Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
File:                     MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft (raw, json)
Hash identifier:          DxbzTvTsAoeEn0Y3Rmprws9Pn6VBW1roGyQxQIjRbYQ=
Subject key identifier:   8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
Authority key identifier: 30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8
Certificate issuer:       /CN=3092A82F7A97988E8C095463ADBB51E0935928C8
Certificate serial:       203F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
Manifest number:          203F
Signing time:             Sun 24 Aug 2025 07:03:41 +0000
Manifest this update:     Sun 24 Aug 2025 07:03:41 +0000
Manifest next update:     Sun 24 Aug 2025 13:03:41 +0000
Files and hashes:         1: MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl (hash: H6XFKn3ML4Tw6pQipmEj7AbyQWbgNl7x2gRZ+BZTeCM=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8255 (0x203f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3092A82F7A97988E8C095463ADBB51E0935928C8
        Validity
            Not Before: Aug 24 07:03:41 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=8BD149FAA34506BAEA3CD7B0DD6CD555D54137D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:a4:79:8d:d5:c4:67:68:c9:c0:3a:e0:58:
                    96:cf:25:3e:4b:cc:36:e5:71:33:1f:56:80:9d:56:
                    51:9a:7a:7c:22:fd:44:62:ba:94:b1:91:1a:88:ac:
                    d0:2d:dd:e1:ee:da:44:90:65:f3:cf:eb:63:68:29:
                    14:fb:fa:d5:fb:c8:d8:29:86:41:fa:06:66:7c:9b:
                    d5:3f:88:10:5f:c0:b4:51:66:07:29:ea:63:11:77:
                    90:0c:ce:4b:05:fe:2d:6f:c6:e3:ca:aa:e3:91:3c:
                    a4:cf:09:0d:a3:f0:d1:03:18:f1:1c:d7:33:69:e4:
                    6a:54:be:9a:74:b8:da:97:28:0a:5b:60:7e:ae:0d:
                    4f:fb:52:89:d0:83:9a:5b:db:1b:2f:f9:6c:83:a3:
                    d4:eb:48:b5:bd:6d:b9:40:0b:17:65:5d:42:a1:c5:
                    c1:97:72:79:58:98:25:43:7e:5a:99:99:8d:03:67:
                    99:a9:0c:49:2f:82:3e:3c:ef:2d:1f:e7:7d:01:13:
                    49:2a:c1:d1:e5:e6:f5:3b:97:f1:0c:49:9a:fe:4d:
                    cc:d5:2e:74:ab:e5:f7:5b:63:06:86:df:c8:75:98:
                    6e:7a:ee:a1:aa:0b:65:e7:8c:78:83:60:07:32:4a:
                    a3:ce:13:65:12:a4:d5:6a:a2:4a:f4:e1:35:3f:d5:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:49:FA:A3:45:06:BA:EA:3C:D7:B0:DD:6C:D5:55:D5:41:37:D3
            X509v3 Authority Key Identifier:
                keyid:30:92:A8:2F:7A:97:98:8E:8C:09:54:63:AD:BB:51:E0:93:59:28:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJKoL3qXmI6MCVRjrbtR4JNZKMg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2150/MJKoL3qXmI6MCVRjrbtR4JNZKMg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:64:af:dc:39:e4:e3:d8:7c:b8:03:81:22:cb:fe:85:64:
         ec:16:31:e4:9f:d6:02:7e:b3:11:fd:a3:2c:73:f5:9c:cc:8c:
         24:6a:f9:cc:06:fb:c7:da:d2:9a:40:7e:37:bc:f3:75:b9:95:
         46:61:fb:0c:6e:fc:59:c6:85:27:53:31:a6:3c:7c:2f:7c:d0:
         c9:aa:61:bf:4a:80:df:37:ac:f5:5b:fd:c1:51:c8:a5:f5:f3:
         a3:53:fd:41:8f:f8:90:08:28:96:56:19:c0:24:87:86:fd:96:
         3c:bc:45:4f:31:0f:47:c4:06:7b:e5:44:9e:83:5f:83:d9:3b:
         17:05:f9:e1:a0:bd:3c:7d:d3:55:38:91:4a:e8:4c:1b:d6:49:
         5e:b0:3b:fa:9e:2d:0c:80:45:91:de:aa:5b:16:a5:73:a2:8d:
         e7:77:3c:b5:45:8f:c6:ab:fc:b1:04:3f:ee:60:cd:c8:e5:80:
         17:d3:22:b0:b9:26:59:35:73:fa:c4:69:c5:6f:69:36:b5:2e:
         fb:74:60:43:7c:50:43:61:b2:a5:e5:32:8a:b7:d8:f4:fa:19:
         d2:33:cc:ed:8b:80:ad:a6:c5:b6:b6:53:1d:10:35:e9:cf:0f:
         dc:68:d0:9e:d1:ac:3b:ff:25:36:d2:75:f1:4f:7c:ad:e3:71:
         27:1e:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:42:36 2025 by rpki-client