Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft
File:                     9wKTXwL8G4EpfR_7THjOC6HUN4U.mft (raw, json)
Hash identifier:          zEG/35C/R5l6TLxLoLDK+lE6omPE4n2fkJbFe+xNpD0=
Subject key identifier:   6A:F3:9F:0B:50:F7:37:39:D6:61:B0:D9:B2:A7:43:FA:50:36:46:6E
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Certificate issuer:       /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial:       013B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft
Manifest number:          011D
Signing time:             Fri 04 Jul 2025 17:42:32 +0000
Manifest this update:     Fri 04 Jul 2025 17:42:32 +0000
Manifest next update:     Fri 04 Jul 2025 23:42:32 +0000
Files and hashes:         1: -RT9_s7XipnAEtc_PGENVNWLhag.roa (hash: xThuu6PLWTZLgKv+YloFBDddIoNRfNrmrpAXxGUcj0E=)
                          2: 33jTY9V1hCz_7lxqPnYnrqtmbww.roa (hash: fRw/pTWMsv++tZnPZQ39YWgs+P4gBTu4GB1RGlc19Lg=)
                          3: 5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa (hash: Bw6paMLUGTTV4wIozFR3e8HZ0/940ntVMZSO2KpjdQ8=)
                          4: 7KjtMRiXHyejdwC4m_l3xxME7YA.roa (hash: J4G53iQxuWCQ1sz4afVxQcjY8m/C9rCP/3J2H5H87hc=)
                          5: 9oETNch_gAv-6wYdAez9jmFoFig.roa (hash: GgwdWkb0fGfgHm3tVJPTd6CmGXO7mmzdMa/kySWrGZ0=)
                          6: 9wKTXwL8G4EpfR_7THjOC6HUN4U.crl (hash: Zjz+OxhjPzk88zkG9tN/aoBENYskMa3wT+oQ/FAAlRg=)
                          7: Ced57QBZLneKH9Kze-kEGKUHnrg.roa (hash: P40Nj2HSIYRo1aLg77y+jVkzV7URrD4SSkj+FYna/VY=)
                          8: JCPxJaIP25OQnQkvU9frtKZu6UQ.roa (hash: dgbW3NcCpIEoJIuVH/YLpRC8FwUYd50X50c5rchVDkM=)
                          9: JKHutdgWtZwyrNAD0C2H17GlJeE.roa (hash: t4LS0jm4WzTaHianm5HBFpaSNV7SKuXZDOjEE34Fjr4=)
                          10: JLvVqKyhKiQwA2sIkm4lyJi5K1I.roa (hash: 31DDEya2UgXoHm0thBRJl5lsRqu0mK0Bqhcl5ZpC8ZE=)
                          11: LBwQ983uDABKiVnLKbPpMnq0EQg.roa (hash: q7Fu/qq9St0MFjHq1jhnV/IXNi5kFRjUEwXWDzRRfuU=)
                          12: MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa (hash: wRMrWvIsPaUSA6+/W/favb7ZoameBVvcj7FBgC1WPi4=)
                          13: S_MaBuVvXeEz8EUEzsZ2VLaSYeM.roa (hash: b9Pj/98DyH1i/9rmPav1GV/LK/101bgqHUXbqdTkwEw=)
                          14: XcDhX-g_ymccbjzil3jDpLMMYhA.roa (hash: Mt1oz2AlMxW6QnWmV1+7L1KKuLz5mwaDu6KAufSobKA=)
                          15: YIXqtbW8ewV9dttzBwmjE_0RHFo.roa (hash: Jvl6RKBM/xdBnXX2h3cAZ41hDAScTWkVStQjzxrcuPo=)
                          16: YmRp3pRqbaCUis4LPuGV2ubaWO8.roa (hash: V2Ttc+LoymI/7lrTfQScRY9jXY85pxgTEpV1RqCXy3M=)
                          17: _aD38F37GLS0Z0g82klrN-dGPAU.roa (hash: cwotvzVa++xWVuvXaHhjkF+iE4R3zb5XhSpCZ/5sPjg=)
                          18: eCLskOeLuWaHHsqV9qy-n9QqCI8.roa (hash: TMG8j23hhw24lShU7CR3Oxvj7lxTwHYTSqIoZb/WDtk=)
                          19: gARP5-Zm7uDp12ucBji-NBb-uVk.roa (hash: ct14xmhOGdBCdgfVNWD3JHBjxJsdc6ivQsIjZ3a/FAY=)
                          20: gSInxPdPPJw474VKM-XveAvkaDc.roa (hash: qKVuqJXZ2JHCjMCo18SoE7DYt1Seu56peAwNzRqRZzs=)
                          21: gj993irYQE_6FWjD3XsHKHYqJVk.roa (hash: C1msZscUMVAzYMl6TL/TF2vHrGZWP7nRXPRmS7m3VGg=)
                          22: gt4hRVn9T1adljFN4uXD8LWM6aM.roa (hash: 3g7kM7vAQLxaRG2Zsm4kbInXebdRJAnraRR/FiHhTn0=)
