Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
File:                     kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json)
Hash identifier:          UHcB4OBKeHaT0wtmDk/iK/9022r1U6KMpOzE6gnVTPE=
Subject key identifier:   35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
Certificate issuer:       /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Certificate serial:       0A16
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
Manifest number:          0A16
Signing time:             Tue 21 Oct 2025 07:38:08 +0000
Manifest this update:     Tue 21 Oct 2025 07:38:08 +0000
Manifest next update:     Tue 21 Oct 2025 13:38:08 +0000
Files and hashes:         1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: EIebf6sns9Jy22QbSdCvHGWO2uyiGSCuqAkNwu4UUZ8=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2582 (0xa16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
        Validity
            Not Before: Oct 21 07:38:08 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49:
                    ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0:
                    3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5:
                    ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98:
                    22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20:
                    c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd:
                    bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c:
                    5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2:
                    e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21:
                    13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03:
                    55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff:
                    72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3:
                    b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76:
                    0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec:
                    41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7:
                    91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e:
                    b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
            X509v3 Authority Key Identifier:
                keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ae:2b:8c:7c:51:22:27:1b:6e:cc:fa:0f:9c:e8:f3:c4:c2:
         9d:b4:a3:5f:da:45:21:90:16:46:04:d4:70:b6:4b:4a:85:ab:
         98:18:b4:f2:23:6e:32:1e:a7:3b:c1:eb:7c:78:3d:8d:1e:ad:
         ca:73:a9:f8:49:b0:24:06:b4:b6:ef:9b:cd:55:7f:ca:4f:f9:
         14:22:91:f9:e7:63:6f:b3:dd:c3:78:9a:69:86:36:56:1d:7c:
         e2:2e:1b:57:b1:e6:d6:4b:95:fc:0f:e0:e6:44:c5:4e:b4:b7:
         a1:fb:ec:41:b5:2a:67:ce:55:58:5a:04:c9:d6:29:09:1a:cc:
         50:47:dd:7e:98:6a:98:be:cf:3a:c9:f3:14:c0:18:fe:e6:e7:
         db:f2:ef:74:0d:7c:e0:f1:97:57:33:7c:b6:52:3a:77:d9:bb:
         32:58:a7:ff:42:15:17:a2:8d:5e:13:75:31:4d:cf:13:fb:bf:
         68:fe:fc:9f:30:b3:ab:5d:7b:fd:94:38:9f:ea:d4:b9:eb:dd:
         fc:55:18:16:a5:ff:8e:3d:28:78:58:c3:b6:83:b3:05:a9:88:
         d8:2f:95:57:b8:c2:4b:81:da:70:56:24:26:e1:35:8c:ac:f7:
         47:73:20:66:50:16:c6:c8:cd:01:7f:1a:37:c2:3b:a8:04:42:
         a5:f3:d4:93
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICChYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTE3
QTI0REMyRjVGQzA3NTVDRUFDOUZFMUNDNUM0QzU1RDdDRERGQTAeFw0yNTEwMjEw
NzM4MDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1NkI2OTAyNzQ2M0Y4
QTc2ODNCMzk2MEFENjE5RDExQ0FCNzQ0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrTkVMs0bfhbSq/71ESa7cn/ITcUYOCJtCZIE4oDxsExkCUVxF
NHXKinSw9ez5i6Z/3XjFkz1bMSzRmCLwbn3mQhWXEX6z2hHkIMFuZPt6BUkuaiBW
BaVg/b2rDdTim5fn+SXq8NUYPF4u5+3z+KzyDZBA3DESoubeoOc7VR6STRc331MY
IRMVh6u9jcckCvAj7sTqA1WKbRbDE4Zh4UMIL4tw/3Jjx6ho9KRvCXyRtpoKs7do
KUWWXRePhJ8ZBXjUdgrYn1DJXoj85ImVwTO47EG/VVOzk860e7EZr/rT55EHZyY1
znRwJ/9HWWF5fraO+8ihnn1ehHXNyyDVmDADAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUNWtpAnRj+KdoOzlgrWGdEcq3REQwHwYDVR0jBBgwFoAUkXok3C9fwHVc6sn+
HMXExV183fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI4
NC9rWG9rM0M5ZndIVmM2c24tSE1YRXhWMTgzZm8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2tYb2szQzlmd0hWYzZzbi1ITVhFeFYxODNmby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyODQva1hvazNDOWZ3SFZj
NnNuLUhNWEV4VjE4M2ZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIiuK4x8USInG27M+g+c6PPEwp20o1/aRSGQFkYE1HC2S0qFq5gYtPIjbjIe
pzvB63x4PY0ercpzqfhJsCQGtLbvm81Vf8pP+RQikfnnY2+z3cN4mmmGNlYdfOIu
G1ex5tZLlfwP4OZExU60t6H77EG1KmfOVVhaBMnWKQkazFBH3X6Yapi+zzrJ8xTA
GP7m59vy73QNfODxl1czfLZSOnfZuzJYp/9CFReijV4TdTFNzxP7v2j+/J8ws6td
e/2UOJ/q1Lnr3fxVGBal/449KHhYw7aDswWpiNgvlVe4wkuB2nBWJCbhNYys90dz
IGZQFsbIzQF/GjfCO6gEQqXz1JM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:15:30 2025 by rpki-client