Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
File:                     kAlV0DbmnDCpyhxy-vMqiRQlO08.mft (raw, json)
Hash identifier:          PS32b3nc1XgmLfATbMpclhXj7IkKGwGYR8jR+LTobuw=
Subject key identifier:   14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B
Authority key identifier: 90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F
Certificate issuer:       /CN=900955D036E69C30A9CA1C72FAF32A8914253B4F
Certificate serial:       0A09
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
Manifest number:          0A09
Signing time:             Mon 20 Oct 2025 03:06:23 +0000
Manifest this update:     Mon 20 Oct 2025 03:06:23 +0000
Manifest next update:     Mon 20 Oct 2025 09:06:23 +0000
Files and hashes:         1: kAlV0DbmnDCpyhxy-vMqiRQlO08.crl (hash: oK7SJz5BrP1VGPCsLjdORICXH3hssWeZNKhcEWA4ELs=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900955D036E69C30A9CA1C72FAF32A8914253B4F
        Validity
            Not Before: Oct 20 03:06:23 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=144AC75C756FC36688A111D776BAEA86E239182B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:69:5e:ab:bd:dd:14:d9:f3:54:84:1c:1c:27:
                    b0:57:b2:ef:13:1a:92:b0:af:7e:8c:ca:2a:58:18:
                    86:ff:0a:fd:c4:6f:2a:eb:f1:64:8b:a5:78:97:cd:
                    e0:29:02:b1:b4:d9:22:7b:26:20:22:2c:ef:ca:85:
                    24:ec:94:0f:5d:49:3b:08:15:68:d0:13:ef:11:0c:
                    46:fa:ff:7a:83:5b:5d:07:37:29:7c:1b:10:63:6d:
                    b0:97:20:16:20:e6:81:51:34:e7:0c:f9:10:4f:2c:
                    2d:02:30:41:16:3f:a0:64:b2:85:c0:f5:48:82:ba:
                    76:a5:d2:48:74:49:62:2d:56:d6:85:ae:dd:df:1c:
                    8f:e5:82:16:24:d8:ab:3a:d6:ab:0c:7d:19:6d:91:
                    b1:84:36:11:0c:c3:fa:30:f9:17:64:14:06:f4:31:
                    4b:8c:ea:f8:cb:b1:01:dd:4f:a2:2c:f4:4a:4a:e2:
                    1b:c8:e7:bc:96:89:d4:4b:06:ae:0a:9e:2b:79:65:
                    3a:1d:6d:c5:bb:aa:34:a4:62:e4:aa:bd:86:05:91:
                    85:fc:04:eb:a4:c8:5b:3b:cd:d6:3b:c0:31:0f:4b:
                    26:e2:b9:7c:6b:bb:6b:e9:3d:78:bc:7c:96:1a:b4:
                    7f:dd:76:df:e1:30:73:9a:d4:b1:1c:03:0c:87:98:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:C7:5C:75:6F:C3:66:88:A1:11:D7:76:BA:EA:86:E2:39:18:2B
            X509v3 Authority Key Identifier:
                keyid:90:09:55:D0:36:E6:9C:30:A9:CA:1C:72:FA:F3:2A:89:14:25:3B:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kAlV0DbmnDCpyhxy-vMqiRQlO08.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3268/kAlV0DbmnDCpyhxy-vMqiRQlO08.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:93:c3:8a:ce:6c:ee:b1:c5:94:b2:1a:c2:c5:cb:43:e4:e0:
         bf:ff:ae:e3:ba:73:21:c5:85:7f:5c:eb:d8:26:e5:59:72:ac:
         53:97:5f:69:7f:fd:58:ab:b0:99:70:03:f5:fa:f0:fa:eb:2f:
         85:c7:14:63:a4:fd:28:8e:07:17:76:a5:c6:b0:4c:4c:3f:04:
         94:d5:9f:e3:d6:53:9b:9c:8e:36:d3:e2:12:0b:8c:2d:57:16:
         a1:b9:9b:0f:54:9b:c9:89:80:68:e5:6c:a7:0d:a0:a8:8d:c5:
         e2:fc:49:7a:69:1c:87:29:df:11:6c:e9:92:8a:7f:92:2d:13:
         08:c0:01:f7:3d:17:59:08:80:16:e9:84:52:16:3d:0c:d7:ca:
         96:64:a4:68:b2:b7:78:53:80:4d:41:5c:52:41:27:22:b1:66:
         bb:17:f5:07:9a:e4:ab:15:d1:39:77:a1:90:c8:ad:ef:3b:e7:
         41:65:06:cd:dd:49:53:42:79:c1:72:4a:7d:9f:f7:88:3f:6b:
         67:5f:bb:45:10:12:22:bd:d2:44:02:70:8d:53:0b:17:85:f4:
         fd:50:bf:1f:83:30:aa:79:4d:92:c2:8c:30:24:57:eb:f0:11:
         01:ae:e2:98:5d:a2:b8:b6:d5:d6:14:07:ec:d8:7f:26:b0:9d:
         c8:e2:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:51 2025 by rpki-client