Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft
File:                     SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json)
Hash identifier:          olykD9NWOICORuLcE9AzCU055D3rEYIAEteVARbL9e0=
Subject key identifier:   E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68
Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C
Certificate issuer:       /CN=48CBACAAF3D19B992D877910740C638B25F0B72C
Certificate serial:       0371
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft
Manifest number:          0371
Signing time:             Sun 19 Oct 2025 17:04:28 +0000
Manifest this update:     Sun 19 Oct 2025 17:04:28 +0000
Manifest next update:     Sun 19 Oct 2025 23:04:28 +0000
Files and hashes:         1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: teDSxvIREg2nIKkvkQkTPOUNJwiS3Xztmw06NhU4L28=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C
        Validity
            Not Before: Oct 19 17:04:28 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16:
                    b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b:
                    a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9:
                    31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b:
                    21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be:
                    6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a:
                    db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84:
                    ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43:
                    5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe:
                    75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0:
                    aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4:
                    53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf:
                    e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89:
                    fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a:
                    6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b:
                    94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8:
                    27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68
            X509v3 Authority Key Identifier:
                keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:2b:60:fc:12:62:f1:ca:90:10:bd:c0:84:8a:1b:66:74:
         af:3a:26:52:2c:99:a5:68:8d:e1:c0:1a:a1:0f:2e:fa:b8:70:
         5a:1e:9a:b8:c0:0f:15:9c:fd:8c:71:fe:cd:32:0c:7b:a3:62:
         89:8e:b5:89:1b:ba:e5:b3:a4:a1:11:10:77:46:3a:a5:90:e8:
         25:1b:45:37:12:48:16:c5:c7:4e:27:5d:c3:f4:6d:e4:e6:4c:
         32:69:d7:17:c6:1b:71:ff:d7:9b:69:4f:61:40:b1:eb:f7:76:
         8c:60:b5:f0:d6:fa:aa:43:23:98:da:48:d4:c6:37:bb:53:42:
         a8:ee:2f:0a:1e:8f:34:f4:da:55:11:82:cc:a1:6a:58:a0:7e:
         5f:fb:80:4d:38:fc:39:c7:45:a5:b2:0f:e5:f3:9f:a8:d0:16:
         22:cc:68:ed:bc:7f:a2:53:3d:1f:7a:21:9e:1f:47:4e:f7:f6:
         b5:0d:3c:76:92:8c:de:6e:b7:c2:3c:f6:d9:b1:bf:e8:04:bc:
         83:c0:47:18:1c:c0:13:d5:dd:3a:3f:68:bb:68:6c:d7:4b:08:
         ad:76:80:66:6d:bf:1c:25:a9:0d:57:f9:3d:bb:50:89:7a:84:
         82:95:04:1a:26:82:49:53:8e:a0:df:53:94:08:3b:a2:52:f8:
         ed:24:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:47 2025 by rpki-client