Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
File:                     TPCRRt5gTA5ELVbGj8hsxQQArSE.mft (raw, json)
Hash identifier:          VNj7HgPAznuTBJ9mTEiJ00J2VGUTiU+uNYlbDQ00eT0=
Subject key identifier:   3D:E4:46:07:C7:25:81:96:BF:B2:E4:51:4E:F5:22:AC:03:3E:12:0A
Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
Certificate issuer:       /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Certificate serial:       0A3B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
Manifest number:          0A31
Signing time:             Tue 21 Oct 2025 03:06:08 +0000
Manifest this update:     Tue 21 Oct 2025 03:06:08 +0000
Manifest next update:     Tue 21 Oct 2025 09:06:08 +0000
Files and hashes:         1: TPCRRt5gTA5ELVbGj8hsxQQArSE.crl (hash: AXine7gqXOvNyDrWJjbMOa/JU0sqgNHMaZ0HloqVOOc=)
                          2: bGeGgRXJn_fKcQJGoNpT45uuMbM.roa (hash: 4rs03AqtGSIGgkcXeqLIzwXtuAsdWOh+07JYHmmqQtk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2619 (0xa3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
        Validity
            Not Before: Oct 21 03:06:08 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=3DE44607C7258196BFB2E4514EF522AC033E120A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:57:8b:9f:48:fe:72:52:d5:33:80:7f:8a:
                    c7:e8:8e:f7:d8:2a:b2:4f:bd:6d:ca:0f:94:85:2d:
                    55:99:15:1d:fc:b6:eb:26:3c:1c:fa:15:e5:3c:d2:
                    c9:bf:b1:b2:dc:61:69:84:79:cc:d0:8b:43:f7:23:
                    20:f7:b8:92:c2:dc:a6:24:c4:70:f6:64:4d:a0:05:
                    ef:64:1c:04:e5:60:85:72:53:ed:11:83:30:7b:c7:
                    db:b9:83:a9:17:42:7a:c0:3b:5d:89:30:1c:1f:3d:
                    9a:c5:42:5c:8f:ec:1a:32:ca:a5:25:db:7d:43:8e:
                    d3:6c:4e:66:4b:55:ac:c5:a9:09:bd:d9:0e:2a:1c:
                    9f:44:80:a8:b1:3c:30:48:46:da:79:b8:bb:12:c2:
                    f4:b3:ff:5e:86:a7:32:db:11:b3:cc:d4:36:86:81:
                    85:73:50:fb:d2:4d:c8:f6:7f:08:52:89:3b:cb:87:
                    47:ab:f3:ac:7c:4d:73:bb:e0:16:b5:ae:92:36:5a:
                    d6:8d:7e:7b:1c:b9:16:22:b9:50:89:c9:de:9d:bf:
                    37:0a:05:2b:2f:60:ec:fc:bc:d0:56:5d:7f:d5:d7:
                    84:60:66:31:df:0c:7c:41:05:b4:f3:9d:42:26:7d:
                    e6:20:17:d2:d9:ac:43:6c:95:9c:a5:df:c4:5c:92:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:46:07:C7:25:81:96:BF:B2:E4:51:4E:F5:22:AC:03:3E:12:0A
            X509v3 Authority Key Identifier:
                keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:c5:be:03:ca:ec:56:80:a9:ac:81:f3:48:f5:8d:68:42:
         9b:c5:91:1e:3a:e4:2a:06:c5:74:ee:c1:62:18:3a:39:18:e1:
         9e:a9:32:63:b4:ee:5d:97:52:07:84:7b:b3:55:6c:63:6b:e0:
         7c:79:78:3a:14:8e:b6:40:e6:1d:c0:48:4a:f0:08:c0:26:7e:
         8d:62:a2:c9:c2:6b:56:25:0d:28:78:77:e1:93:22:53:e7:ce:
         f1:ea:f6:65:0f:b3:41:40:5b:3b:69:b0:54:bf:19:47:dc:74:
         bb:0a:3f:35:34:8b:9d:aa:09:ea:09:ad:d4:26:a4:f2:15:c6:
         6b:b4:02:68:58:e7:71:0b:71:31:e5:a6:43:b4:c3:6b:b8:07:
         a1:eb:77:51:2a:30:f6:fc:f5:c9:2f:f1:53:0c:73:d3:f1:a0:
         9d:13:5f:97:71:66:7e:cb:45:6c:cf:e1:ea:4b:08:a5:fb:4a:
         ae:28:c9:ef:bf:8e:8a:a2:28:10:cc:ff:4d:b3:f7:bc:d1:a1:
         38:ef:20:5b:fe:c1:6e:f0:52:5c:d2:a2:fd:dc:11:e3:d7:9c:
         48:0e:ea:97:84:43:4a:f4:c9:57:e3:86:4c:4e:0e:8e:18:b7:
         45:2d:e5:e1:70:99:fb:65:c7:5d:cc:5d:31:2f:00:00:5f:8f:
         95:4f:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:08:59 2025 by rpki-client