Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
File:                     LznWwjiJNFGgbrNMUtd6vBiQa-A.mft (raw, json)
Hash identifier:          X9iBElk/OI/xZKh+E65qqoSz2NWySKey+wlt6YKisqU=
Subject key identifier:   2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Certificate issuer:       /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial:       2007
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
Manifest number:          1FFE
Signing time:             Sun 24 Aug 2025 07:06:07 +0000
Manifest this update:     Sun 24 Aug 2025 07:06:07 +0000
Manifest next update:     Sun 24 Aug 2025 13:06:07 +0000
Files and hashes:         1: LznWwjiJNFGgbrNMUtd6vBiQa-A.crl (hash: lg0Qe9qNrFnt7DiBNoHH0U60Nt2sdt7nR0+cV8QEINk=)
                          2: TFHfVA751cHS7jHgiJVox534jDc.roa (hash: 6uhr4XPAMsXDZRhUd2yY0O3csi02n5IkElZ1806zd3s=)
                          3: d7cwv4DUcWOjqOPvssJYW2Q6SzE.roa (hash: uDrdkDtV0+glPcCXYcNhF6UYlio1F2EoZKjIywgkxLA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8199 (0x2007)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
        Validity
            Not Before: Aug 24 07:06:07 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=2F4059F1B7DA8AB0E612967F7C4FD308DF777777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:ca:33:df:74:25:87:a5:16:88:35:68:4d:
                    40:cc:11:97:81:e4:7f:5a:b8:8f:59:bb:88:5d:8a:
                    a9:23:5b:ad:d6:41:67:10:ec:9c:dd:3b:83:52:15:
                    a0:d7:e2:6d:7e:48:e3:55:d1:fa:db:c7:a5:7c:82:
                    02:79:9f:e1:ef:35:3f:16:cd:5e:67:3f:16:b0:7e:
                    46:56:a0:53:04:d3:14:d2:ef:3f:e1:4d:35:d0:df:
                    04:b8:80:d0:74:88:d2:59:e2:33:97:42:57:c2:c5:
                    8f:df:da:13:2a:6a:34:08:4f:09:9c:0c:68:da:8f:
                    bd:d2:3e:79:02:e2:df:ee:a3:c1:37:e8:3a:f2:64:
                    1f:5b:f8:67:33:5a:03:f6:17:cd:c3:89:62:aa:a0:
                    4c:6a:66:e0:cf:cc:f0:b5:22:c6:80:e7:80:2f:62:
                    be:e2:72:3d:d4:5f:e9:99:f7:22:cf:8e:86:b1:70:
                    4c:00:08:e4:0a:6a:d1:90:31:cf:a2:f6:fb:d8:a1:
                    87:6a:a8:fa:17:02:7d:54:58:9e:a4:e7:dc:be:57:
                    a7:c3:e1:c7:eb:18:4c:7b:79:19:98:8f:d9:65:28:
                    58:2f:14:c3:93:ab:bb:73:95:ec:b8:05:94:8a:0d:
                    94:bf:07:df:a7:05:c6:1b:f8:0e:90:09:d7:09:34:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:59:F1:B7:DA:8A:B0:E6:12:96:7F:7C:4F:D3:08:DF:77:77:77
            X509v3 Authority Key Identifier:
                keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:2d:09:86:ae:c1:cf:0a:0a:31:a3:c0:9e:67:b7:e0:fa:
         82:8c:25:ff:b6:e4:20:be:01:59:74:be:1d:5f:b7:1a:a7:38:
         79:f5:b7:e3:ae:df:aa:65:35:a2:7b:11:a1:4d:94:5d:fe:6d:
         3a:1f:41:9a:c0:09:ca:d5:6e:d6:a7:74:21:ac:ab:c6:47:e6:
         63:4c:38:64:9f:9b:19:c3:69:25:f3:35:0b:ec:f3:a5:60:ad:
         74:8f:2b:b1:94:55:df:2c:38:9c:7f:e8:e6:78:f2:94:82:e4:
         65:e6:0a:f0:ee:5d:8b:84:5b:f1:1a:1a:7d:f7:0d:44:fc:90:
         1d:65:a9:f5:bd:c4:60:4b:ba:0b:d9:4a:10:98:ab:87:1e:29:
         3e:f2:ba:83:91:18:fb:9a:97:84:f6:19:97:88:a6:06:57:83:
         b8:e3:da:09:e3:e9:f6:fc:55:a0:a6:90:7a:f1:d7:fd:38:5b:
         95:bd:77:82:c7:34:a9:00:64:b8:7f:1b:66:8f:46:1b:7a:46:
         b6:8c:b8:8f:02:ef:ea:9c:08:ec:25:84:32:23:84:e5:a0:d2:
         43:bf:a8:d1:99:d7:75:df:60:0a:77:17:2b:80:cd:fe:3c:79:
         bd:a4:ce:f9:45:6e:e8:22:18:ac:e7:29:3a:26:91:d6:d1:5e:
         0c:9a:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:42:26 2025 by rpki-client