Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
File:                     Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft (raw, json)
Hash identifier:          8x9VXrpDMlF+AVOFAPmnzkSr4sGkd72bKIAaA0uS0V8=
Subject key identifier:   6B:DC:56:95:F8:22:19:42:B6:21:F8:20:46:EF:0A:5B:E1:72:03:F9
Authority key identifier: 46:AE:8C:25:C7:79:9C:4D:40:CA:68:74:83:64:C4:9A:A6:A7:0D:3C
Certificate issuer:       /CN=46AE8C25C7799C4D40CA68748364C49AA6A70D3C
Certificate serial:       4CD7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
Manifest number:          4CD7
Signing time:             Mon 20 Oct 2025 03:08:30 +0000
Manifest this update:     Mon 20 Oct 2025 03:08:30 +0000
Manifest next update:     Mon 20 Oct 2025 09:08:30 +0000
Files and hashes:         1: Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl (hash: H6CL/Ru60Rl1Te0vB9V+UZXIglrhgPcmQ8jIg9OsbLg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19671 (0x4cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46AE8C25C7799C4D40CA68748364C49AA6A70D3C
        Validity
            Not Before: Oct 20 03:08:30 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=6BDC5695F8221942B621F82046EF0A5BE17203F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:cc:9a:cd:aa:86:25:b0:bd:c0:b2:cc:38:
                    cb:b4:1c:ed:ac:ab:78:57:1b:ae:7a:bd:ea:7e:ca:
                    8c:0b:5c:e8:c0:74:6e:43:26:2c:6d:21:df:31:b2:
                    60:f6:ea:3c:84:77:f9:60:d5:63:73:94:6d:e8:f8:
                    5e:bb:5f:34:3e:9e:13:31:d4:ab:ac:98:8a:29:57:
                    a7:01:eb:fd:ab:60:33:0d:79:2d:8f:c4:d6:74:58:
                    28:07:60:6a:9b:0a:bc:5b:ba:9a:4e:a1:f6:d3:fe:
                    b8:89:7a:b1:0a:b6:de:a1:5e:19:2c:95:bf:a5:cf:
                    53:b5:33:1e:39:3c:7b:c5:b8:bf:05:3c:f8:b4:8b:
                    b5:5d:f6:4d:8a:25:a4:a6:8b:cb:49:ce:3a:13:43:
                    c4:4d:e9:34:64:fd:23:9c:26:37:9a:90:99:ae:7a:
                    68:e9:b1:fa:af:55:3d:60:51:10:06:ae:3c:f8:e1:
                    e3:8b:bc:06:fa:76:4a:98:ec:30:99:be:99:ce:67:
                    20:e0:09:a1:74:0e:63:18:c9:4a:33:5d:18:02:1e:
                    cf:b7:0f:ed:4d:e7:d1:4a:eb:35:47:db:73:e9:19:
                    7b:a5:b6:5a:e1:b6:69:5d:ca:89:34:48:53:91:c2:
                    b8:78:95:72:c4:43:84:4e:ba:7b:c2:83:94:70:65:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:56:95:F8:22:19:42:B6:21:F8:20:46:EF:0A:5B:E1:72:03:F9
            X509v3 Authority Key Identifier:
