Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
File:                     WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft (raw, json)
Hash identifier:          0wpRqgPDndGCibw2IZYfzDdWAAwfFILh/wyLqU7GmZ8=
Subject key identifier:   0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Certificate issuer:       /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial:       2137
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
Manifest number:          2114
Signing time:             Mon 20 Oct 2025 17:04:54 +0000
Manifest this update:     Mon 20 Oct 2025 17:04:54 +0000
Manifest next update:     Mon 20 Oct 2025 23:04:54 +0000
Files and hashes:         1: 4DB6b8uYtZlt1s-s0_Kj8Gd-4Qk.roa (hash: SQKRUUQXTT1pPzXIPeZ5Tyb7WMo6EbNpgE1vC8RTOo8=)
                          2: 7PSiNmw4uP5-tCFMOdEnIR7R1mY.roa (hash: //aLn6ijjd0RsSlEJvFmoXmtL59RIBJT5b37RKtCGhs=)
                          3: 8B3ee2zwLOh8s1iFIKMVsnmZuec.roa (hash: iJOgEVfcK047KEt3I/W4CB27slTmoT+pHxQgHjtHKwM=)
                          4: 8s_bHXEkGfDphZK40c_QLrHy7Is.roa (hash: AMCxQuJ5tzynj2ZxB3wziDhXYAJbbKRS+q8CIWOh1kg=)
                          5: 9Bj9UB3C5NwxT6KrRVdQ2YQUous.roa (hash: INv9naWBG6l1s217kvxz8c7uBcSFLeG45Nf22a5KzMs=)
                          6: EC0cSkLvF1XrlKJ5N0KYO0_vabQ.roa (hash: Xawvh5t2K2TS486my8Cy2k18s+hwdhLtgjfxPlzT6ns=)
                          7: IFIcvn9UMKRt83vukpON6Sbhixc.roa (hash: ee53oRxFxX0OVmISpeWc6zEnCZNfNuioeAQEgPEAWCM=)
                          8: IQ3MBoVNoiKyjgv81qd4k1Fq_ZA.roa (hash: Q4Zo416Ok8oARcqbnlhpOSGq67Max3Ojni1CpzqUPcM=)
                          9: IkZF2VORQzlbUojsrTphCdszKqc.roa (hash: 0kC36+mVolBQQCuRyquKEScwAsSkdyyZX4x06kOmSiI=)
                          10: NHT4Ire_F8NAl-Tb7bg1fVCCio4.roa (hash: AOaMGPdwVSY1SaEMTRPF4k/DYj0UzZkZvvG3vvPDmyk=)
                          11: VS17zQHJixrbUv4jioh85SjDNY4.roa (hash: mrVMrRtK8XPKGGEbzwkp5O1/ilSYDWqZNOunXjUgl4Q=)
                          12: WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl (hash: tlEK9Lfvz8yqQg/8LKzgOlcZkw4wM7nD+0JWXbhG7rc=)
                          13: YAKlFb8WHzILwfEf2d-vY0XO2tc.roa (hash: ucFbqWELYtFSKLzhoZxsZihUE3mTffRhAPcL5Ho7sU0=)
                          14: YHoC-Ib7VAPfOYMbo8u5Of10E5c.roa (hash: 2QPtUsTGSjLGKyk0f7KmLP5/Lp4ZoaIrEQvVm6IKzOI=)
                          15: e2sv8-TY5f8TwpeWdzOHudhiy7U.roa (hash: Kg2UK+S6W3aXr3C3ZkJLPWOvHhxx8HCuDZ6HqqV4DCU=)
                          16: h6IigAHQTvufsTVGRtf3LVHt5rc.roa (hash: mnjF2uSX2BUy0FUGkbab260johYF3bE+fxzCc9zlpeY=)
                          17: lCskf0tlbZLLPtlmhRJ5YbwGRFc.roa (hash: YHt5s+uCl8EdztQtvltmEs8xx/gposAuDHZm7SOVtK0=)
                          18: ll7KL1kbH0rXnmkrLvw0io9RU2k.roa (hash: I9vN+RRN+rOWoaSYHOf9YHTRcz47y3nrL3NkUMEeZz4=)
