Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
File:                     Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft (raw, json)
Hash identifier:          av0q1HhZNleA9U8hoX7sGrkyzA0xV+/TAkHYL4cUXbQ=
Subject key identifier:   B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
Authority key identifier: 1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
Certificate issuer:       /CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Certificate serial:       0C22
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
Manifest number:          0C22
Signing time:             Tue 21 Oct 2025 04:34:18 +0000
Manifest this update:     Tue 21 Oct 2025 04:34:18 +0000
Manifest next update:     Tue 21 Oct 2025 10:34:18 +0000
Files and hashes:         1: Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl (hash: lqntfHuWJ1XdVOMJWCyzy9ZUPFrjFK+/KjPgv12YNKc=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 10:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
        Validity
            Not Before: Oct 21 04:34:18 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=B6729E406F21DD8F18FD5490DE05624792C4229E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:a5:64:ed:2a:8e:ec:40:7e:ca:09:22:48:
                    34:39:c7:3b:fc:da:f1:a0:f7:59:2b:eb:93:6a:16:
                    c4:6f:cc:eb:78:de:07:2f:42:d7:24:54:18:9b:26:
                    aa:71:04:cc:fd:72:5f:a1:3c:a4:6a:da:45:15:f0:
                    a2:44:ee:e5:9e:48:ad:80:4a:01:31:b5:8e:83:c7:
                    96:11:2d:e4:f1:9a:4e:a6:c0:9a:8f:e7:51:f3:26:
                    6b:f6:2b:25:4f:36:02:ed:9d:d9:bf:fc:5c:4b:00:
                    45:92:07:81:8e:c4:67:cd:c7:fa:40:a8:ca:d6:01:
                    79:99:2a:d1:29:3a:5f:e8:40:5b:70:e5:ae:10:c6:
                    50:aa:0d:30:95:d4:d3:3e:2f:80:de:ad:79:b7:c9:
                    13:27:ec:6f:02:32:4d:80:aa:91:eb:fa:8f:93:82:
                    d9:83:45:95:dc:85:ec:e4:a9:cb:fd:1b:53:b2:58:
                    3d:78:68:f6:91:3e:48:1b:fd:fa:9b:58:c4:5d:27:
                    5b:41:22:3d:90:bb:c8:3f:52:2b:4d:7a:78:5a:31:
                    a6:e5:a2:7b:83:1e:25:70:f7:89:80:37:c8:75:ab:
                    af:08:db:20:12:24:59:90:6b:45:a7:a4:06:ef:a8:
                    0e:12:81:17:24:f3:b9:01:eb:50:3e:b9:6f:b3:f8:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
            X509v3 Authority Key Identifier:
                keyid:1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:06:0e:de:4e:d3:68:cc:a5:12:c7:4f:74:3e:81:b2:35:
         0b:05:93:7b:3c:68:96:85:54:59:42:31:1e:69:ca:ff:7f:2f:
         bb:ff:87:91:c3:de:36:65:bd:85:72:8f:68:5a:3f:7d:89:6e:
         ca:ef:bd:94:e0:63:26:9a:d1:84:f0:10:7c:43:7e:3b:af:a7:
         53:6b:89:e4:cb:03:fc:89:59:7b:d9:46:6b:b1:0f:94:34:a7:
         72:1b:ca:4d:01:01:5b:e5:08:e3:33:3c:a4:6c:84:ea:87:1d:
         71:0e:08:fe:1b:d5:62:20:91:96:b2:91:d8:4e:79:c4:64:36:
         2d:82:bb:b8:38:82:c0:eb:a5:48:2b:e9:b6:01:45:6e:4a:8e:
         14:1c:22:a2:62:17:35:80:81:6b:fc:c1:a2:0e:05:96:a0:5c:
         fc:18:51:62:b3:0b:9b:b5:10:54:40:ce:a4:b8:5a:1d:97:1d:
         3a:5a:98:f4:bb:34:3d:b4:3d:0b:1d:c6:af:36:32:96:a8:3a:
         e9:9d:c1:0c:c9:63:87:bd:fd:d8:a0:fb:dc:bb:33:1e:72:8e:
         72:4c:f5:ec:3c:84:57:fd:78:77:45:7d:05:f7:13:f7:3e:91:
         46:dc:22:be:c3:0e:07:d2:e5:a7:67:f6:7f:e3:47:ee:97:b0:
         94:4b:6a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:15 2025 by rpki-client