                          23: ioMIqlUxbM45pg2A6Cx4ERo5r0o.roa (hash: tayjdSj4G+dfirzAgyfFpcNJRdkrmH6LGOc1gVI4RO8=)
                          24: o_xepNmijsdAK38MCi72lykQTLw.roa (hash: jJMnJ2JsZLtj1cBY+MTQrOlLOD/DIWgAuulArXltvJY=)
                          25: qTFXDLen7PdHj64Dv3qGT0_7BX0.roa (hash: LC+sEMQrsYcyrWc6N3mnNsQuRQ/cKevUtnqN210d6rA=)
                          26: u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa (hash: 6FLggfxE+ACuRt8hMyz7pysi/RideXVwAmYqMFYsztY=)
                          27: ub3RLNztu3cE-qwuLwdBTlpnYmg.roa (hash: YpVvPKuVTNGY4kFd2rvMktDGw0sX2hIL1b5R2KkZJWQ=)
                          28: xTsMFlUlOMO2C8VqlyNX8l42Be4.roa (hash: cqITgeF+cqV0+Gy/WP4HA7/9+srd7y1yQ5hpxQPafqo=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 22:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
        Validity
            Not Before: Jul  4 17:42:32 2025 GMT
            Not After : May 10 04:51:55 2026 GMT
        Subject: CN=6AF39F0B50F73739D661B0D9B2A743FA5036466E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:a4:7f:0a:c3:cf:44:5f:93:bb:e8:11:38:
                    d8:d5:fe:84:61:07:6e:d3:c1:7b:6f:e2:de:dd:1b:
                    59:02:9f:7d:c4:3c:37:4a:c8:50:ec:eb:d9:52:65:
                    60:a7:ce:1d:d6:a5:e5:a5:c0:f0:20:f7:40:ad:3f:
                    8f:17:aa:c8:0c:2f:a6:b5:b5:ac:ce:76:f2:5c:c5:
                    0c:69:43:f6:5b:15:11:7e:37:a2:3a:eb:89:f9:c8:
                    c0:68:d2:42:39:c6:a7:d7:24:d1:5c:a8:83:fe:b3:
                    16:36:bc:3a:4d:de:4b:dc:11:99:bd:e0:ec:cf:5d:
                    2e:2b:38:4b:ae:a1:4f:63:15:fe:0b:d6:d9:ef:58:
                    1f:ac:00:2b:ca:01:5a:af:31:31:77:f6:51:61:28:
                    99:ef:f5:9b:d1:ae:43:f5:2c:73:fa:b4:3f:29:04:
                    6b:5b:d2:8d:ad:e2:48:77:59:47:2e:50:a4:6d:2a:
                    f3:dc:25:cb:74:4d:03:33:af:dd:01:1e:f7:c8:42:
                    75:2c:84:9e:7a:4f:ec:13:ec:9b:77:bb:33:c0:32:
                    09:23:06:b7:a9:64:ab:e7:83:c0:e8:3e:76:60:0a:
                    f8:33:ad:b7:06:8f:eb:e5:40:ba:7d:7f:1d:ea:86:
                    05:5b:69:88:03:b9:91:1d:e1:f2:66:03:a1:79:ec:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:9F:0B:50:F7:37:39:D6:61:B0:D9:B2:A7:43:FA:50:36:46:6E
            X509v3 Authority Key Identifier:
                keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:14:4d:d5:34:82:6e:16:fe:bd:55:76:a4:bb:de:d1:c2:4a:
         b5:de:a2:39:97:2b:62:01:26:e6:32:b1:67:a4:7e:e4:9f:d6:
         10:dd:20:ac:90:8e:a0:30:d4:35:f8:7d:3d:49:57:ff:cb:e9:
         5b:96:13:8a:b7:d6:c2:a6:28:03:66:6f:2b:d2:38:4a:b5:cc:
         ce:21:66:fd:c4:ac:b2:50:2d:32:ef:f5:23:91:08:9e:f2:83:
         8b:16:82:f4:12:c8:34:db:3b:c3:62:15:f5:93:03:8e:cb:81:
         06:b3:65:f1:95:3f:57:4d:e4:10:25:e0:1a:91:e8:5a:93:9c:
         8f:0d:a6:a2:1b:50:96:0b:b5:c5:0f:da:3f:ab:24:5c:d5:d6:
         5c:91:07:ec:99:39:14:eb:45:23:ab:4b:32:64:d4:ec:05:73:
         65:5f:9c:8e:e7:51:3b:a5:13:f3:65:c6:d6:7e:08:55:85:99:
         60:49:91:19:6b:26:a3:cd:ae:75:5a:eb:7c:c6:7a:dc:26:40:
         b4:fe:af:0d:3f:02:8c:19:dc:ba:72:af:27:22:aa:ea:1b:ba:
         57:8f:19:51:7b:69:1c:41:ab:15:86:19:67:c0:4d:e0:65:a3:
         30:4f:54:5e:a8:8f:88:41:86:39:f8:ab:1a:4d:2e:15:b9:fa:
         63:1e:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:05:38 2025 by rpki-client