Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
File:                     JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft (raw, json)
Hash identifier:          +L90wAJh87oi3PyVWHzMWt8DHL60sUef3IzkW1gSZPs=
Subject key identifier:   C4:3C:B3:90:F5:4C:CC:B6:2C:B3:90:41:3F:A4:36:97:89:41:74:77
Authority key identifier: 24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7
Certificate issuer:       /CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7
Certificate serial:       03A7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
Manifest number:          03A3
Signing time:             Sun 01 Mar 2026 21:30:16 +0000
Manifest this update:     Sun 01 Mar 2026 21:30:16 +0000
Manifest next update:     Mon 02 Mar 2026 03:30:16 +0000
Files and hashes:         1: JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl (hash: +4qqVm4zx8rfZpIeFSPDliIHigSJhkUNeMdS3Qmw7Bw=)
                          2: hPehaI9ioj5n5BSZZ9gIXEVWvxw.roa (hash: JMqirG+qi0YHmDsq55XQSzUCtB+BE2gTtVx+nHzV4Sg=)
                          3: sa3luU9UeUL06Ib0LWq2kOckxFg.roa (hash: 6s7ATAKOtk2+EttjdCrwuFOZjWqvfVZg0zYuufVKk7A=)
                          4: uVEAKOrOie3LMJDWDVWn4PD-RrY.roa (hash: wq3kbTxQOLfauTr4JujFCoAVcaIROufsrnbX/Io0m6w=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 03:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240ED9E7AD0A83829D8F1A990C9FF94D6A106ED7
        Validity
            Not Before: Mar  1 21:30:16 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=C43CB390F54CCCB62CB390413FA4369789417477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:f1:92:6a:88:06:85:1b:82:17:80:36:6f:
                    4d:26:f9:8a:97:a1:1d:be:18:73:31:61:ee:41:e4:
                    ae:e2:b9:fd:85:71:e6:ba:d0:03:79:aa:4c:30:4a:
                    cd:51:ba:4d:e6:83:a7:95:b7:52:85:41:56:d1:a7:
                    e7:a5:c8:fb:ee:cd:2f:16:d9:ba:de:17:34:bc:77:
                    f7:56:14:a3:c4:31:ef:4c:3d:26:ea:73:ad:52:06:
                    f7:5c:dd:23:80:17:7f:d9:54:98:92:97:ee:05:9d:
                    4a:7a:ca:3e:4f:83:f0:df:cc:e8:d4:89:e8:71:0f:
                    d3:61:63:bb:d5:0b:63:38:71:42:34:ca:f4:eb:96:
                    5b:a1:67:55:51:31:cc:20:a0:54:47:24:98:c9:13:
                    ae:ef:07:7a:08:56:f8:af:c1:eb:f0:35:02:14:b3:
                    9d:54:bd:c1:51:e9:e0:ad:9b:fa:43:ba:67:68:ec:
                    f0:a7:0f:63:6a:fc:9a:d0:6c:63:e8:1d:74:aa:88:
                    25:44:2c:7e:ee:ae:a0:ee:98:1c:63:f5:c5:c0:d9:
                    42:62:f6:cb:dc:93:74:ee:88:26:ca:4d:27:4b:0a:
                    c1:44:96:b2:52:2c:0a:ba:4c:6e:d7:0d:3e:67:e5:
                    01:e6:aa:1f:3a:42:e7:43:61:7b:77:bb:d2:f8:b3:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:B3:90:F5:4C:CC:B6:2C:B3:90:41:3F:A4:36:97:89:41:74:77
            X509v3 Authority Key Identifier:
                keyid:24:0E:D9:E7:AD:0A:83:82:9D:8F:1A:99:0C:9F:F9:4D:6A:10:6E:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/344/JA7Z560Kg4KdjxqZDJ_5TWoQbtc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:62:7c:6d:90:dc:6d:50:1d:c5:07:70:05:f0:0f:fc:ae:9c:
         1c:48:3b:cf:58:a0:37:89:b9:96:db:d1:d9:2f:c0:9a:7a:e8:
         a3:62:a7:6e:39:27:68:29:5e:d6:89:c0:39:74:6c:0e:24:59:
         3d:a5:45:22:f2:27:a7:d6:0d:09:9b:d7:81:4b:0f:10:8d:49:
         c7:62:c3:8c:a2:0b:b9:af:0a:93:cf:73:a2:16:db:9a:ee:f1:
         d4:ec:b3:58:a0:31:5b:0c:27:49:a6:55:5c:19:c5:43:50:93:
         9a:e4:29:f8:05:7d:1a:98:a0:6b:b1:63:57:ef:27:f9:2b:ad:
         73:a4:5d:6a:fc:b6:81:1a:ef:23:c3:6c:64:fb:e8:82:ea:c4:
         7e:a0:5f:70:55:1a:4b:59:f5:b1:94:24:ec:ca:14:2c:30:8e:
         6f:4c:07:d4:f0:35:43:09:9f:a9:17:78:e3:24:52:b1:41:d1:
         2a:fb:b5:f8:91:df:d4:85:79:7b:23:80:37:e7:fe:c9:2f:b4:
         ca:1f:0d:05:b0:52:61:ae:c6:3c:a6:13:fc:37:fd:6e:b3:f1:
         18:4f:e6:35:f2:71:67:99:9e:c3:75:0c:3c:5d:50:b3:0f:da:
         79:3f:39:d8:0a:89:99:6c:7a:d2:42:fd:1f:46:95:fd:1d:8e:
         1b:ba:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:58 2026 by rpki-client