Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
File:                     4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json)
Hash identifier:          A96hn9Ai+E3OWhwfGnFsrywoBn+lKftD/FjfiNAeTFI=
Subject key identifier:   EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7
Certificate issuer:       /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
Certificate serial:       0AE6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
Manifest number:          0AE6
Signing time:             Tue 21 Oct 2025 04:34:15 +0000
Manifest this update:     Tue 21 Oct 2025 04:34:15 +0000
Manifest next update:     Tue 21 Oct 2025 10:34:15 +0000
Files and hashes:         1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: 6eTQJGeZCTVL2rxBQakJpX7RNZ3edw4zLZBhZ6WFMGA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 10:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7
        Validity
            Not Before: Oct 21 04:34:15 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f:
                    59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50:
                    5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd:
                    ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b:
                    03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42:
                    b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51:
                    f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da:
                    92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c:
                    b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db:
                    7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7:
                    89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f:
                    ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be:
                    c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc:
                    66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54:
                    7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f:
                    e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57:
                    39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC
            X509v3 Authority Key Identifier:
                keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:9c:89:f8:47:f0:55:34:ff:a4:0e:45:57:23:19:d3:42:
         4c:31:dc:db:8f:b5:15:6b:94:c2:f2:d8:36:61:87:ef:98:f7:
         1a:b5:fe:6d:8a:39:cd:95:44:3a:12:48:4e:64:8b:de:4a:21:
         d0:c1:f4:55:37:9c:c6:44:8f:c8:9d:3f:1a:99:91:0b:cd:11:
         fb:24:32:ab:2f:14:e2:40:8e:81:ff:7d:a7:70:81:c3:84:22:
         14:70:63:c5:7e:64:97:dd:10:58:6c:60:ea:ce:d0:5b:01:8d:
         2f:09:fa:c3:f0:af:83:4e:10:3e:d7:b4:01:b7:e7:b3:6a:9f:
         7b:28:5f:81:95:08:a0:67:6f:60:92:2e:5f:5e:9b:c9:45:ee:
         b3:e6:19:1f:96:a0:7f:37:fc:1c:01:95:84:0d:d3:65:4e:15:
         0c:bf:94:5f:f3:68:34:e5:aa:ed:dd:e1:57:50:cb:b9:dc:6a:
         ce:d4:2a:6a:bb:9b:88:cd:32:9a:1a:fd:57:b1:c8:62:f2:52:
         22:56:e5:40:b2:10:4f:ae:97:cb:ff:c5:f7:ff:26:bc:6c:b0:
         41:16:ae:09:b1:e5:26:cc:08:b4:8a:f6:d5:27:cc:0c:55:20:
         c0:be:76:ea:93:df:7b:9f:87:44:83:f4:c4:6a:68:36:f7:a0:
         09:ad:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:18 2025 by rpki-client