Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
File:                     jTTVmB17agASe58mh0ik4SM-E48.mft (raw, json)
Hash identifier:          TCCnqSxSEHsedB9WjtBfru3dqU0dYIyYCwNCfYBdyKw=
Subject key identifier:   62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
Authority key identifier: 8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F
Certificate issuer:       /CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
Certificate serial:       0CE5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
Manifest number:          0CDE
Signing time:             Mon 20 Oct 2025 22:07:55 +0000
Manifest this update:     Mon 20 Oct 2025 22:07:55 +0000
Manifest next update:     Tue 21 Oct 2025 04:07:55 +0000
Files and hashes:         1: XVPdJGEihCIvA9JpS0UUMoot9iU.roa (hash: fYMRjE6iBqW+ZfjLg530UsMpfW5MUD7/ULq3nNW/G2A=)
                          2: jTTVmB17agASe58mh0ik4SM-E48.crl (hash: K23rDxzzm5OcJn+j4nVOSZXmcOK6WflG/x2Asy83q90=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 04:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D34D5981D7B6A00127B9F268748A4E1233E138F
        Validity
            Not Before: Oct 20 22:07:55 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=62895AE11E72D504B6EF03F435F25661C11D48FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:1f:5b:a5:f5:c1:65:07:d0:b5:5e:98:c5:
                    a5:d2:7f:63:80:f8:06:4d:8f:6b:4c:2f:0b:db:f3:
                    dd:65:86:d3:9b:85:ba:02:93:37:f1:57:63:20:6a:
                    ef:a4:73:24:d0:b2:19:25:5e:0d:b7:ec:e2:96:a7:
                    59:58:cc:60:0d:77:46:d8:cc:f0:7e:37:3b:b4:67:
                    7e:bd:02:d6:a7:51:3c:7e:af:17:43:2c:42:b4:0c:
                    a8:26:a5:78:da:ba:a9:ab:cc:1b:1f:06:4b:12:74:
                    b4:b7:5e:c0:15:af:25:37:47:34:10:4e:3c:3b:e8:
                    04:f1:ce:db:d3:18:1b:c5:01:e3:40:d7:18:0e:04:
                    44:5c:11:6d:d5:bd:6d:99:f6:31:d8:15:da:5e:0f:
                    8c:f7:10:99:22:65:31:41:bb:00:f9:a0:ea:36:20:
                    56:80:f0:c7:23:b5:e9:77:bf:59:85:af:aa:82:2a:
                    34:ac:e9:63:0a:3d:b4:a3:2d:42:84:e4:df:c0:f3:
                    da:10:21:47:41:09:79:d8:f8:4e:c7:36:6a:a2:84:
                    ca:ce:d0:82:24:fe:e5:51:21:11:a8:9a:64:e4:aa:
                    9c:fc:83:c6:ed:c6:15:18:fe:5a:eb:bc:a1:e5:84:
                    ed:ca:d9:42:aa:76:49:c2:f9:20:c5:de:9c:b2:af:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:5A:E1:1E:72:D5:04:B6:EF:03:F4:35:F2:56:61:C1:1D:48:FD
            X509v3 Authority Key Identifier:
                keyid:8D:34:D5:98:1D:7B:6A:00:12:7B:9F:26:87:48:A4:E1:23:3E:13:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jTTVmB17agASe58mh0ik4SM-E48.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3250/jTTVmB17agASe58mh0ik4SM-E48.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:d7:0d:f4:cc:e2:3a:4b:98:90:c8:6b:20:8d:33:02:82:
         c6:36:62:cf:75:c6:ac:b2:dc:19:a3:c9:61:af:63:4d:06:6c:
         b2:45:e7:87:f4:7f:82:df:14:25:db:47:0c:0f:f6:72:8a:a8:
         90:dd:55:83:a8:08:2c:9d:d4:10:2e:98:5d:00:f9:bd:b0:f6:
         e9:94:1c:49:86:ff:85:71:67:fc:fe:e7:c7:a0:f8:a3:f3:35:
         f6:67:b4:51:a6:64:f5:a7:82:a4:f4:78:e5:62:e0:06:2a:07:
         44:7e:dc:00:a3:6f:61:06:6f:1a:26:4f:f8:63:32:64:9a:2a:
         85:69:c3:88:06:95:08:49:7b:f9:6c:e3:57:31:73:69:8d:e6:
         37:3f:21:dc:93:9d:f9:5f:9d:da:0b:78:c0:7e:b7:0f:81:8a:
         81:58:0c:47:a3:bf:66:e3:6f:26:db:4c:e8:1d:1c:c1:d3:56:
         36:a9:0a:36:18:1c:7f:0f:8e:fd:ad:98:c9:2d:f9:6f:e8:0a:
         35:33:7a:60:6e:dd:f0:b1:d1:5d:63:d7:29:6d:2d:55:ed:9a:
         ac:1d:2a:d2:f8:1d:b4:66:3b:df:dc:aa:ac:bc:21:e8:f0:08:
         f6:6c:c2:62:ac:fd:3a:0f:99:77:10:92:3e:12:93:ed:fe:60:
         69:5b:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:12:54 2025 by rpki-client