Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
File:                     jTTVmB17agASe58mh0ik4SM-E48.mft (raw, json)
Hash identifier:          2vjJ5wrIzntfcPuskojqr4/qq8LIn6Ajy8ONC53yqJQ=
Subject key identifier:   62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
Certificate issuer:       /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Certificate serial:       0CE3
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
Manifest number:          0CDC
Signing time:             Mon 20 Oct 2025 12:08:06 +0000
Manifest this update:     Mon 20 Oct 2025 12:08:06 +0000
Manifest next update:     Mon 20 Oct 2025 18:08:06 +0000
Files and hashes:         1: XVPdJGEihCIvA9JpS0UUMoot9iU.roa (hash: fYMRjE6iBqW+ZfjLg530UsMpfW5MUD7/ULq3nNW/G2A=)
                          2: jTTVmB17agASe58mh0ik4SM-E48.crl (hash: 5wkNnr6PN1CIz5lKv9BnZdP8foHN8Nj0cP6nz/4FBEg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 18:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3299 (0xce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
        Validity
            Not Before: Oct 20 12:08:06 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=62895AE11E72D504B6EF03F435F25661C11D48FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:1f:5b:a5:f5:c1:65:07:d0:b5:5e:98:c5:
                    a5:d2:7f:63:80:f8:06:4d:8f:6b:4c:2f:0b:db:f3:
                    dd:65:86:d3:9b:85:ba:02:93:37:f1:57:63:20:6a:
                    ef:a4:73:24:d0:b2:19:25:5e:0d:b7:ec:e2:96:a7:
                    59:58:cc:60:0d:77:46:d8:cc:f0:7e:37:3b:b4:67:
                    7e:bd:02:d6:a7:51:3c:7e:af:17:43:2c:42:b4:0c:
                    a8:26:a5:78:da:ba:a9:ab:cc:1b:1f:06:4b:12:74:
                    b4:b7:5e:c0:15:af:25:37:47:34:10:4e:3c:3b:e8:
                    04:f1:ce:db:d3:18:1b:c5:01:e3:40:d7:18:0e:04:
                    44:5c:11:6d:d5:bd:6d:99:f6:31:d8:15:da:5e:0f:
                    8c:f7:10:99:22:65:31:41:bb:00:f9:a0:ea:36:20:
                    56:80:f0:c7:23:b5:e9:77:bf:59:85:af:aa:82:2a:
                    34:ac:e9:63:0a:3d:b4:a3:2d:42:84:e4:df:c0:f3:
                    da:10:21:47:41:09:79:d8:f8:4e:c7:36:6a:a2:84:
                    ca:ce:d0:82:24:fe:e5:51:21:11:a8:9a:64:e4:aa:
                    9c:fc:83:c6:ed:c6:15:18:fe:5a:eb:bc:a1:e5:84:
                    ed:ca:d9:42:aa:76:49:c2:f9:20:c5:de:9c:b2:af:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
            X509v3 Authority Key Identifier:
                keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:4b:03:04:96:7c:d1:61:1b:77:a0:be:d3:01:6a:71:90:
         6b:92:4d:25:74:c6:aa:13:90:aa:8f:10:55:78:68:d1:f9:9e:
         1d:16:4f:13:5c:25:af:08:21:e9:98:a3:4a:d4:c3:c4:8f:11:
         4f:63:87:a1:77:a1:11:dc:37:a8:d9:8b:65:e9:d9:7e:fb:61:
         a3:71:92:9d:54:dd:0a:5b:57:fb:22:d4:b2:1e:bb:b3:d6:25:
         d3:d3:a9:70:a7:ac:72:13:6d:de:23:95:fc:b2:55:82:c1:f5:
         87:a4:83:40:67:54:0d:14:f9:53:1f:22:29:61:7e:ff:4f:7c:
         93:83:8b:26:0b:b5:d7:c1:2d:a2:f4:30:06:57:1b:8e:e0:b3:
         f3:91:d7:5f:e3:14:c4:87:72:46:a8:51:d9:00:d9:33:da:29:
         59:96:ba:36:9f:7e:00:c6:9c:96:8b:ea:3b:65:6c:c4:19:22:
         d2:1d:11:38:ea:ba:d0:eb:63:85:e6:0d:e9:14:e9:45:2c:eb:
         ea:de:8d:d1:67:9c:87:d8:a5:db:cc:01:84:ca:88:da:6a:62:
         94:6e:fd:39:74:af:fc:7f:2a:bb:6a:9e:fe:b1:9f:a0:19:c6:
         87:ef:1e:42:0f:47:8f:8a:56:6c:db:ba:df:b8:08:dd:51:5d:
         9f:cf:27:9b
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQz
NEQ1OTgxRDdCNkEwMDEyN0I5RjI2ODc0OEE0RTEyMzNFMTM4RjAeFw0yNTEwMjAx
MjA4MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYyODk1QUUxMUU3MkQ1
MDRCNkVGMDNGNDM1RjI1NjYxQzExRDQ4RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0+B9bpfXBZQfQtV6YxaXSf2OA+AZNj2tMLwvb891lhtObhboC
kzfxV2Mgau+kcyTQshklXg237OKWp1lYzGANd0bYzPB+Nzu0Z369AtanUTx+rxdD
LEK0DKgmpXjauqmrzBsfBksSdLS3XsAVryU3RzQQTjw76ATxztvTGBvFAeNA1xgO
BERcEW3VvW2Z9jHYFdpeD4z3EJkiZTFBuwD5oOo2IFaA8Mcjtel3v1mFr6qCKjSs
6WMKPbSjLUKE5N/A89oQIUdBCXnY+E7HNmqihMrO0IIk/uVRIRGommTkqpz8g8bt
xhUY/lrrvKHlhO3K2UKqdknC+SDF3pyyr9PnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUYola4R5y1QS27wP0NfJWYcEdSP0wHwYDVR0jBBgwFoAUjTTVmB17agASe58m
h0ik4SM+E48wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
MC9qVFRWbUIxN2FnQVNlNThtaDBpazRTTS1FNDguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2pUVFZtQjE3YWdBU2U1OG1oMGlrNFNNLUU0OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTAvalRUVm1CMTdhZ0FT
ZTU4bWgwaWs0U00tRTQ4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKUTSwMElnzRYRt3oL7TAWpxkGuSTSV0xqoTkKqPEFV4aNH5nh0WTxNcJa8I
IemYo0rUw8SPEU9jh6F3oRHcN6jZi2Xp2X77YaNxkp1U3QpbV/si1LIeu7PWJdPT
qXCnrHITbd4jlfyyVYLB9Yekg0BnVA0U+VMfIilhfv9PfJODiyYLtdfBLaL0MAZX
G47gs/OR11/jFMSHckaoUdkA2TPaKVmWujaffgDGnJaL6jtlbMQZItIdETjqutDr
Y4XmDekU6UUs6+rejdFnnIfYpdvMAYTKiNpqYpRu/Tl0r/x/Krtqnv6xn6AZxofv
HkIPR4+KVmzbut+4CN1RXZ/PJ5s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:11 2025 by rpki-client