                          19: p5exbNsYSmDiln-g7yIyKvynhwU.roa (hash: n2w8Ek5ok0RMeIpd650AJAP9TYepbKHwFbnAgmfM7Bs=)
                          20: st5P2QTIXtGgnx4kVJ6EJ8aqvWw.roa (hash: teKJPwHr+FjeXiLBkvonrKuw/vvZ8PpXoyaipi8yxV4=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8503 (0x2137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
        Validity
            Not Before: Oct 20 17:04:54 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=0FF7B43820ECB68AF7937C9B9CD66589B3C42D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:d9:20:80:19:0d:73:50:8a:80:17:07:69:
                    25:5f:68:c3:1e:41:10:06:b2:bc:55:45:18:93:0d:
                    9d:99:01:5f:9f:ae:c8:c1:a8:74:ac:02:b9:86:30:
                    a0:44:86:b1:ef:ff:7f:71:f6:5f:67:c5:57:1b:b7:
                    e7:58:33:6a:38:64:a3:6a:c1:39:40:79:14:f2:8b:
                    f3:23:76:79:60:2a:1e:11:a8:04:f4:72:a0:c3:40:
                    8b:42:52:f2:17:ce:6d:b8:1f:f6:50:14:ab:57:a2:
                    c6:e8:c7:f1:e5:ea:fc:15:20:09:6d:d5:6d:19:98:
                    98:71:d8:fe:e2:06:d1:db:a8:50:bc:d9:d1:29:e7:
                    64:08:47:45:8b:39:da:49:ea:66:e6:3b:a7:35:fd:
                    f9:0b:0e:26:9c:31:fe:c6:a4:cf:5f:dc:1b:bf:45:
                    aa:0a:d7:0c:1f:42:db:e9:1c:58:41:5b:ec:b6:36:
                    86:99:55:04:49:34:10:72:5d:b0:93:87:0e:2e:75:
                    5b:5c:72:e8:c9:dc:e3:43:76:8d:a7:2d:ec:9b:24:
                    0a:58:d2:1d:d7:4c:0f:0a:62:1f:2b:60:b4:7f:84:
                    6b:16:16:dd:f4:6c:5c:ce:d9:0d:dc:41:0e:04:a4:
                    56:71:ed:32:45:c0:88:ce:ba:30:65:a4:73:2a:d7:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:B4:38:20:EC:B6:8A:F7:93:7C:9B:9C:D6:65:89:B3:C4:2D:8E
            X509v3 Authority Key Identifier:
                keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:33:03:b4:51:88:ba:bf:2c:32:0b:4f:b1:d8:a1:b2:9d:2c:
         d0:c3:5a:8f:cc:6c:a6:42:ab:a3:c7:2f:df:26:92:47:2a:67:
         db:ba:48:0d:c7:76:93:a8:85:cc:64:f6:43:62:49:77:32:61:
         0d:57:33:85:85:20:1d:92:57:27:19:4a:cf:15:1d:ee:52:81:
         15:1f:3b:ae:83:a6:51:b5:39:27:9c:14:94:f3:e0:8a:d6:02:
         df:5f:b8:26:53:50:6d:77:5c:8b:f5:b6:26:84:45:4a:85:8d:
         fc:1a:bc:cc:4d:e2:d2:72:ce:44:01:70:70:10:ef:32:43:16:
         8e:c7:18:49:8d:60:d4:47:b0:55:25:22:52:27:e0:02:56:93:
         fd:8d:ed:3d:0d:c0:86:df:e8:b5:c1:bf:5f:13:5e:2a:36:af:
         09:69:69:f3:3d:6d:33:8c:77:49:ad:2f:43:0c:0d:cd:a8:70:
         b9:d0:b1:3a:a2:b4:85:16:19:fa:53:70:35:bf:c3:d1:49:00:
         86:ed:69:66:51:84:a2:63:0f:87:63:db:b3:ad:af:b2:fe:b2:
         0f:e6:5f:fe:2e:87:7a:e6:4c:e4:1f:03:1a:d2:6c:2e:eb:fd:
         d6:21:f9:eb:53:93:30:06:b3:6f:c1:42:cc:04:ba:74:3f:c4:
         ef:db:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:01 2025 by rpki-client