Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
File:                     82uLa5gte__1JH2mSO9nP3cW7wg.mft (raw, json)
Hash identifier:          aoZRMrxuJ6TOUQAAYncsm2TG7zI1kd+vGkvToWIoMTs=
Subject key identifier:   4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42
Authority key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
Certificate issuer:       /CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Certificate serial:       0F2D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
Manifest number:          0F28
Signing time:             Mon 20 Oct 2025 03:06:26 +0000
Manifest this update:     Mon 20 Oct 2025 03:06:26 +0000
Manifest next update:     Mon 20 Oct 2025 09:06:26 +0000
Files and hashes:         1: 82uLa5gte__1JH2mSO9nP3cW7wg.crl (hash: tCUt7bxyM8Si51CG714DbNUBqGAUtqPXA9kzjwh+oOU=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3885 (0xf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
        Validity
            Not Before: Oct 20 03:06:26 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=4FEF8A00B99EA44BC029C12A9855DE46B199A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:9b:da:7e:6f:e3:7a:c4:e2:d7:94:60:f7:
                    b9:04:28:83:45:87:e6:83:a0:72:fd:77:85:75:72:
                    87:19:88:b4:97:d5:98:e5:6e:e7:b2:0b:15:3f:66:
                    3b:d6:12:9e:16:3d:2f:b7:e3:a1:c5:21:b9:15:bd:
                    30:38:01:50:40:17:30:99:bf:46:f4:d1:e9:c9:c2:
                    13:fd:01:2e:7c:c2:40:9e:2c:66:e6:f5:09:1e:77:
                    e8:49:4a:1f:50:f7:23:68:a1:07:64:38:13:b5:30:
                    59:2b:58:85:9f:5d:ad:35:7e:2a:79:b2:69:86:cf:
                    39:0e:8a:4d:b5:af:17:6a:49:2d:ae:79:16:6c:f7:
                    ff:09:eb:9c:50:21:da:fa:d2:7a:3f:53:06:a4:36:
                    75:28:2a:61:ba:44:25:1f:2c:8d:d3:15:06:4c:6f:
                    54:8a:a3:d2:51:8f:2d:84:6f:97:f3:1a:d3:da:0c:
                    5a:bd:c8:ff:1e:58:cc:d4:ad:ab:e4:7f:d1:c7:5d:
                    73:f5:60:d4:39:94:dc:f5:ed:d9:8f:bb:a5:a6:e1:
                    34:4e:ad:f6:d9:02:51:fb:27:c3:a1:ee:29:88:f3:
                    df:0a:43:95:2e:f1:4e:9d:7d:5f:ce:b3:d6:4b:cf:
                    13:1e:8f:d2:a3:54:93:cf:45:9b:6b:e1:e0:98:4e:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EF:8A:00:B9:9E:A4:4B:C0:29:C1:2A:98:55:DE:46:B1:99:A9:42
            X509v3 Authority Key Identifier:
                keyid:F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:0d:b0:66:12:79:06:95:b4:18:1a:d2:d5:40:be:10:3a:
         62:a8:b8:0a:83:33:25:46:a4:5c:1a:62:04:e4:e4:27:3f:01:
         79:20:8e:ac:85:ce:ab:91:8b:f5:db:06:84:d9:c6:8b:b6:35:
         63:bf:2c:c3:1c:93:17:28:37:ac:7c:55:52:2b:41:5c:14:00:
         22:07:e5:21:7d:96:7e:da:58:4f:8b:a4:83:e4:7d:e9:3b:90:
         14:b9:8a:d5:44:ab:75:7c:b2:06:53:21:f3:1c:92:cd:ad:eb:
         2e:0f:ac:b4:96:d4:f6:bb:de:60:4d:ce:68:bd:69:09:77:21:
         18:be:57:63:db:ff:91:f9:4d:b7:fe:74:c5:cf:0e:38:d6:d9:
         f3:73:76:e0:3b:7e:66:36:7b:cb:b8:dd:b3:f7:d7:aa:cb:28:
         8b:4c:92:8d:c4:24:a2:38:d3:88:6d:85:52:cb:13:06:89:c1:
         68:31:3c:9a:58:f2:f4:ff:66:18:b1:15:42:ad:00:84:fd:dd:
         c1:6a:1a:27:e7:b4:f7:fb:02:a3:f8:ef:84:75:a1:e1:7d:1e:
         7d:d1:88:34:0a:58:ab:32:ef:55:a0:35:61:a7:ff:e4:91:00:
         b8:8d:75:36:c9:e2:4a:c8:e8:03:7c:42:be:d7:a2:7e:05:70:
         9c:fa:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:26 2025 by rpki-client