Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
File:                     3rhuqt7hwX7OKn_2OIUm96kmDUc.mft (raw, json)
Hash identifier:          AwHCOX7zWZg168m9TGRM9oXIqDoIV8XZtvB8WXwfwH8=
Subject key identifier:   C7:3F:FE:BA:34:40:B8:77:61:EE:7C:3D:5B:F5:EB:72:18:D8:FD:57
Authority key identifier: DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
Certificate issuer:       /CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Certificate serial:       10FA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
Manifest number:          0C34
Signing time:             Sat 05 Jul 2025 20:15:48 +0000
Manifest this update:     Sat 05 Jul 2025 20:15:48 +0000
Manifest next update:     Sun 06 Jul 2025 02:15:48 +0000
Files and hashes:         1: 3rhuqt7hwX7OKn_2OIUm96kmDUc.crl (hash: HZpW5JyhniIW28qyd2aqyu9un2f1fWezaoMbHzCPabY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 22:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4346 (0x10fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
        Validity
            Not Before: Jul  5 20:15:48 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=C73FFEBA3440B87761EE7C3D5BF5EB7218D8FD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:01:e0:b0:b2:31:84:7a:35:1b:f4:3f:e9:
                    6a:5d:0a:ad:f4:89:98:f9:ee:10:38:35:c8:21:e6:
                    39:c7:8a:d8:8e:b0:ae:21:12:22:d6:4d:eb:86:ef:
                    37:a1:2e:4a:a1:ca:65:ad:2a:5a:fa:4b:4d:2c:82:
                    ad:ff:0e:4a:ce:4e:0e:04:85:3f:9b:cb:5e:36:46:
                    68:46:38:f0:91:de:2f:6d:e0:e2:dd:af:84:c0:9d:
                    dd:c7:1f:0a:e3:ea:67:a7:c7:4a:eb:e6:54:d3:14:
                    42:df:9c:4c:5c:e8:6f:61:03:f0:04:9c:73:21:0a:
                    7c:2d:70:1a:07:41:49:d3:36:be:36:b9:0e:a7:6a:
                    a4:b7:e7:23:72:5b:a0:4b:84:fe:e2:f7:13:63:f9:
                    71:0b:92:65:82:1a:3b:7e:70:96:79:d1:de:0e:b4:
                    61:19:d6:fe:20:fe:e7:3f:21:d0:76:33:69:9a:b7:
                    b6:5c:74:a5:24:8a:09:6a:c7:66:b6:26:5c:55:ff:
                    96:0f:c0:ef:0f:fe:2b:af:42:d4:dd:d2:2b:0f:bd:
                    68:36:cb:62:3f:65:84:74:1b:d4:f7:2b:82:f8:18:
                    94:16:eb:3c:10:ea:92:ad:6a:96:75:6d:77:e8:0d:
                    6e:83:0a:a8:ec:dd:3d:ae:e1:c0:28:f2:a4:64:17:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3F:FE:BA:34:40:B8:77:61:EE:7C:3D:5B:F5:EB:72:18:D8:FD:57
            X509v3 Authority Key Identifier:
                keyid:DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:b1:8b:4d:d8:05:61:2e:23:91:89:07:08:34:2e:87:3e:
         d0:4f:f6:2f:e5:58:45:6a:3c:02:59:6a:ad:91:f9:45:d2:f2:
         62:a3:f8:2a:81:4a:87:bf:35:41:80:1a:a8:d8:62:22:fb:65:
         b8:5b:25:3a:b1:63:8c:af:d6:0c:e5:70:b9:1d:a9:1c:cd:55:
         f8:8c:26:80:2a:63:ae:f1:7e:f9:e2:f8:7c:74:a0:ab:e1:18:
         f4:77:52:64:f2:2f:5e:1f:56:cb:bd:31:fa:5c:71:b8:f1:2e:
         86:06:54:5f:f5:b4:3e:b0:08:3d:66:46:ab:bc:76:2d:60:01:
         d3:90:e9:e2:1e:5a:52:25:fd:8a:d5:b1:f4:d4:61:1c:bc:ab:
         b3:9b:a5:2b:67:a6:ae:e3:6b:8d:ae:b4:e4:ab:16:17:53:3f:
         8f:85:ee:5f:fb:d4:ed:1c:21:4c:7a:97:1c:ee:d3:f2:09:50:
         92:d6:02:c7:4d:94:6a:b7:13:6d:aa:b0:4d:bc:06:b9:c0:74:
         45:93:40:82:6f:a6:cc:0b:bc:be:ef:86:b8:03:9f:f2:a5:3f:
         5e:fd:df:d1:42:6c:d3:28:90:82:53:56:86:30:62:ad:f4:7b:
         f5:08:aa:d5:d4:05:10:2d:9e:d4:52:ba:88:bc:a6:96:67:1e:
         ce:a6:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:16:52 2025 by rpki-client