Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
File:                     CZkX2MUTgArhbVggcgZ8KTd8Jik.mft (raw, json)
Hash identifier:          b+vIM2ztPxsCCPzDxMVaC1QZUZFsoXu+fW8GLcse/ik=
Subject key identifier:   A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6
Authority key identifier: 09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29
Certificate issuer:       /CN=099917D8C513800AE16D582072067C29377C2629
Certificate serial:       03BC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
Manifest number:          03BC
Signing time:             Sun 19 Oct 2025 23:04:24 +0000
Manifest this update:     Sun 19 Oct 2025 23:04:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:04:24 +0000
Files and hashes:         1: CZkX2MUTgArhbVggcgZ8KTd8Jik.crl (hash: 9esTlKx/52mKQIN95FmG/RrTqhDbeflTXNzR+OStXiw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099917D8C513800AE16D582072067C29377C2629
        Validity
            Not Before: Oct 19 23:04:24 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=A3FF29CFD23BB00C4218F91914122C83CB18F8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:5e:98:92:b3:79:0e:37:55:5d:95:bf:18:
                    53:30:b8:fb:e5:ce:b8:5b:8f:83:37:66:a1:2e:84:
                    4b:23:1f:6a:f1:52:80:f7:a3:08:f1:8c:d3:75:94:
                    4c:18:f8:07:3f:97:1c:a5:3b:6c:f7:19:0d:80:1e:
                    b4:aa:4b:b6:4f:cf:37:de:9f:e8:02:3a:45:95:ac:
                    54:98:55:de:cb:2b:79:5e:e5:d2:8a:05:f9:38:b3:
                    80:35:9f:cd:a4:0b:b4:3b:2e:1c:ae:ba:5f:fd:02:
                    0a:23:8d:b7:4c:45:28:a3:7d:f4:41:0e:ef:2e:bb:
                    83:00:06:ce:e7:8d:12:34:c9:ba:32:56:52:1b:8b:
                    6f:e7:ea:fd:61:f6:54:6c:cd:73:25:a2:18:85:1f:
                    62:b9:27:13:dc:be:1b:be:9c:63:6c:8c:44:23:aa:
                    43:a4:46:e9:68:19:af:54:07:c0:f1:2d:7a:d5:d2:
                    82:cc:05:b0:f4:31:38:0c:83:15:98:fa:19:10:9e:
                    ba:ec:67:e9:b9:38:27:20:1a:2c:ae:28:21:89:87:
                    6b:aa:c8:00:ef:60:60:ae:7d:fa:d6:78:ad:b7:14:
                    5a:ba:f1:ea:17:d9:16:4f:b8:e0:9f:66:4d:be:66:
                    31:77:fc:35:72:f8:cf:cb:9b:f3:5e:2c:c3:cd:b9:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:29:CF:D2:3B:B0:0C:42:18:F9:19:14:12:2C:83:CB:18:F8:F6
            X509v3 Authority Key Identifier:
                keyid:09:99:17:D8:C5:13:80:0A:E1:6D:58:20:72:06:7C:29:37:7C:26:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/CZkX2MUTgArhbVggcgZ8KTd8Jik.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3360/CZkX2MUTgArhbVggcgZ8KTd8Jik.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:4e:00:80:4d:1a:38:6b:ee:d7:05:8e:0e:93:4f:ab:ec:
         32:c3:49:de:a8:c5:ec:e8:4c:fd:3a:f0:a2:48:eb:3b:e1:40:
         f0:75:b2:5e:2d:60:9a:e2:b8:c6:33:8d:ed:a2:2b:af:e9:7e:
         0d:14:16:5c:a8:4c:5d:8f:d5:a3:fa:e9:f3:ac:eb:3a:47:38:
         d5:46:1e:b1:b2:85:54:43:fb:a9:33:34:15:46:34:29:b2:7a:
         08:06:e1:88:12:3c:95:01:a9:58:98:34:5c:d9:4f:55:63:c4:
         56:95:7f:82:04:ab:eb:2c:2a:fa:77:06:23:90:d7:05:cb:e3:
         6f:07:47:e2:ad:f0:24:06:9b:78:14:62:40:1e:58:ce:d3:75:
         88:0b:7d:91:1b:ee:7c:d0:c3:98:62:31:f3:73:d1:d6:36:65:
         0d:f8:8a:56:ab:a2:44:3c:47:d5:3d:9f:7f:7c:ff:32:6c:1a:
         4d:94:47:eb:4c:91:fb:d9:e4:bc:23:d6:28:b1:14:1a:8f:fc:
         c3:d2:84:34:f9:c4:01:63:b8:1a:e2:31:32:72:42:ea:a0:3c:
         3b:09:8b:03:e6:25:69:25:17:ec:2c:66:96:a9:3b:45:31:4b:
         bc:66:c2:1c:e3:cd:e2:ac:af:2d:f7:f8:b3:30:15:16:fe:e4:
         1e:4f:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:30 2025 by rpki-client