Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
File:                     1cLOEmHln9dtPj-wDl66jkTaMMk.mft (raw, json)
Hash identifier:          N4ilHMWTVrPbmqNwiG+Br9HfYGtQphP7s61xhs9KckM=
Subject key identifier:   73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8
Authority key identifier: D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9
Certificate issuer:       /CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
Certificate serial:       0737
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
Manifest number:          0730
Signing time:             Mon 20 Oct 2025 12:05:56 +0000
Manifest this update:     Mon 20 Oct 2025 12:05:56 +0000
Manifest next update:     Mon 20 Oct 2025 18:05:56 +0000
Files and hashes:         1: 1cLOEmHln9dtPj-wDl66jkTaMMk.crl (hash: 7Hfi1vUr0tKIRlf4OmJ/DjqiEmy/Z/YmNGmDpT1pEe8=)
                          2: FkJpjdke1fIHURDzYE13_xW85Lg.roa (hash: m0WvvnMrqGB8ABEUOGujEt1Mq6tuAs96LMnlJwDYqWk=)
                          3: Oc-brg1QK0J-NIpW_rwLeJ0zk8k.roa (hash: zIA70jiRSHf9xGRKSkP9stQX0HwQ9vIhYkN07v13z8I=)
                          4: iLTgL__ugrBwZAUnFNmvKYxeMBU.roa (hash: VsdRTDTFlGzbE2v3s9Tz4OvCdYFI9ztED+sWPOIkhP4=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 18:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C2CE1261E59FD76D3E3FB00E5EBA8E44DA30C9
        Validity
            Not Before: Oct 20 12:05:56 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=732E7B1C3BDBED461E23945ED8FE153EBE6567F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:98:24:46:68:f3:90:4d:3e:03:10:92:59:
                    b4:34:35:a1:3a:a0:c6:2d:8c:ce:e3:55:0c:a6:30:
                    10:90:74:ce:e2:76:73:7f:30:29:70:ee:04:be:73:
                    ff:18:e8:43:b6:a5:c2:7d:8f:da:c5:e7:6b:50:3c:
                    eb:60:d5:f2:09:c8:37:83:16:b7:16:a2:4a:c8:ec:
                    c9:0b:3a:57:f0:4a:3b:03:a6:54:26:c3:2e:ce:fd:
                    3c:70:51:03:0e:15:f7:36:b3:63:ff:2c:0c:a8:00:
                    13:d7:03:a7:78:de:ec:4a:4c:97:4c:fe:f9:b9:ad:
                    a7:bf:46:ad:7a:dd:bd:dd:a5:5c:fd:2d:3a:d6:f0:
                    a4:2f:92:44:66:81:ba:a3:1b:63:f4:b5:8b:96:7d:
                    9c:d8:eb:db:f3:7f:4c:d7:71:6c:eb:d8:39:84:f8:
                    d0:57:9a:89:9a:99:d1:4a:61:b2:13:a3:bd:8d:98:
                    6e:b9:67:f6:f1:ce:cf:bf:ff:8c:ff:71:d2:dc:de:
                    83:e5:37:9b:25:59:58:b8:b8:be:66:91:f6:1b:36:
                    d9:e1:c5:4c:f4:30:5d:27:e5:04:0d:23:e2:f8:f8:
                    11:60:ce:74:16:93:41:94:5c:3d:1b:84:6b:46:32:
                    08:c8:b5:43:c6:6d:91:0a:52:66:f5:c0:ea:86:db:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:7B:1C:3B:DB:ED:46:1E:23:94:5E:D8:FE:15:3E:BE:65:67:F8
            X509v3 Authority Key Identifier:
                keyid:D5:C2:CE:12:61:E5:9F:D7:6D:3E:3F:B0:0E:5E:BA:8E:44:DA:30:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1cLOEmHln9dtPj-wDl66jkTaMMk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2943/1cLOEmHln9dtPj-wDl66jkTaMMk.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:0f:70:e2:62:ae:c8:f6:6d:41:08:25:20:0a:50:63:0d:
         04:47:7c:03:48:f1:e0:38:d1:7f:f5:e6:2f:c1:e9:16:c7:62:
         41:fc:71:e7:91:b1:78:3c:7e:90:4b:2d:3d:32:c8:60:76:f7:
         04:34:65:5b:c8:6a:3e:d6:8c:52:91:cf:f0:de:1a:ff:a6:5b:
         99:f1:06:bc:b4:48:e0:ee:44:64:74:4a:4f:c9:20:e5:45:9d:
         ab:b1:98:eb:c3:0a:9f:37:0b:df:c2:dd:f2:a2:5c:40:d3:59:
         20:cf:49:41:d4:87:1a:86:90:db:39:d1:cd:14:f7:61:28:cf:
         a9:b0:55:b6:1f:6c:a6:e4:ab:84:e7:4f:24:98:3c:6f:5a:74:
         ee:1f:18:94:47:f8:02:51:72:cb:90:e2:f8:92:76:1c:37:56:
         15:e2:72:36:45:93:d6:a9:92:9b:8d:07:d3:ba:3a:1f:c1:6d:
         5d:7e:ee:fa:b1:1d:5f:e9:20:4e:b1:ec:02:9f:1f:a5:b7:c9:
         ab:83:30:e2:cc:55:0f:eb:91:25:c2:72:ac:ee:54:ff:c3:f7:
         e9:d8:0f:78:34:23:a3:b6:6b:2b:5f:df:2d:78:5b:b0:58:bc:
         9e:10:56:1d:57:b4:11:b1:6c:dd:24:0b:26:e9:1d:57:ad:87:
         ce:1f:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:47 2025 by rpki-client