Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
File:                     1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft (raw, json)
Hash identifier:          +ET55lPQQMC2HlfQG2/+e6HbU3k9h2U9HqceYat92QE=
Subject key identifier:   20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Certificate issuer:       /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial:       1FC5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
Manifest number:          1FC0
Signing time:             Wed 13 Aug 2025 16:05:56 +0000
Manifest this update:     Wed 13 Aug 2025 16:05:56 +0000
Manifest next update:     Wed 13 Aug 2025 22:05:56 +0000
Files and hashes:         1: 1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl (hash: YTpeEqDlkCi4YRLN+Xkufqqhc0v0ksJmyWMPYZA70W0=)
                          2: bu1io0YGUyVGXJmlBFXCkqNhHzU.roa (hash: yjvnS6F+0OxhpQIQ3KjhJ2RFbPyMa6dRGhAGQNbL7Y4=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8133 (0x1fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
        Validity
            Not Before: Aug 13 16:05:56 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=2078E015442FC65DBF7411835879235714E226A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8e:cb:cb:20:1c:31:43:d5:f5:45:64:c6:
                    5e:b6:58:91:f9:8c:ba:6a:21:5f:21:5e:da:59:33:
                    2e:09:1f:ab:cf:a2:2f:d2:7b:ea:f1:5b:8d:e5:c5:
                    c2:9e:bb:2b:6b:2b:56:54:cf:97:a6:95:ae:4e:0a:
                    25:45:6c:01:80:e4:09:cd:12:e7:b5:1b:d2:3f:3f:
                    78:08:d6:5d:62:54:b2:e9:7c:42:b8:2b:20:f5:10:
                    64:49:87:10:22:09:f8:5c:5c:fc:92:4d:71:0e:25:
                    19:dc:dc:78:58:35:36:74:12:13:bc:12:89:14:81:
                    0e:23:8e:b6:be:1e:15:2b:b1:36:77:d1:34:34:9a:
                    c9:22:e8:34:e6:fd:ec:f5:9d:d0:9d:89:e9:7a:28:
                    db:fa:21:54:9e:4e:eb:b1:db:7c:b2:27:b6:2b:3f:
                    36:0c:d8:c1:d6:b3:c4:39:fc:45:34:c9:18:75:1d:
                    16:2c:8d:d1:f8:da:a4:be:73:78:42:fa:6a:fa:b5:
                    49:8f:1c:9e:a1:39:85:67:61:a6:7e:9f:33:ba:e1:
                    26:a0:78:ed:bb:d1:49:eb:80:cf:a9:87:1c:15:f7:
                    be:8d:7d:c6:46:1f:82:4a:99:8c:c5:5a:bf:97:df:
                    09:f9:ba:1c:d3:4d:a8:36:9d:a9:85:c3:89:73:ca:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:E0:15:44:2F:C6:5D:BF:74:11:83:58:79:23:57:14:E2:26:A4
            X509v3 Authority Key Identifier:
                keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:0b:83:cd:3a:28:dc:2a:bb:77:bf:f3:0e:83:09:1a:43:
         8b:d9:8f:97:aa:1f:4c:1e:67:38:f4:a7:5f:1a:05:47:1c:2d:
         e6:b4:cc:5e:d5:11:9f:f1:bb:5d:50:93:4c:20:c3:a9:e4:fa:
         da:c0:40:08:9e:c4:a5:26:9f:f6:3b:ca:f1:fb:a6:1d:b1:e5:
         2f:38:fc:5a:c2:e6:10:09:b9:82:a5:45:10:c6:49:96:c2:61:
         c4:3c:13:e0:46:4b:68:5b:6b:1a:2f:97:15:aa:2f:ce:66:cd:
         28:f2:41:12:1d:2d:c3:db:d6:2f:a1:c5:aa:4a:73:d9:9e:ab:
         a6:af:4c:01:9d:57:fb:69:dc:73:6e:65:ed:b6:94:0f:45:f0:
         ae:3f:58:e4:1a:c7:0b:99:02:85:c5:88:5e:c4:a3:c1:8d:0d:
         bf:a7:fa:b6:8b:91:aa:21:ad:92:c8:35:d9:c0:2b:1c:e8:90:
         f3:ac:c5:9d:34:5b:0f:5c:20:e0:f0:78:6e:fc:07:79:16:99:
         20:da:6d:55:98:3f:12:3d:6b:68:21:7c:86:d2:95:93:b2:91:
         0f:0d:6a:47:8f:87:3b:22:13:3c:6b:47:da:8b:4e:2e:3a:4c:
         01:6f:7d:96:83:e4:cd:1f:81:d1:a0:fd:69:49:4d:24:6c:53:
         f7:bb:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:07:14 2025 by rpki-client