Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
File:                     IzgaqYlJu4DtLCSso3qClDkUg3U.mft (raw, json)
Hash identifier:          YoP73GfTQ74pzBkHlhh2s7ey8FEx7mARAPR6VdQjb7w=
Subject key identifier:   18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
Authority key identifier: 23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75
Certificate issuer:       /CN=23381AA98949BB80ED2C24ACA37A829439148375
Certificate serial:       1DAB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
Manifest number:          1DAB
Signing time:             Mon 20 Oct 2025 03:08:20 +0000
Manifest this update:     Mon 20 Oct 2025 03:08:20 +0000
Manifest next update:     Mon 20 Oct 2025 09:08:20 +0000
Files and hashes:         1: IzgaqYlJu4DtLCSso3qClDkUg3U.crl (hash: QOlB8OfGucNrDFdJrSMdUuko5e0jgSOAVuakiUwtaOU=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7595 (0x1dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23381AA98949BB80ED2C24ACA37A829439148375
        Validity
            Not Before: Oct 20 03:08:20 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=18DE9AF8E754871B16DCD69D80E9DE9F1E2DCB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:58:67:73:18:3f:55:28:bc:94:55:e4:0b:
                    3b:bd:a6:c0:25:59:20:82:2d:1f:89:c4:e2:b7:c5:
                    82:3e:ce:61:ca:3f:ad:6b:fc:04:b7:2e:77:2b:97:
                    fd:2b:a9:81:5e:f8:bf:fb:78:bd:09:c8:3f:d5:e6:
                    80:57:9e:da:b4:2c:f6:44:ab:d9:f5:e9:c3:34:1b:
                    92:b1:ab:0e:1c:75:3f:02:a7:f6:d0:0e:18:55:be:
                    aa:49:43:98:e3:67:84:c1:81:40:0e:fd:36:c8:89:
                    b5:9a:66:1f:9b:88:ee:c8:ec:9e:25:5d:a3:5e:2e:
                    5a:f5:8c:cb:90:b0:8e:5e:1d:e8:fc:db:06:7b:e3:
                    75:44:94:13:7c:49:3f:d0:19:10:ee:14:0e:e5:0e:
                    a6:ce:ae:6d:35:a6:df:63:ec:c1:3f:5d:82:9e:f3:
                    0c:5f:eb:47:66:0b:7e:74:40:b9:28:c5:80:e3:c6:
                    aa:39:cc:23:78:d2:7e:11:b3:d3:ab:18:de:ea:a8:
                    a7:5b:ef:05:01:fa:1c:de:a3:e1:f6:33:2e:35:93:
                    30:05:ff:80:93:ab:26:ed:c7:84:53:23:29:66:20:
                    45:6a:17:52:49:f6:c0:2e:ee:3d:d3:a6:77:6e:2c:
                    ad:16:00:3f:76:35:c7:b2:d0:55:21:f9:17:19:72:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:9A:F8:E7:54:87:1B:16:DC:D6:9D:80:E9:DE:9F:1E:2D:CB:0A
            X509v3 Authority Key Identifier:
                keyid:23:38:1A:A9:89:49:BB:80:ED:2C:24:AC:A3:7A:82:94:39:14:83:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzgaqYlJu4DtLCSso3qClDkUg3U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1537/IzgaqYlJu4DtLCSso3qClDkUg3U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:8b:5f:39:07:fb:20:bc:43:36:54:74:bb:d3:08:c6:cf:
         d8:6e:71:8b:45:d8:26:a1:b3:8a:8e:51:c1:10:7a:db:40:d3:
         cb:5c:de:16:46:b8:b5:6b:ae:db:1f:1f:11:ac:c0:ab:6f:7c:
         04:d6:7f:99:85:2c:b4:c2:0c:34:bf:83:6b:f4:6c:94:b9:df:
         22:2e:f8:9a:46:84:d6:ee:59:4a:0e:1d:ce:e5:95:a1:6b:7b:
         8b:06:ba:7a:f6:b1:5e:40:fc:6d:7a:94:b2:b9:73:36:6a:8e:
         f9:ae:73:bf:6c:fb:d0:d6:3f:65:96:c3:b0:6b:a1:1c:d2:40:
         7b:d5:26:b0:c4:5b:17:87:c0:67:41:59:1c:08:99:f2:fd:e9:
         d4:f5:90:c9:48:b3:74:10:b2:ea:08:13:1b:ba:2a:88:55:06:
         3b:f4:d3:af:93:73:ce:9c:89:41:96:b4:fd:43:71:21:3c:ce:
         45:01:cc:d0:43:0e:10:84:e8:f8:5e:d9:87:72:39:4b:91:6f:
         cc:3e:c3:a7:07:67:9d:86:b8:a3:09:8d:83:63:73:83:23:7f:
         13:b1:60:a3:4c:d7:70:d4:76:83:5f:57:83:b2:ad:1d:42:4d:
         5a:88:7a:b0:e1:0b:d7:a8:6c:4b:25:b4:12:73:8b:f7:a3:95:
         38:75:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:05 2025 by rpki-client