Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
File:                     pl1CGRJdc3FK-EHeL23UGrlPAE0.mft (raw, json)
Hash identifier:          BTt3eX/sCYQeKy5QgQNv6N9UX2BH7An7a2onagRoafA=
Subject key identifier:   23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF
Authority key identifier: A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D
Certificate issuer:       /CN=A65D4219125D73714AF841DE2F6DD41AB94F004D
Certificate serial:       0A84
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
Manifest number:          0A84
Signing time:             Sat 05 Jul 2025 05:42:55 +0000
Manifest this update:     Sat 05 Jul 2025 05:42:55 +0000
Manifest next update:     Sat 05 Jul 2025 11:42:55 +0000
Files and hashes:         1: pl1CGRJdc3FK-EHeL23UGrlPAE0.crl (hash: EMFMj8Zur9BCw7nwelww7oIT5lyi3NfdWgfCxye+pno=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 11:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692 (0xa84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65D4219125D73714AF841DE2F6DD41AB94F004D
        Validity
            Not Before: Jul  5 05:42:55 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=233D51486533D4D58F0856D340E1D33758F6BDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:aa:fd:08:73:70:b5:6c:d8:e0:a6:e3:ed:
                    8f:3c:f7:ec:0a:aa:38:3b:f8:e5:01:12:95:bf:3c:
                    e1:d7:02:09:cb:34:6b:74:33:59:72:40:16:86:9f:
                    2c:80:1e:72:75:32:7f:1d:c9:f3:86:e5:97:58:e8:
                    f9:1f:1f:92:01:f3:23:22:e2:5c:4d:c1:2f:c3:91:
                    8b:a9:0a:bf:94:46:ea:0d:4b:4b:8b:64:8a:ba:6e:
                    2f:80:fc:11:da:8d:2b:c1:4f:fd:7c:cb:81:15:fa:
                    03:7a:f7:b4:c2:e6:70:1f:52:e5:cd:57:dd:b8:c3:
                    92:56:dd:82:1e:1e:6b:a1:77:48:b7:7f:92:b8:4b:
                    b9:cd:a6:b7:ec:d1:7d:2c:bc:5e:6a:2c:3a:c2:af:
                    11:b3:c6:36:64:c3:60:df:df:96:9e:5a:cc:c5:12:
                    61:43:0a:ac:22:a3:5b:0f:50:d8:f0:42:2d:e1:59:
                    d0:9f:a6:88:2c:b9:d3:78:0f:3f:e3:03:f6:05:e0:
                    00:de:26:8a:d1:53:b8:53:9c:13:f7:be:f1:ff:fb:
                    4c:90:d6:a3:96:fc:5d:1b:79:e7:27:08:78:0b:e5:
                    15:6c:9e:e6:67:7e:ea:75:4b:db:89:a0:1b:15:e5:
                    be:21:f5:12:3a:78:93:6b:55:88:a8:ac:f3:71:d2:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3D:51:48:65:33:D4:D5:8F:08:56:D3:40:E1:D3:37:58:F6:BD:BF
            X509v3 Authority Key Identifier:
                keyid:A6:5D:42:19:12:5D:73:71:4A:F8:41:DE:2F:6D:D4:1A:B9:4F:00:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/pl1CGRJdc3FK-EHeL23UGrlPAE0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/pl1CGRJdc3FK-EHeL23UGrlPAE0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:ce:c5:2c:ef:ab:f5:6d:6b:d8:84:ed:0d:cf:9a:49:e4:
         ed:e4:b9:49:81:14:1e:98:52:4b:e1:88:bd:d9:0e:62:b7:45:
         4a:8a:78:dc:10:4a:49:5b:06:0b:f1:66:f8:ad:b5:c6:25:c7:
         d8:03:9c:78:0e:00:37:20:a2:cc:f7:2f:64:84:53:d5:86:c7:
         e9:51:82:6a:c1:a8:cc:53:62:de:96:32:1c:0f:3c:d4:5b:41:
         84:e3:35:65:f0:7b:63:b5:3a:23:19:37:88:48:47:03:d9:f0:
         d1:45:24:13:ce:17:fe:ef:f6:4d:56:c7:c5:b2:4a:5a:b1:64:
         6e:8c:ef:35:75:34:a5:1f:a6:dc:0d:a0:18:be:83:de:f9:35:
         08:73:7e:5d:0c:a9:ec:37:80:ad:38:bb:be:a9:30:57:6d:a9:
         3d:b8:a8:07:f3:f6:b9:61:68:2a:5a:ce:41:96:2b:ed:12:f1:
         93:2f:a7:22:89:96:60:7e:3c:f4:e9:57:ea:0a:77:8c:61:af:
         cb:20:6a:1e:c1:06:32:5a:90:17:01:06:80:25:8d:75:30:cd:
         a4:86:d3:8a:83:a7:2a:07:eb:7b:cf:26:b3:04:7e:2e:f4:00:
         b3:19:a9:f5:23:fc:9f:e2:9a:f7:98:a1:e3:72:75:d2:e9:f1:
         e7:34:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:41:51 2025 by rpki-client