Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
File:                     5odkXtr0lXS_3oajcUhO5DBK3n4.mft (raw, json)
Hash identifier:          q5cc921jm94XI7G9XFMhdwbW1LJPzaivvgu/6H+meZs=
Subject key identifier:   C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
Authority key identifier: E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E
Certificate issuer:       /CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
Certificate serial:       0A08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
Manifest number:          0A08
Signing time:             Sat 23 Aug 2025 16:04:12 +0000
Manifest this update:     Sat 23 Aug 2025 16:04:12 +0000
Manifest next update:     Sat 23 Aug 2025 22:04:12 +0000
Files and hashes:         1: 5odkXtr0lXS_3oajcUhO5DBK3n4.crl (hash: /Kh1/UnfAEZw8/c/7JBgpR0phXEQKvE55r96oWoGek4=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Aug 2025 21:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E687645EDAF49574BFDE86A371484EE4304ADE7E
        Validity
            Not Before: Aug 23 16:04:12 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=C487014326D8A3CC22137031939879396FAD370A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:95:22:d4:0b:59:32:63:74:40:f9:ee:30:
                    d0:c7:54:11:e5:a7:b8:55:c1:9f:77:7f:1d:5c:8f:
                    dc:48:ae:b3:31:9b:d3:8c:3f:49:9c:14:09:9a:c2:
                    26:46:21:6c:e0:a9:5b:54:1f:8d:a0:b8:ba:55:d9:
                    5a:b0:bd:69:50:25:ef:73:f8:92:53:8e:58:67:48:
                    27:87:02:72:8d:49:43:02:2d:ce:40:a3:d6:7b:43:
                    3d:a9:ed:f2:ec:e6:ee:73:cc:fc:89:91:ea:4b:93:
                    07:4f:3a:e4:66:e7:a3:a1:16:ed:16:c0:c0:b6:32:
                    e6:b3:d7:88:88:73:92:e0:e9:f7:64:92:d1:dc:7b:
                    14:80:08:e6:5a:93:9b:f0:f2:03:2b:2a:74:f5:53:
                    75:5c:c2:0b:f3:8f:f6:5f:40:2a:98:35:c1:63:0e:
                    07:4b:9f:ab:94:11:e5:d5:bb:a2:74:ae:6b:f2:60:
                    28:fe:8f:57:aa:57:d9:92:fc:ee:ec:d1:bc:38:7c:
                    8c:74:7f:24:e7:e5:1e:eb:ab:4c:a9:97:c9:0b:39:
                    82:1a:14:cb:da:b3:14:09:d6:d1:ac:a8:d1:1a:11:
                    a3:5b:5a:be:63:f5:b8:2a:27:b4:69:74:1b:36:97:
                    23:a8:1a:af:d4:0d:8a:85:db:fc:33:39:65:ad:33:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:01:43:26:D8:A3:CC:22:13:70:31:93:98:79:39:6F:AD:37:0A
            X509v3 Authority Key Identifier:
                keyid:E6:87:64:5E:DA:F4:95:74:BF:DE:86:A3:71:48:4E:E4:30:4A:DE:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5odkXtr0lXS_3oajcUhO5DBK3n4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/5odkXtr0lXS_3oajcUhO5DBK3n4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:c9:20:18:35:1a:70:24:2d:88:50:cb:c2:ce:6f:33:4b:
         c2:53:0c:58:5a:20:0c:af:f4:72:2c:0a:1e:5d:c6:5b:2d:f0:
         54:c0:b7:45:f8:af:cb:e4:4c:03:22:bd:1d:12:0b:d8:32:98:
         23:a7:07:90:a8:e0:3c:4a:c5:0e:ad:92:71:62:0f:de:b4:2e:
         36:75:16:ce:27:a8:11:5d:dd:dd:4c:63:cf:d2:e7:89:af:5b:
         54:72:f1:83:04:cf:83:1b:6b:42:19:b3:d7:96:9d:9f:1d:87:
         1e:20:ca:b9:5e:bb:08:f3:aa:a4:fc:2b:0d:75:06:64:76:34:
         f3:17:44:23:42:96:bc:37:55:19:9f:37:01:e2:50:5e:e4:63:
         65:cd:58:c5:1d:8e:51:18:e7:5a:30:7a:57:3c:ee:f9:cb:42:
         1c:49:c6:23:a0:b6:3e:9b:39:07:cb:52:32:9a:47:69:5f:90:
         70:d6:b4:cc:62:6d:d3:66:1e:d7:ae:ac:cc:3a:2a:b0:7f:ce:
         cf:fc:74:d6:f3:71:79:10:d0:d8:2d:43:d3:40:2a:cb:f2:53:
         58:52:d5:cb:e5:8b:03:85:d2:68:7b:1f:40:3f:93:a0:44:1b:
         06:52:e9:ea:ee:95:63:12:f5:8f:dd:ce:5f:93:b8:6e:07:fa:
         05:67:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:15 2025 by rpki-client