Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
File:                     MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft (raw, json)
Hash identifier:          iPy6NBbFEuFj8rM7sBM7rZlegfgJfIfSx7Zd6Jo6BBA=
Subject key identifier:   16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07
Authority key identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8
Certificate issuer:       /CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
Certificate serial:       2DAC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
Manifest number:          2DAB
Signing time:             Thu 03 Jul 2025 19:18:31 +0000
Manifest this update:     Thu 03 Jul 2025 19:18:31 +0000
Manifest next update:     Fri 04 Jul 2025 01:18:31 +0000
Files and hashes:         1: MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl (hash: yj7wU5gYZwWtdTfOKx71ZnFLI21s/Q23JBe92LvNXf8=)
                          2: y9DLCNSIuLkBZIkz41fZp7cJGZU.roa (hash: Cp0py42ioGyYnkGJjzIyPolL5ICxx82QyuevAMu3xEM=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 01:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11692 (0x2dac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
        Validity
            Not Before: Jul  3 19:18:31 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=165C5FA5B60A9DDE85ECB22FCC294E9134DBB507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:79:7b:7f:4b:1b:50:b6:07:ec:fc:3b:11:
                    9e:fb:d5:b2:f5:00:0c:bc:a4:dc:0b:e4:af:92:db:
                    96:63:56:3c:b4:5f:14:a5:c7:a5:8e:75:c0:88:7b:
                    c2:d2:a6:7a:02:a7:4d:c8:65:10:df:68:4c:63:4f:
                    0b:1b:5d:0f:f1:a9:44:c8:68:53:29:be:e2:7e:19:
                    3e:80:17:6e:da:aa:80:8f:ea:07:67:4a:28:b1:c3:
                    ca:93:95:7a:80:a0:b3:a7:d9:20:80:f0:25:93:f1:
                    82:6a:9e:c4:32:1c:75:45:ec:8f:a0:da:1d:80:41:
                    95:ae:15:b4:de:69:bc:cf:00:64:ea:21:72:ed:a4:
                    3b:a8:99:59:28:f1:0b:ed:76:90:13:39:54:5e:da:
                    ea:ea:e4:72:48:a4:ce:43:d7:3b:db:df:6a:5a:63:
                    93:d6:37:16:ec:2f:2a:e4:78:2d:94:be:23:ea:cf:
                    1e:61:e1:16:4b:f4:b8:f0:03:fd:a1:f6:35:9b:9b:
                    c0:22:c9:b5:5b:6a:bc:45:0b:dd:9d:ce:9a:ac:5b:
                    5e:28:db:22:99:ba:f4:1d:bf:59:eb:ad:12:0a:f6:
                    49:00:cf:33:35:6a:d8:e4:82:65:67:16:47:9b:c6:
                    88:2f:82:c3:b8:3c:ae:6a:ab:9f:c9:99:a0:53:64:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5C:5F:A5:B6:0A:9D:DE:85:EC:B2:2F:CC:29:4E:91:34:DB:B5:07
            X509v3 Authority Key Identifier:
                keyid:30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:a9:fa:ad:6f:4a:ae:8e:5a:72:b8:fe:72:eb:62:5b:c7:
         4a:3c:ea:43:09:d6:90:3f:98:5f:c2:2f:45:18:bc:a8:53:78:
         3f:ad:18:ac:13:fd:6e:80:cf:63:12:71:ae:97:e5:fd:d0:7e:
         33:5b:d4:6e:b7:02:54:be:8b:1e:c5:65:37:42:2c:c2:b4:55:
         33:69:4f:6b:f6:11:71:ce:25:f5:d2:08:bb:5d:cb:85:fe:46:
         f4:f8:ae:b4:09:73:34:39:62:53:ce:d0:91:2e:57:03:b1:c4:
         61:8d:e5:2f:ac:27:4d:2e:82:79:08:9b:ac:e6:dc:17:1a:0a:
         79:8f:68:6a:bf:38:0b:5c:4c:be:79:3b:f7:19:59:a3:d2:7e:
         f4:bc:c4:fc:9a:e4:bb:b5:6c:ca:3d:9e:1a:3f:59:4f:e9:02:
         b3:a5:5e:74:45:fa:c4:61:36:09:ca:8b:e5:76:4d:62:85:36:
         d4:5e:8a:92:75:9a:63:3c:4b:40:a8:8a:99:3a:39:17:6f:7a:
         fb:db:ec:f7:e8:cc:41:68:c3:c6:60:f3:db:48:8c:3e:b5:37:
         e9:14:3f:35:af:1f:0e:98:36:6d:d9:16:05:73:bb:f1:29:aa:
         98:41:00:fa:0c:65:27:cc:90:eb:ab:4d:64:21:10:13:50:a4:
         ea:81:2f:3c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICLawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5
NTlDMEZFODhCN0QzMUJEMjlDMTJDMTdGRTRBRjQ5NURDNkZDODAeFw0yNTA3MDMx
OTE4MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDE2NUM1RkE1QjYwQTlE
REU4NUVDQjIyRkNDMjk0RTkxMzREQkI1MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4sHl7f0sbULYH7Pw7EZ771bL1AAy8pNwL5K+S25ZjVjy0XxSl
x6WOdcCIe8LSpnoCp03IZRDfaExjTwsbXQ/xqUTIaFMpvuJ+GT6AF27aqoCP6gdn
Siixw8qTlXqAoLOn2SCA8CWT8YJqnsQyHHVF7I+g2h2AQZWuFbTeabzPAGTqIXLt
pDuomVko8QvtdpATOVRe2urq5HJIpM5D1zvb32paY5PWNxbsLyrkeC2UviPqzx5h
4RZL9LjwA/2h9jWbm8AiybVbarxFC92dzpqsW14o2yKZuvQdv1nrrRIK9kkAzzM1
atjkgmVnFkebxogvgsO4PK5qq5/JmaBTZD+jAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUFlxfpbYKnd6F7LIvzClOkTTbtQcwHwYDVR0jBBgwFoAUMJWcD+iLfTG9KcEs
F/5K9JXcb8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg0
L01KV2NELWlMZlRHOUtjRXNGXzVLOUpYY2I4Zy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTUpXY0QtaUxmVEc5S2NFc0ZfNUs5SlhjYjhnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg0L01KV2NELWlMZlRHOUtj
RXNGXzVLOUpYY2I4Zy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAzban6rW9Kro5acrj+cutiW8dKPOpDCdaQP5hfwi9FGLyoU3g/rRisE/1ugM9j
EnGul+X90H4zW9RutwJUvosexWU3QizCtFUzaU9r9hFxziX10gi7XcuF/kb0+K60
CXM0OWJTztCRLlcDscRhjeUvrCdNLoJ5CJus5twXGgp5j2hqvzgLXEy+eTv3GVmj
0n70vMT8muS7tWzKPZ4aP1lP6QKzpV50RfrEYTYJyovldk1ihTbUXoqSdZpjPEtA
qIqZOjkXb3r72+z36MxBaMPGYPPbSIw+tTfpFD81rx8OmDZt2RYFc7vxKaqYQQD6
DGUnzJDrq01kIRATUKTqgS88
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:48:59 2025 by rpki-client