Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
File:                     ZdphvcoswPjKldJNOUK8CH2MkqY.mft (raw, json)
Hash identifier:          dJBidzL9+WTSykHR5RvIc2turdmtyn7bCGecK2JJbM0=
Subject key identifier:   CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Certificate issuer:       /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial:       20E6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
Manifest number:          20D5
Signing time:             Mon 20 Oct 2025 03:04:59 +0000
Manifest this update:     Mon 20 Oct 2025 03:04:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:04:59 +0000
Files and hashes:         1: ZdphvcoswPjKldJNOUK8CH2MkqY.crl (hash: Bp7dW7gPmIFhvNmnwZ/5XeNJfTmxirYoWpFB7Ptiyos=)
                          2: rY_gTlaxMPe70YkloeB7ZVk6570.roa (hash: b3KWJSzTTKFbr+k2pZObja2Rk4KcWLa/Iv4T+UvBilo=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8422 (0x20e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
        Validity
            Not Before: Oct 20 03:04:59 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=CBFFA004795DF91F8F02A48790BAE7C7D1E8E23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:16:7f:f5:25:11:26:6a:5f:d3:00:b1:c0:
                    80:3e:a9:ed:e9:bd:a5:20:18:19:94:8e:1f:77:09:
                    fe:42:0e:07:1f:e4:9a:27:23:a9:38:ed:eb:01:79:
                    14:5c:7d:e0:53:4c:bf:c7:b3:ca:27:b5:91:71:b1:
                    e4:3a:03:14:fb:4e:24:87:09:e9:52:21:75:ae:00:
                    88:7d:ac:d5:d9:bb:69:dc:af:39:df:2c:0e:55:f5:
                    24:9b:91:79:b9:7d:98:21:4e:ba:28:67:8b:d4:31:
                    7f:42:05:e4:47:8f:53:3f:a4:2f:4c:ec:d1:df:bf:
                    76:8c:80:48:6b:8c:00:1d:87:6a:f1:67:40:ea:2f:
                    8c:bd:80:7e:37:4f:0d:fa:ac:fb:e0:93:c4:85:85:
                    ee:b1:57:5b:27:dd:9b:e7:16:30:5d:2a:de:8d:75:
                    9e:69:4a:14:0c:8e:a9:d7:dc:b2:55:85:cf:14:8c:
                    51:cf:bf:a8:2c:d0:63:5b:83:96:0a:95:22:b8:aa:
                    a4:ba:8d:de:5f:e5:9f:45:5c:92:44:15:40:8a:3b:
                    be:ed:55:b1:24:f2:16:76:79:cd:95:45:5e:6c:a0:
                    8b:e9:35:25:3b:6a:6a:05:10:38:a6:20:6f:f6:09:
                    fb:ea:42:f5:d9:94:47:63:a6:c8:3e:85:ba:c9:d0:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F
            X509v3 Authority Key Identifier:
                keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:b1:ed:c1:05:0d:b4:99:91:c8:a1:d1:2c:28:78:69:cd:
         e8:39:05:a0:b3:d6:82:64:d1:23:03:a8:b4:3f:41:4a:fc:2e:
         2e:b9:4c:16:03:56:28:77:0c:f5:3c:0e:5b:7b:8c:1e:ec:c4:
         d9:4c:91:79:7d:a2:fb:88:01:f9:8a:5a:d9:ef:77:3b:8c:2c:
         5a:43:e1:6d:03:97:64:0b:4f:81:1f:a6:c9:9b:21:94:f7:5b:
         0c:c7:08:41:3f:27:67:05:75:94:35:46:f3:e1:b5:87:70:18:
         1a:d6:db:9b:74:74:5d:e9:55:e5:cb:25:4e:c4:55:c8:7d:c5:
         83:d1:98:3d:58:d2:23:c2:31:7d:d0:0e:a3:c4:ab:b4:38:35:
         ce:45:a9:e5:32:19:d8:c3:9b:de:bd:35:03:1a:96:c5:e4:c4:
         d4:35:1a:6c:62:7d:48:ab:65:be:82:68:41:b6:93:9e:4a:3f:
         f9:8f:c3:be:a7:32:18:ee:72:b4:7f:ab:03:e3:3e:c5:e9:57:
         ac:af:9d:54:07:70:9f:9b:c3:11:09:ed:70:1a:11:60:de:39:
         1a:df:e1:ee:ca:f5:4b:1c:46:74:c0:cc:e7:23:e6:15:a5:18:
         b4:42:1d:7b:4d:30:42:f0:99:a1:89:bb:52:c6:83:e0:f8:26:
         7a:dc:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:39 2025 by rpki-client