Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
File:                     hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json)
Hash identifier:          2oqJJKWt3SHT1CaMBrmjjB8bL6FYpol2/peVZRSU1YE=
Subject key identifier:   45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F
Certificate issuer:       /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
Certificate serial:       17F4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
Manifest number:          17F4
Signing time:             Mon 20 Oct 2025 03:08:36 +0000
Manifest this update:     Mon 20 Oct 2025 03:08:36 +0000
Manifest next update:     Mon 20 Oct 2025 09:08:36 +0000
Files and hashes:         1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: 9ufpRbdFdgEJF4DQgBsQEeJphsYyJarI7BEyzkoPIaM=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6132 (0x17f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F
        Validity
            Not Before: Oct 20 03:08:36 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f:
                    c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9:
                    30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4:
                    42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e:
                    7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1:
                    b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b:
                    b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55:
                    da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f:
                    5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7:
                    da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3:
                    a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0:
                    9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48:
                    f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54:
                    f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d:
                    89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66:
                    f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe:
                    68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14
            X509v3 Authority Key Identifier:
                keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:87:22:c6:c9:19:2f:ab:3c:01:7e:a9:44:c0:3a:fe:d5:
         c3:2a:d1:25:93:c6:8e:73:f4:34:7b:0d:3b:89:08:41:e0:ad:
         8d:13:21:72:65:cf:2e:08:30:c1:8f:0c:cc:ed:0a:fd:ea:8b:
         f7:63:e8:3f:b0:22:b6:3d:b1:66:2b:07:a2:b7:35:40:6d:0e:
         22:7a:5a:60:f8:c2:b3:48:9f:0e:50:a4:15:39:cb:e7:87:e9:
         9b:f6:cc:cf:38:07:d8:56:8c:42:71:39:64:24:1c:68:36:50:
         56:60:cf:8e:21:1f:ed:15:01:4e:bf:ed:07:e8:d1:d8:9e:01:
         2f:7b:35:c2:01:17:67:32:93:64:7e:a3:54:0c:7e:cf:36:7f:
         44:52:ac:e3:c5:0f:4d:61:eb:bb:7a:53:84:82:a8:f2:d2:86:
         9a:e1:81:d3:a5:5a:87:f1:c9:1c:28:09:66:17:37:ca:55:e7:
         7a:5c:21:c9:61:94:88:6a:0a:62:48:9d:ce:ee:ec:dd:35:1d:
         3f:25:99:eb:b1:39:ea:74:7d:80:0a:b1:50:f7:13:30:86:7a:
         0f:85:ca:46:be:d0:e4:db:64:df:98:11:19:ed:41:73:c2:7e:
         cb:e2:b1:b9:a2:22:4d:00:d4:87:16:20:56:72:31:1b:df:4f:
         e0:d8:fa:c4
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG
MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTEwMjAw
MzA4MzZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3
MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts
88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3
fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb
t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0
/tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd
k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu
hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1
L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm
T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAmwocixskZL6s8AX6pRMA6/tXDKtElk8aOc/Q0ew07iQhB4K2NEyFyZc8uCDDB
jwzM7Qr96ov3Y+g/sCK2PbFmKweitzVAbQ4ielpg+MKzSJ8OUKQVOcvnh+mb9szP
OAfYVoxCcTlkJBxoNlBWYM+OIR/tFQFOv+0H6NHYngEvezXCARdnMpNkfqNUDH7P
Nn9EUqzjxQ9NYeu7elOEgqjy0oaa4YHTpVqH8ckcKAlmFzfKVed6XCHJYZSIagpi
SJ3O7uzdNR0/JZnrsTnqdH2ACrFQ9xMwhnoPhcpGvtDk22TfmBEZ7UFzwn7L4rG5
oiJNANSHFiBWcjEb30/g2PrE
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:57 2025 by rpki-client