea:ee:43:c5:c5:d4:c9:76:71:ef:08:ab:
         24:91:b8:20:5a:43:00:1f:44:89:e3:bd:3d:82:0b:a7:37:d9:
         99:34:9a:2c:bc:fe:bb:89:7e:5f:0a:3c:6d:54:50:9b:23:cc:
         f7:99:02:89:7c:4d:7e:34:3d:ed:a9:f6:64:cb:57:45:7a:e0:
         86:4b:01:32:35:d1:ed:1e:81:27:97:c8:c3:48:42:e8:75:92:
         de:0f:4c:b2:a6:db:18:3a:64:01:77:47:56:28:37:c8:e4:d4:
         8a:20:62:50:be:4b:53:e5:fb:0f:8f:fe:d1:e9:50:c7:7d:b3:
         ba:5a:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 07:02:37 2025 by rpki-client