Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
File:                     jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft (raw, json)
Hash identifier:          p95iG37/tgCYpQfjMwezaRkgQb27ghK5Nxa1Ocm98Tc=
Subject key identifier:   E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
Authority key identifier: 8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB
Certificate issuer:       /CN=8D18CF7815823E9F9902817D0E727DABC55448CB
Certificate serial:       0A78
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
Manifest number:          0A78
Signing time:             Sun 19 Oct 2025 22:06:04 +0000
Manifest this update:     Sun 19 Oct 2025 22:06:04 +0000
Manifest next update:     Mon 20 Oct 2025 04:06:04 +0000
Files and hashes:         1: jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl (hash: ZwJYN1x85CpW0a2GdFouDCKbcrOzdK56aUfOvWu9sDk=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 04:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D18CF7815823E9F9902817D0E727DABC55448CB
        Validity
            Not Before: Oct 19 22:06:04 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E1D2AD9037E38220CA3255C14DB05A6DFCA711B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:9c:40:2b:90:b4:00:aa:ec:6b:35:6e:32:
                    f8:54:29:59:e1:ae:b9:25:2a:b5:75:8a:3d:e9:37:
                    04:5f:5b:1f:44:ce:1a:08:5e:df:94:ac:be:95:6e:
                    52:0c:e5:be:0c:fd:1a:14:d5:6a:3a:44:de:c2:f7:
                    cb:bb:7d:b8:c1:77:05:bf:41:eb:05:56:90:06:72:
                    de:12:aa:0c:3b:69:19:86:cc:4b:ec:b5:a2:7a:7b:
                    07:ac:43:3f:a0:fb:99:ee:5d:ce:15:06:63:31:d5:
                    8f:f5:e2:f8:a4:28:90:95:5e:68:45:a5:7d:09:21:
                    ee:ab:75:76:37:f0:81:3a:c9:c9:ea:91:26:6d:a1:
                    6b:bb:ab:10:8f:20:7f:dc:db:0a:36:f6:4d:25:b9:
                    39:3d:fb:18:2b:93:e6:3e:eb:d4:4c:be:c0:47:8c:
                    09:74:fa:a4:3c:a7:d1:60:80:cc:08:b8:e0:de:e3:
                    1c:34:29:4a:b2:f7:12:9b:23:55:14:58:30:fc:af:
                    ed:ff:06:21:06:f4:91:bc:78:6c:4e:44:0b:75:f4:
                    73:b1:47:1d:42:4f:d1:7b:37:a5:5c:42:47:d7:51:
                    b0:d7:7f:19:45:39:46:28:4b:07:5e:13:b6:66:25:
                    97:e6:83:24:1a:46:45:4c:cf:44:47:7b:66:53:1f:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:AD:90:37:E3:82:20:CA:32:55:C1:4D:B0:5A:6D:FC:A7:11:B1
            X509v3 Authority Key Identifier:
                keyid:8D:18:CF:78:15:82:3E:9F:99:02:81:7D:0E:72:7D:AB:C5:54:48:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3278/jRjPeBWCPp-ZAoF9DnJ9q8VUSMs.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:50:62:b7:51:99:63:99:a4:10:ef:28:5b:16:a0:e1:c4:
         2f:56:a2:c6:86:e0:ef:9a:ef:0a:17:af:03:71:e4:38:b9:81:
         2d:86:a3:d5:e6:9e:76:78:5e:11:0b:4b:11:ae:d2:5a:4c:3d:
         e9:5a:35:81:19:86:65:e8:13:7d:98:f9:5b:cf:35:ef:54:21:
         4b:97:89:8f:f3:e5:90:fb:78:83:02:4d:70:df:dd:14:10:5b:
         8a:d2:01:0a:e5:84:60:6d:14:ab:36:62:de:7b:ab:d9:c3:34:
         b4:f9:b4:eb:62:fc:24:e2:4d:b7:13:46:e9:02:12:de:2a:94:
         d3:30:7c:a4:31:6d:fe:bd:29:f8:f4:e9:5a:62:54:60:67:5c:
         34:87:ee:38:a6:ce:8f:81:a7:d4:e3:d5:06:bd:26:77:55:52:
         2a:04:22:53:c0:0e:42:d1:37:c5:88:a6:49:5c:7f:ff:04:86:
         2a:07:27:c7:ca:41:ce:28:9e:ab:78:ca:bd:bf:34:19:ea:09:
         d9:05:fa:a8:0c:76:62:ad:e3:d9:76:d7:be:11:b4:45:94:ec:
         13:d9:37:49:d5:66:50:43:b4:54:b8:ba:8d:8e:e9:85:ca:32:
         f8:2f:4f:5e:59:75:f2:b9:22:19:09:1b:80:f1:31:04:9d:0b:
         81:f9:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:33:33 2025 by rpki-client