Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
File:                     K_-tbb6GgEycV_BdDDuGxFNO9xg.mft (raw, json)
Hash identifier:          4cAweNKu/pqDRuFAo9Qty/yr5+nfuqjLW66NFQEr5Ew=
Subject key identifier:   17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
Authority key identifier: 2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18
Certificate issuer:       /CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
Certificate serial:       0F07
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
Manifest number:          0F07
Signing time:             Mon 20 Oct 2025 03:05:34 +0000
Manifest this update:     Mon 20 Oct 2025 03:05:34 +0000
Manifest next update:     Mon 20 Oct 2025 09:05:34 +0000
Files and hashes:         1: K_-tbb6GgEycV_BdDDuGxFNO9xg.crl (hash: T7r2hH1VUpQsziERX+EalerVqKRPDgi1+rjp8KTv3iM=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3847 (0xf07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFFAD6DBE86804C9C57F05D0C3B86C4534EF718
        Validity
            Not Before: Oct 20 03:05:34 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=178D4B5169CDA24E9A65E8CA42C39D0FBDF71C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:93:54:95:aa:c3:53:d8:6c:da:56:3d:b5:
                    35:8c:0e:5c:19:d3:2b:cd:70:77:75:b0:a3:69:d8:
                    30:6d:23:94:3d:85:aa:3e:2e:9f:6e:a5:ee:4a:6d:
                    66:dd:46:42:ce:45:38:e7:f5:e6:2d:19:43:8b:cf:
                    4e:20:96:5c:4c:a9:48:59:6f:5e:c3:c3:c7:fe:14:
                    3d:27:bc:1b:6d:ad:28:6c:af:c5:19:8e:ac:44:27:
                    93:52:76:e5:58:16:b9:b3:1e:a3:ea:cf:1d:a3:ad:
                    72:b2:fe:ab:30:20:0a:4e:61:b0:a2:b9:1d:d8:9e:
                    55:bd:25:2a:04:74:81:4f:fd:8c:cc:22:44:4d:2e:
                    da:88:b8:38:65:0a:03:7a:7e:c7:1f:b1:9a:be:b7:
                    52:85:b4:ed:6a:78:93:d7:a5:8e:f8:9c:85:c5:7a:
                    77:48:2a:6e:b9:97:05:ff:29:92:28:90:f1:80:0b:
                    d8:7c:bc:db:09:40:d1:ed:8e:1c:01:c4:54:7e:08:
                    4a:b9:21:73:73:3f:83:0b:f0:ee:3a:43:eb:69:67:
                    b4:c2:e7:a4:35:44:96:5a:66:bc:cc:b2:fe:a2:c8:
                    8d:58:70:a6:20:e3:ff:9e:b7:bb:ff:9e:f3:18:bf:
                    c8:da:56:a4:07:87:cc:fc:06:a3:a4:e5:1c:a7:eb:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:4B:51:69:CD:A2:4E:9A:65:E8:CA:42:C3:9D:0F:BD:F7:1C:62
            X509v3 Authority Key Identifier:
                keyid:2B:FF:AD:6D:BE:86:80:4C:9C:57:F0:5D:0C:3B:86:C4:53:4E:F7:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/K_-tbb6GgEycV_BdDDuGxFNO9xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3239/K_-tbb6GgEycV_BdDDuGxFNO9xg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:dd:ea:0e:9a:23:2f:0e:df:7a:26:b0:87:4d:13:50:c1:
         66:e4:15:32:34:52:79:b3:89:1f:82:4a:f9:e1:24:2e:43:e2:
         f0:3a:6b:00:5c:2b:f8:13:65:d6:05:b9:d9:45:4f:87:3d:40:
         b6:30:14:8f:4f:06:84:1f:fb:6b:f6:4e:c8:f9:3c:a9:bb:f8:
         15:b3:cd:5e:d0:9d:f7:de:bf:ca:ca:09:7e:42:3e:15:e1:21:
         a2:96:ba:50:64:e6:51:34:2d:ed:ac:b3:96:48:42:1b:b5:ef:
         a0:d8:2f:18:a9:97:4d:6d:5b:05:82:58:6f:a6:5c:db:35:ff:
         64:33:28:06:92:b4:d6:46:1e:7b:1b:f4:80:73:d0:f6:68:3c:
         90:d2:4d:8b:b0:e7:8e:e0:89:6a:ac:8c:b4:7b:3b:8c:e9:bb:
         27:e6:b4:2e:09:f0:c1:24:f4:b7:3c:20:16:59:06:1a:66:1e:
         3f:cd:fe:94:12:0e:ad:14:61:d4:a0:ae:1c:41:e0:b0:cb:c4:
         9c:55:30:bb:1b:5c:da:45:db:43:1f:93:50:d6:e3:2e:3d:90:
         4e:61:31:6c:fb:56:83:9d:84:ec:5b:89:6b:88:13:2f:1e:ff:
         e8:d6:82:ed:f3:11:b2:e8:f1:59:6b:1c:2f:9b:ee:9e:d6:16:
         3a:7b:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:58 2025 by rpki-client