Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File:                     Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier:          oxY8o0rpiAp9oNFdjZELq6xLPOv8yp6nBqt/E4PIoBI=
Subject key identifier:   DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer:       /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial:       0B6B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number:          0B69
Signing time:             Mon 02 Mar 2026 04:58:45 +0000
Manifest this update:     Mon 02 Mar 2026 04:58:45 +0000
Manifest next update:     Mon 02 Mar 2026 10:58:45 +0000
Files and hashes:         1: DIfl7bXQFvsh3gCOalGnbUgUcMk.roa (hash: +BdTskyWDVY72kL9VxG7J9DMW9izo6rXOBqj4uLMOeI=)
                          2: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: JRPJ0FsmvU6obOFPQo696ygA2pHaf+Z7klNwnVqi3uo=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 10:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
        Validity
            Not Before: Mar  2 04:58:45 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
                    ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
                    97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
                    a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
                    8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
                    3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
                    d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
                    2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
                    75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
                    45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
                    cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
                    fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
                    cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
                    8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
                    4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
                    f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
                    36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
            X509v3 Authority Key Identifier:
                keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:22:ea:a6:54:0d:dc:4c:e5:e0:74:fc:71:ae:48:7b:77:
         5b:9d:48:aa:9a:3b:a9:6f:d4:56:31:04:f2:2c:bf:d7:58:f9:
         a1:65:ba:7e:9d:13:6a:ed:2e:06:f9:7d:8b:0e:70:62:d4:e1:
         db:5d:d5:44:aa:25:aa:c1:d9:5c:16:f2:12:15:2d:e6:4f:ac:
         4c:be:17:9f:3b:e0:3b:b8:6b:4f:ec:27:e2:d4:14:12:93:53:
         9e:6a:6d:1e:43:53:1b:1f:1a:66:6b:43:2b:a8:50:b9:86:2d:
         a4:fc:77:10:3c:3c:e2:d4:ff:e3:f2:1c:5d:d6:fd:ad:0d:95:
         a4:99:bf:34:20:f3:c9:4b:93:88:e1:d4:3f:26:f0:9e:a7:b2:
         f4:92:cc:55:e0:f2:5b:30:57:ca:4e:a4:a4:8c:9f:1e:76:77:
         c2:d5:7f:0b:68:60:87:ad:8d:89:70:80:b4:c9:b0:67:b8:54:
         7b:1b:e2:13:5c:01:b1:f2:46:61:c8:c4:1d:78:07:99:7d:fb:
         53:85:99:a6:49:46:4d:4f:90:bb:5b:ef:3b:2c:d6:2e:96:50:
         0a:60:3d:2f:51:13:e9:f5:8d:bb:49:47:47:e0:4b:c4:a5:27:
         38:96:36:0e:74:0f:96:07:d7:fe:8a:43:c9:42:02:3b:f4:0b:
         d5:c3:6a:1a
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICC2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVD
RjVCMjYyQTU2Rjg1MTM0QzhGRTk1RDY0REYwODlGMUI3NjJFNzAeFw0yNjAzMDIw
NDU4NDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKERCRDgwNEVDQjVCNUI3
QzZEMzVENzg2NDk1N0FCMzBDQjM3NTY5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdHpBN7H0RmnnonSL6i+7T5b4hRna2VdNmwgGFY5fq/Ma42M8w
nmrEAC3mmaAhn6u2ygPGVjJwEjIa24qOfJGPnh/I55vkx4ynaT+amn+8aYEvrQxP
lIZwYteLLvWIRvEZTwxJQAWdRy7TIrb0LLNMjl7ZGK+tgXUzCpyK3xaLmWx9yxkH
gEV5Myj1ti8QLNrZj4COBct5QIj91TorYmjrvIeI4/q/onbxOGMuwD/nsYLbUs9o
21YMknqVo5pp+ZBF+Yw/i4hhfkD6VVtXtXF81koFvcGFQrNpdG/Y5toU+/hBZz8d
G0y0vGYuiIVjujauvR+pA4uO0gjPNT2APFVhAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU29gE7LW1t8bTXXhklXqzDLN1aVkwHwYDVR0jBBgwFoAURc9bJipW+FE0yP6V
1k3wifG3YucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE4
Ny9SYzliSmlwVy1GRTB5UDZWMWszd2lmRzNZdWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JjOWJKaXBXLUZFMHlQNlYxazN3aWZHM1l1Yy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxODcvUmM5YkppcFctRkUw
eVA2VjFrM3dpZkczWXVjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEbAIuqmVA3cTOXgdPxxrkh7d1udSKqaO6lv1FYxBPIsv9dY+aFlun6dE2rt
Lgb5fYsOcGLU4dtd1USqJarB2VwW8hIVLeZPrEy+F5874Du4a0/sJ+LUFBKTU55q
bR5DUxsfGmZrQyuoULmGLaT8dxA8POLU/+PyHF3W/a0NlaSZvzQg88lLk4jh1D8m
8J6nsvSSzFXg8lswV8pOpKSMnx52d8LVfwtoYIetjYlwgLTJsGe4VHsb4hNcAbHy
RmHIxB14B5l9+1OFmaZJRk1PkLtb7zss1i6WUApgPS9RE+n1jbtJR0fgS8SlJziW
Ng50D5YH1/6KQ8lCAjv0C9XDaho=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:47 2026 by rpki-client