Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
File:                     SjSV_QtTU5dWd0kGZfAxxGksrbo.mft (raw, json)
Hash identifier:          LFfjE1HeuQlWfSyz56zreLVk69NCMAp+4H3HOlLfTNo=
Subject key identifier:   9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4
Authority key identifier: 4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA
Certificate issuer:       /CN=4A3495FD0B5353975677490665F031C4692CADBA
Certificate serial:       118C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
Manifest number:          118A
Signing time:             Mon 20 Oct 2025 17:05:45 +0000
Manifest this update:     Mon 20 Oct 2025 17:05:45 +0000
Manifest next update:     Mon 20 Oct 2025 23:05:45 +0000
Files and hashes:         1: HZbV5_idzW8zluywrYrShHPXxVA.roa (hash: XBZyRHAGnQ5oHbIqpKoDY4o0I/2IuuNdAcinHawxczU=)
                          2: MoP4veIQty3_inOzFxCFTk7JLeE.roa (hash: M+GdKVy49/tnFnNNA0712vGEzZpVPyOBAdGyfVeaaP0=)
                          3: SjSV_QtTU5dWd0kGZfAxxGksrbo.crl (hash: Ni5nBvt8CytmNaNLax9L2ETdzqND4fbjQmGCfHPKCPg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4492 (0x118c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3495FD0B5353975677490665F031C4692CADBA
        Validity
            Not Before: Oct 20 17:05:45 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=9FC25420A89C59819AD47501D77C01C12CD040F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:6c:52:d3:24:cb:9f:a2:c2:0c:18:35:7b:
                    51:03:96:e8:c2:87:0e:e0:a2:46:b1:77:cf:da:5f:
                    51:f6:3a:29:28:b9:ca:5e:98:c2:e1:6c:24:f2:98:
                    a8:3b:fd:af:77:f1:70:eb:e2:78:db:7c:86:9e:b2:
                    37:ba:d5:13:e9:8e:1c:d3:dc:fc:28:e8:9a:79:56:
                    64:f0:7b:01:e2:32:9d:77:f7:3e:00:be:f0:29:93:
                    d0:a0:f0:8d:1c:16:58:3b:9e:62:9e:33:67:d6:a2:
                    83:71:60:5d:69:56:70:a4:be:19:e9:23:bb:f1:88:
                    50:53:70:06:69:9a:24:e2:0f:95:46:1d:fc:f4:98:
                    3e:e4:77:22:50:25:65:25:f4:32:3e:d6:45:0d:d7:
                    53:42:df:75:90:de:c2:33:7a:f3:b7:ef:c1:5b:eb:
                    80:00:a4:66:b0:f9:07:8d:06:d9:d2:07:d9:43:05:
                    cd:70:ab:1d:4d:4a:6d:f1:8f:cf:b5:2a:a3:1c:cc:
                    a7:4d:de:bb:91:b9:94:5d:54:0a:50:2f:17:ff:ab:
                    61:e2:b9:d0:be:ec:8b:d9:5f:51:a4:ad:d5:f6:08:
                    81:03:89:b1:05:03:11:d6:ed:31:54:ff:36:cf:93:
                    06:d1:16:5f:1a:9f:44:d8:db:ac:0a:62:ea:80:a1:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C2:54:20:A8:9C:59:81:9A:D4:75:01:D7:7C:01:C1:2C:D0:40:F4
            X509v3 Authority Key Identifier:
                keyid:4A:34:95:FD:0B:53:53:97:56:77:49:06:65:F0:31:C4:69:2C:AD:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SjSV_QtTU5dWd0kGZfAxxGksrbo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3214/SjSV_QtTU5dWd0kGZfAxxGksrbo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:f6:1d:ac:79:9f:c4:4a:38:c0:a1:ee:ef:e5:19:da:b0:
         3f:5a:17:b2:a8:e3:65:71:8d:eb:6a:af:a6:f4:e4:aa:90:1e:
         4a:07:5e:ee:62:41:c1:d8:75:8c:f5:c5:da:29:d1:6e:a7:5a:
         a1:f0:41:dc:4b:79:1c:fd:03:ab:74:d3:d1:66:df:c6:5e:18:
         92:d8:72:53:ee:3b:6d:97:47:29:a6:72:1b:46:46:23:a7:f9:
         f8:8d:40:09:6b:84:9c:a9:97:b2:09:6f:62:51:8b:86:95:4e:
         df:68:a2:9f:13:05:92:26:9d:8e:d3:53:43:c5:bb:64:0a:43:
         28:16:90:a9:4f:ca:5e:bf:a4:e2:46:be:15:96:58:23:a1:10:
         ba:f8:0f:71:ad:b7:1b:3e:f6:a1:39:37:f2:ca:82:92:95:f8:
         82:c4:22:bb:1a:8d:d5:c8:f9:9e:83:9b:c2:9c:d7:52:ea:13:
         94:48:5f:c7:80:6e:90:58:a9:cb:80:52:26:53:bf:9e:23:11:
         84:12:4e:d0:fe:53:dd:9f:a9:bc:35:e2:f5:94:27:0f:23:62:
         89:aa:8c:37:5c:0a:20:d3:c6:29:f5:76:fd:ae:34:cb:e1:88:
         e4:65:c7:3f:98:0b:2c:e3:6f:58:0d:82:f4:b6:71:eb:cf:fc:
         e5:f8:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:09 2025 by rpki-client