Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
File:                     lazTI5qu6vMSOhjdo_diO4EFNtI.mft (raw, json)
Hash identifier:          ln5oafegC/bU5YMYf1CwLitr2BaBkhwv8AIlZJWWRpE=
Subject key identifier:   E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
Authority key identifier: 95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2
Certificate issuer:       /CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
Certificate serial:       09F0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
Manifest number:          09F0
Signing time:             Tue 21 Oct 2025 07:36:21 +0000
Manifest this update:     Tue 21 Oct 2025 07:36:21 +0000
Manifest next update:     Tue 21 Oct 2025 13:36:21 +0000
Files and hashes:         1: lazTI5qu6vMSOhjdo_diO4EFNtI.crl (hash: Ae9NYMU7H0dqMWZWIQdrND4Wx/NNdvTUgSm3va9NMHs=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ACD3239AAEEAF3123A18DDA3F7623B810536D2
        Validity
            Not Before: Oct 21 07:36:21 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E648C16B92E93D4A7B481029F3BE1838635C7A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:5c:80:ef:04:fa:0b:e3:a9:b7:62:2e:34:
                    82:27:27:82:04:5c:4e:e8:fc:b8:ce:60:93:81:2d:
                    0f:88:f9:0e:e8:bb:5d:d8:97:d4:35:b5:ad:84:e8:
                    a3:80:f9:3f:19:52:c7:d7:69:46:0e:c0:49:1c:18:
                    bf:d9:12:63:b1:a2:ea:e2:67:8b:bb:36:c3:b9:b3:
                    c1:f3:5a:60:3c:7f:9c:77:1f:4c:0a:f4:0e:7f:84:
                    2c:74:e3:2e:d1:6f:d3:8c:7e:cd:19:61:42:b5:79:
                    8a:b7:6e:e9:91:a5:d4:9a:1f:ad:0a:44:c0:94:94:
                    ca:d7:37:97:e6:8b:ce:a7:1e:92:b1:d0:d1:c1:b8:
                    3d:48:54:61:6e:f1:48:3d:17:24:0c:f7:c0:50:4e:
                    8c:49:e0:44:31:52:b9:cb:69:d9:bd:a4:d6:52:a2:
                    f5:c0:d1:13:ee:7e:8c:4b:71:10:75:25:39:a9:c5:
                    e1:10:38:36:44:13:57:f3:b6:7d:8f:f0:06:34:fd:
                    3f:d8:a9:96:00:66:af:87:59:07:6b:55:68:a2:17:
                    16:2f:df:26:80:d7:93:84:0d:39:05:0b:63:fe:fd:
                    1e:fa:af:f8:4c:c7:27:17:6b:1d:ad:39:20:bb:c1:
                    a3:d2:10:6e:e5:34:b9:23:9f:71:a1:eb:f5:69:7c:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:48:C1:6B:92:E9:3D:4A:7B:48:10:29:F3:BE:18:38:63:5C:7A:2D
            X509v3 Authority Key Identifier:
                keyid:95:AC:D3:23:9A:AE:EA:F3:12:3A:18:DD:A3:F7:62:3B:81:05:36:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lazTI5qu6vMSOhjdo_diO4EFNtI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3285/lazTI5qu6vMSOhjdo_diO4EFNtI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:42:47:97:38:a2:54:4c:37:08:3a:10:0e:1f:9a:2b:f9:
         b1:12:38:34:72:ba:55:18:ab:4c:69:0d:b0:ec:9b:ea:d5:a5:
         4e:36:36:39:30:2f:27:0e:8c:a7:a2:47:72:3c:71:a3:96:c7:
         01:18:1d:21:95:aa:78:24:3a:f3:e4:ec:8e:8d:97:dd:28:02:
         5b:b4:96:8b:f7:e8:53:ee:d8:e0:03:02:03:a4:34:c4:73:50:
         31:a3:69:c2:38:8d:46:97:a1:3a:ce:b8:f3:4f:4d:4b:56:8d:
         94:80:94:76:77:c4:ef:8b:05:bf:5f:4f:7f:14:4c:6b:50:80:
         3a:a4:5c:de:65:fb:3e:c3:f3:09:ee:58:f0:a7:c5:61:c0:ac:
         83:a9:58:90:11:6c:13:5a:dc:4f:44:c4:51:77:1a:f2:ec:1e:
         12:15:43:7d:21:68:4f:5f:7f:54:7c:12:11:35:1d:a7:70:eb:
         c2:bd:33:b4:4b:3e:17:ae:2b:d6:bf:e9:57:7d:25:9e:df:fd:
         3b:6e:91:ab:cc:64:05:e8:43:96:5b:cf:35:74:d0:82:51:ca:
         1f:d1:79:88:a1:79:ca:38:f1:75:05:1f:37:cf:3c:4d:41:ea:
         db:77:b2:7d:be:55:27:d6:45:2c:3b:a7:67:10:58:87:bd:f5:
         85:95:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:13 2025 by rpki-client