Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
File:                     xMVT2QII7y67l2ljJf_-xcD_FW8.mft (raw, json)
Hash identifier:          vbhbyecV8LpFlIG7y0PN7D+s/yUFuOmiP544h21BARw=
Subject key identifier:   8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
Authority key identifier: C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F
Certificate issuer:       /CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
Certificate serial:       123B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
Manifest number:          123B
Signing time:             Mon 20 Oct 2025 12:06:46 +0000
Manifest this update:     Mon 20 Oct 2025 12:06:46 +0000
Manifest next update:     Mon 20 Oct 2025 18:06:46 +0000
Files and hashes:         1: xMVT2QII7y67l2ljJf_-xcD_FW8.crl (hash: nHgwA0N0PbI3Q727w/q2QFQ2WIOToDNsixghrBvmjfo=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 18:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4667 (0x123b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4C553D90208EF2EBB97696325FFFEC5C0FF156F
        Validity
            Not Before: Oct 20 12:06:46 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=8CB73A32E98E0A72709F7C20B46C46D4AFF25430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:95:d3:f0:dc:d7:0c:1c:8c:19:02:4b:2c:
                    52:1f:78:c1:a0:af:a0:00:6d:29:f9:3d:52:4f:6e:
                    17:92:ea:c7:d6:43:7e:51:b5:ab:23:f2:93:2d:45:
                    ab:61:9c:8e:0a:7b:1e:02:1b:47:ad:cf:b2:05:9f:
                    7f:90:e1:d4:04:cb:34:85:5a:91:84:f8:c2:9e:35:
                    5e:58:1f:5d:2b:d3:85:f9:f1:aa:47:1d:d5:ea:e0:
                    5f:f0:97:7f:21:96:dc:54:17:40:0d:5b:3c:1b:cb:
                    64:f3:56:e4:26:9f:a9:41:f1:35:fb:ad:95:9f:c7:
                    e8:68:60:2f:1d:83:f7:5f:20:b7:7e:e2:e4:32:14:
                    fb:58:e2:08:c2:4f:9f:89:71:36:b5:ff:4b:a5:b8:
                    76:ae:77:14:74:ae:ed:ad:06:ce:c4:4e:67:34:79:
                    de:9d:6e:5c:10:a9:31:38:00:e7:19:60:97:f9:b7:
                    7c:d1:a9:46:fc:7f:79:31:9c:07:1a:20:4b:72:c5:
                    58:f2:56:58:16:d9:00:0d:9a:43:9a:3e:14:40:0c:
                    18:63:61:86:a5:bb:08:64:58:f7:df:a1:d5:98:ba:
                    72:27:77:20:e2:c0:8c:c7:1c:85:1c:88:3d:6f:87:
                    bd:b3:76:76:1b:85:2c:94:f7:f9:4c:84:ce:44:5b:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:3A:32:E9:8E:0A:72:70:9F:7C:20:B4:6C:46:D4:AF:F2:54:30
            X509v3 Authority Key Identifier:
                keyid:C4:C5:53:D9:02:08:EF:2E:BB:97:69:63:25:FF:FE:C5:C0:FF:15:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xMVT2QII7y67l2ljJf_-xcD_FW8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3223/xMVT2QII7y67l2ljJf_-xcD_FW8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:52:7c:c9:4a:1b:6e:ad:ba:c3:23:35:c0:69:ef:31:ee:
         c5:57:3d:e9:c4:de:b0:fc:f6:7a:26:83:a9:36:04:2e:43:98:
         38:68:e7:d8:1c:97:7a:8e:9c:4c:5f:ce:0a:3e:c7:db:fb:dd:
         f2:8c:2c:ed:78:12:39:9f:42:37:ea:50:3c:02:8c:35:76:76:
         7d:3e:d2:c0:98:86:90:68:76:f5:ac:b2:10:ed:e3:32:19:a2:
         ae:d9:17:3a:9d:d9:8b:49:98:7f:4f:c4:32:e4:75:63:1a:b7:
         55:2d:27:1a:57:e9:8b:d6:47:84:1e:f1:c2:4d:9f:1e:9d:42:
         78:b0:cc:2b:7d:54:be:8b:c4:62:c9:77:ef:73:43:fc:2e:84:
         f8:1e:6a:cf:55:3b:9f:ef:12:d3:cc:fb:f3:db:ed:c8:90:e0:
         e7:e6:dc:82:c4:17:64:be:83:85:4a:69:46:8e:c1:d3:c9:6a:
         a4:76:90:65:04:e9:f1:17:31:33:4e:54:60:5c:9f:41:52:50:
         15:24:de:1e:64:aa:07:06:8b:38:87:30:28:81:a2:da:ba:96:
         10:bf:3e:72:d1:cc:35:4e:d4:69:4a:42:80:71:a2:d5:a7:00:
         62:20:5f:51:b1:94:50:82:2b:85:f1:a3:9a:07:a2:21:07:93:
         33:2a:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:36 2025 by rpki-client