                keyid:46:AE:8C:25:C7:79:9C:4D:40:CA:68:74:83:64:C4:9A:A6:A7:0D:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rq6MJcd5nE1Aymh0g2TEmqanDTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/556/Rq6MJcd5nE1Aymh0g2TEmqanDTw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:fd:88:8d:27:13:4c:ab:a2:0b:89:0a:24:07:12:f3:df:
         a1:67:88:3d:90:a4:06:0c:85:24:7c:4b:2f:38:6c:b5:fa:7a:
         3d:d4:4c:de:05:2f:a2:e4:a3:9a:5b:1e:ed:70:38:fd:1c:12:
         ae:c4:15:c9:c0:98:ff:65:d2:1f:4d:4a:7c:e7:a3:85:49:27:
         7a:a2:1d:02:db:22:00:c3:e4:b2:78:6f:dc:ca:e3:46:35:20:
         65:3e:56:11:47:f9:8d:c6:0f:7b:18:7e:9c:05:c5:4e:d5:c1:
         b9:34:d0:ad:4e:eb:58:10:d8:8d:1d:d1:84:f8:d8:f2:08:c9:
         7c:b7:e7:80:07:57:d1:58:74:6b:a6:e7:6c:5a:3b:91:69:85:
         35:f7:c9:b3:0d:b7:30:cc:1c:90:90:4f:16:4a:46:0e:4e:6c:
         8e:c7:05:8b:4e:3b:f1:bf:27:e2:0b:57:97:aa:d1:f9:9a:ef:
         c2:69:4d:5d:ca:74:51:9c:fe:5e:ee:e3:90:46:f0:04:49:c4:
         c3:7e:67:1a:57:7c:72:e3:cc:d1:31:4a:b1:b7:1d:4b:68:8e:
         92:5e:d4:91:5a:ae:d2:3f:e0:27:20:1e:12:93:bd:40:81:d7:
         3f:ac:5c:b7:59:a0:38:8e:72:cd:4e:0a:ad:62:14:3f:25:ae:
         11:19:cd:23
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICTNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZB
RThDMjVDNzc5OUM0RDQwQ0E2ODc0ODM2NEM0OUFBNkE3MEQzQzAeFw0yNTEwMjAw
MzA4MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZCREM1Njk1RjgyMjE5
NDJCNjIxRjgyMDQ2RUYwQTVCRTE3MjAzRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1x8yazaqGJbC9wLLMOMu0HO2sq3hXG656vep+yowLXOjAdG5D
JixtId8xsmD26jyEd/lg1WNzlG3o+F67XzQ+nhMx1KusmIopV6cB6/2rYDMNeS2P
xNZ0WCgHYGqbCrxbuppOofbT/riJerEKtt6hXhkslb+lz1O1Mx45PHvFuL8FPPi0
i7Vd9k2KJaSmi8tJzjoTQ8RN6TRk/SOcJjeakJmuemjpsfqvVT1gURAGrjz44eOL
vAb6dkqY7DCZvpnOZyDgCaF0DmMYyUozXRgCHs+3D+1N59FK6zVH23PpGXultlrh
tmldyok0SFORwrh4lXLEQ4ROunvCg5RwZUu/AgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUa9xWlfgiGUK2IfggRu8KW+FyA/kwHwYDVR0jBBgwFoAURq6MJcd5nE1Aymh0
g2TEmqanDTwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTU2
L1JxNk1KY2Q1bkUxQXltaDBnMlRFbXFhbkRUdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvUnE2TUpjZDVuRTFBeW1oMGcyVEVtcWFuRFR3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTU2L1JxNk1KY2Q1bkUxQXlt
aDBnMlRFbXFhbkRUdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBe2v2IjScTTKuiC4kKJAcS89+hZ4g9kKQGDIUkfEsvOGy1+no91EzeBS+i5KOa
Wx7tcDj9HBKuxBXJwJj/ZdIfTUp856OFSSd6oh0C2yIAw+SyeG/cyuNGNSBlPlYR
R/mNxg97GH6cBcVO1cG5NNCtTutYENiNHdGE+NjyCMl8t+eAB1fRWHRrpudsWjuR
aYU198mzDbcwzByQkE8WSkYOTmyOxwWLTjvxvyfiC1eXqtH5mu/CaU1dynRRnP5e
7uOQRvAEScTDfmcaV3xy48zRMUqxtx1LaI6SXtSRWq7SP+AnIB4Sk71Agdc/rFy3
WaA4jnLNTgqtYhQ/Ja4RGc0j
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:17 2025 by rpki-client