Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
File:                     7JfpAsM6EGVBKiW96FhrxCFuOWI.mft (raw, json)
Hash identifier:          jJjIdmgz324sQc6Ab8H2GMAianAIr9BbrdiPX/U/bus=
Subject key identifier:   63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
Authority key identifier: EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62
Certificate issuer:       /CN=EC97E902C33A1065412A25BDE8586BC4216E3962
Certificate serial:       1FCB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
Manifest number:          1FCB
Signing time:             Wed 13 Aug 2025 16:05:44 +0000
Manifest this update:     Wed 13 Aug 2025 16:05:44 +0000
Manifest next update:     Wed 13 Aug 2025 22:05:44 +0000
Files and hashes:         1: 7JfpAsM6EGVBKiW96FhrxCFuOWI.crl (hash: ynItH/3dHUKXJhTDUx7UcBhNWiaUHrxKbn0D4ROzXxg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8139 (0x1fcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC97E902C33A1065412A25BDE8586BC4216E3962
        Validity
            Not Before: Aug 13 16:05:44 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=638B1FB2B0BC8DC785A1671871613554C07EF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:20:45:39:7a:52:f6:52:e2:42:7e:07:38:
                    42:f0:e3:50:25:dd:4c:90:03:c5:0a:86:eb:b5:3e:
                    0f:64:5e:f2:01:28:8c:79:da:4e:36:e1:e5:07:f7:
                    da:ba:7b:b3:0e:85:16:95:44:d9:f6:91:ef:6b:1e:
                    f6:4a:88:d6:5b:f9:f4:8d:d3:dc:02:51:15:c6:a7:
                    39:83:47:d2:6e:86:d8:56:03:43:d2:e9:4b:4c:c5:
                    64:92:4c:56:e4:3d:5a:25:e4:71:12:41:e9:fc:ba:
                    75:6c:b6:ca:e5:fa:22:23:e9:62:a6:40:c1:44:de:
                    0d:64:d6:fd:c6:4d:20:dc:60:8c:fb:d4:ba:d4:be:
                    34:e1:20:dd:73:47:8e:ca:14:30:01:d5:ed:af:0f:
                    b4:4f:e7:26:c3:b5:ad:b3:45:8b:f6:94:47:ec:5f:
                    52:d1:0f:72:61:56:40:94:a2:a2:70:aa:3b:ba:3b:
                    4a:33:79:0f:47:fe:56:6a:e4:aa:d3:25:94:34:24:
                    81:19:67:dc:27:f7:01:b3:0d:9b:0e:db:9f:7b:7a:
                    04:be:27:99:d7:eb:c1:a4:0c:4e:81:84:72:50:d5:
                    80:23:cc:08:32:57:d6:9e:ef:0f:e8:5a:90:06:43:
                    2a:9f:cc:77:d0:41:98:d1:52:9c:6b:35:59:93:02:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8B:1F:B2:B0:BC:8D:C7:85:A1:67:18:71:61:35:54:C0:7E:F8:EA
            X509v3 Authority Key Identifier:
                keyid:EC:97:E9:02:C3:3A:10:65:41:2A:25:BD:E8:58:6B:C4:21:6E:39:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7JfpAsM6EGVBKiW96FhrxCFuOWI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1109/7JfpAsM6EGVBKiW96FhrxCFuOWI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:5a:2f:98:65:a0:7b:22:ba:55:77:04:68:1b:da:55:20:
         99:10:be:a8:9b:ec:34:63:83:6b:eb:3f:9f:ee:85:25:17:bd:
         33:a0:28:40:d1:72:71:16:a2:e0:81:4b:4b:d2:dc:2c:58:c7:
         fe:05:85:b9:c8:b3:4c:65:f5:2c:5f:27:10:c7:b2:5f:b9:23:
         00:8b:d2:89:60:02:4e:79:d7:2d:a9:c2:ee:df:8b:46:42:d0:
         ad:b6:24:56:cc:44:c2:f2:d6:14:d5:b9:65:c6:95:5a:7f:4b:
         3d:c7:56:dd:1e:79:44:c9:4a:11:4a:0c:19:32:a8:6f:87:c8:
         0a:ef:2c:b4:22:0e:39:0b:82:b9:09:8a:73:81:5f:58:db:09:
         41:b1:28:3d:eb:81:39:65:04:39:ce:1c:68:2e:4d:6f:2b:7d:
         ff:28:4a:f7:18:05:df:0f:0b:a1:b7:e7:94:8c:74:7f:e2:07:
         91:6f:55:19:02:a0:59:86:0d:ae:17:cb:45:30:9a:12:92:23:
         e7:0a:c9:ba:07:b3:22:20:45:f1:e0:1b:d8:55:bd:f4:a6:c7:
         b9:61:55:7f:4b:85:0e:2d:10:66:fc:4c:7f:44:92:f1:6d:fc:
         9f:8b:6b:0a:43:53:43:c3:0f:30:6b:5c:68:7f:7f:b4:5d:16:
         61:78:d7:a5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICH8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM5
N0U5MDJDMzNBMTA2NTQxMkEyNUJERTg1ODZCQzQyMTZFMzk2MjAeFw0yNTA4MTMx
NjA1NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDYzOEIxRkIyQjBCQzhE
Qzc4NUExNjcxODcxNjEzNTU0QzA3RUY4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFRCBFOXpS9lLiQn4HOELw41Al3UyQA8UKhuu1Pg9kXvIBKIx5
2k424eUH99q6e7MOhRaVRNn2ke9rHvZKiNZb+fSN09wCURXGpzmDR9JuhthWA0PS
6UtMxWSSTFbkPVol5HESQen8unVstsrl+iIj6WKmQMFE3g1k1v3GTSDcYIz71LrU
vjThIN1zR47KFDAB1e2vD7RP5ybDta2zRYv2lEfsX1LRD3JhVkCUoqJwqju6O0oz
eQ9H/lZq5KrTJZQ0JIEZZ9wn9wGzDZsO2597egS+J5nX68GkDE6BhHJQ1YAjzAgy
V9ae7w/oWpAGQyqfzHfQQZjRUpxrNVmTAo6TAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUY4sfsrC8jceFoWcYcWE1VMB++OowHwYDVR0jBBgwFoAU7JfpAsM6EGVBKiW9
6FhrxCFuOWIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTEw
OS83SmZwQXNNNkVHVkJLaVc5NkZocnhDRnVPV0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzdKZnBBc002RUdWQktpVzk2RmhyeENGdU9XSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzExMDkvN0pmcEFzTTZFR1ZC
S2lXOTZGaHJ4Q0Z1T1dJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAD2hWi+YZaB7IrpVdwRoG9pVIJkQvqib7DRjg2vrP5/uhSUXvTOgKEDRcnEW
ouCBS0vS3CxYx/4FhbnIs0xl9SxfJxDHsl+5IwCL0olgAk551y2pwu7fi0ZC0K22
JFbMRMLy1hTVuWXGlVp/Sz3HVt0eeUTJShFKDBkyqG+HyArvLLQiDjkLgrkJinOB
X1jbCUGxKD3rgTllBDnOHGguTW8rff8oSvcYBd8PC6G355SMdH/iB5FvVRkCoFmG
Da4Xy0UwmhKSI+cKyboHsyIgRfHgG9hVvfSmx7lhVX9LhQ4tEGb8TH9EkvFt/J+L
awpDU0PDDzBrXGh/f7RdFmF416U=
-----END CERTIFICATE-----
Generated at Wed Aug 13 19:07:09 2025 by rpki-client