Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
File:                     dme1o3MAnBs-wTTnPJk2NFMpLHg.mft (raw, json)
Hash identifier:          nQeSt2HQAmaENGtmUd4Qdq7qkOYBS/DO+HQC1n2PwDk=
Subject key identifier:   20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B
Authority key identifier: 76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78
Certificate issuer:       /CN=7667B5A373009C1B3EC134E73C99363453292C78
Certificate serial:       11AB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
Manifest number:          11AB
Signing time:             Mon 20 Oct 2025 12:07:23 +0000
Manifest this update:     Mon 20 Oct 2025 12:07:23 +0000
Manifest next update:     Mon 20 Oct 2025 18:07:23 +0000
Files and hashes:         1: dme1o3MAnBs-wTTnPJk2NFMpLHg.crl (hash: 6xN36TgRQLAXjtU6KJosMBvSVRiPqsQJuBnmHIxgjX0=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 18:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4523 (0x11ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667B5A373009C1B3EC134E73C99363453292C78
        Validity
            Not Before: Oct 20 12:07:23 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=20DDEFF20DEE3DD8D69ACAB7C23E3119ABA8EE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:c4:d7:79:ff:fd:71:64:6b:ab:09:34:65:
                    9e:7c:a5:cd:d3:63:7b:64:c4:47:3b:b1:f8:b7:62:
                    7d:60:b5:c7:84:d9:96:4d:0d:8f:10:71:03:4e:4c:
                    1f:db:4d:c0:ca:43:54:ba:90:f4:2a:12:a7:9c:fb:
                    7a:55:33:0f:af:0f:49:cb:cf:b3:5b:40:12:0e:20:
                    70:47:ba:83:bb:b2:3a:55:fb:ec:71:a1:df:8c:e3:
                    b8:fc:83:7f:1a:eb:60:6f:7b:0d:89:af:fd:f3:01:
                    72:bc:12:24:9c:87:7a:12:d0:04:97:b8:a7:8d:92:
                    8a:59:18:98:a8:41:4d:17:10:42:ec:e2:52:aa:e7:
                    b1:dc:50:03:41:97:b5:00:6b:a0:1b:32:49:07:f6:
                    ed:ed:83:48:10:0f:0b:f7:a6:ed:ad:65:38:9e:98:
                    5f:2e:05:7e:9b:cb:14:f4:52:68:63:f4:2d:57:32:
                    4d:a8:c0:66:e1:fe:ce:8d:e7:4a:0b:12:07:dd:64:
                    0e:ba:31:cd:a0:da:d5:9a:f3:73:72:c5:c1:dd:e8:
                    5a:37:93:c3:d9:a0:69:4e:2d:40:f5:89:52:ac:4b:
                    2e:28:a2:75:b5:cd:0f:95:47:ff:59:51:45:d9:87:
                    f7:67:bf:fa:44:00:9d:22:18:59:54:86:c1:02:1e:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:EF:F2:0D:EE:3D:D8:D6:9A:CA:B7:C2:3E:31:19:AB:A8:EE:4B
            X509v3 Authority Key Identifier:
                keyid:76:67:B5:A3:73:00:9C:1B:3E:C1:34:E7:3C:99:36:34:53:29:2C:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dme1o3MAnBs-wTTnPJk2NFMpLHg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2819/dme1o3MAnBs-wTTnPJk2NFMpLHg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:f8:f4:32:1f:ba:f6:68:a0:02:f3:3c:2e:1c:b6:23:ed:
         f9:11:20:87:72:45:a9:28:7b:d7:7e:71:11:b0:0b:38:38:a8:
         4a:28:87:bc:d8:c7:a0:cc:04:c1:32:c0:4f:bb:6b:8d:48:67:
         1a:9d:0b:25:4a:a1:66:e1:a1:83:ed:f7:b0:90:85:4d:eb:d4:
         f7:3b:80:c9:96:04:c1:f7:90:9b:f4:60:01:6a:a4:84:b8:86:
         0f:1b:ab:37:8a:eb:82:dc:a6:7d:50:54:15:c9:93:fc:00:c1:
         56:3e:3e:50:42:39:3d:a2:7d:75:f0:30:c1:0f:8c:28:ae:db:
         ad:78:d5:4e:3b:c8:0c:c2:e5:4f:bb:9e:a4:2c:ce:90:6f:cb:
         45:81:08:71:11:06:f5:a7:72:0f:f1:52:a9:93:d3:a8:ec:20:
         99:d6:30:45:85:8a:23:8f:1c:58:ad:dc:d2:09:c0:0d:20:7c:
         d8:54:92:2c:27:64:fa:2a:ae:ba:76:02:e4:b2:5d:c5:76:e9:
         9f:ce:79:32:57:fa:ff:b2:3e:8e:ff:0b:09:95:ee:5e:a8:d1:
         9e:6a:c9:84:11:9e:3e:df:6e:ee:08:b2:09:8c:e9:0d:da:50:
         be:db:f4:27:f7:66:ee:82:91:ea:28:b8:80:51:58:b8:d3:2b:
         ab:e3:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:12 2025 by rpki-client