Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File:                     DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier:          nfyDXM+yDEI7vpkUnsTShSWp+rK/qgo6Jf2HAmReD0M=
Subject key identifier:   FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       19D6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number:          19D6
Signing time:             Mon 20 Oct 2025 03:08:35 +0000
Manifest this update:     Mon 20 Oct 2025 03:08:35 +0000
Manifest next update:     Mon 20 Oct 2025 09:08:35 +0000
Files and hashes:         1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: NmioHWjjr/8LAv8DA1yBlxtFHH7vAdztvaY1fArTlvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6614 (0x19d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Oct 20 03:08:35 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
                    ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
                    42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
                    ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
                    4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
                    51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
                    2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
                    58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
                    14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
                    1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
                    49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
                    bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
                    75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
                    14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
                    f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
                    ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
                    49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:e2:61:e5:6b:4a:77:cb:15:31:47:bb:19:17:9d:1b:37:
         c0:c7:c0:05:fa:e7:80:b8:28:d9:22:a9:54:fa:83:a7:80:ab:
         f7:29:04:21:ce:26:82:9c:5d:dc:0d:39:05:ae:5b:42:00:df:
         35:56:c6:d9:53:98:aa:e8:f1:06:ab:51:34:b1:27:37:c6:9c:
         ec:ea:10:82:4e:3f:2a:30:45:e2:20:61:2a:09:5c:3a:78:e0:
         52:aa:ec:0c:a0:8f:34:1a:96:18:37:f3:1c:34:98:27:1e:20:
         94:e4:06:a5:23:05:08:c4:8d:7f:85:e4:f2:76:11:16:2f:48:
         82:bf:48:3c:15:64:4f:4d:64:70:f4:81:3f:ac:20:2b:02:a2:
         06:f8:f4:62:1a:cd:bd:56:65:63:98:bf:74:f5:c1:4a:26:6f:
         ba:10:12:03:ba:af:4a:87:f6:11:cb:de:ac:63:6c:5f:79:b9:
         04:d0:c1:87:d6:15:bd:34:ce:6c:42:64:0b:a4:e9:d5:8e:c4:
         2e:18:bc:86:d6:7a:cb:38:19:ec:8d:bc:12:de:5c:f4:52:c1:
         8b:a0:ea:87:e4:e8:c5:ef:94:c4:05:eb:46:69:e0:ab:4e:e6:
         b4:db:15:3f:5f:98:45:d5:69:11:44:c4:d0:7f:5b:f5:cc:ed:
         0e:10:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:32 2025 by rpki-client