Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
File:                     h_17fpSNGju7kJe0WdcTt0M8C2U.mft (raw, json)
Hash identifier:          pfbyUl86gqHAxRyPmj6DD0OUlvS4YgmWjgTv0z1QEFM=
Subject key identifier:   C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
Authority key identifier: 87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65
Certificate issuer:       /CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
Certificate serial:       2E66
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
Manifest number:          2E66
Signing time:             Mon 20 Oct 2025 02:34:59 +0000
Manifest this update:     Mon 20 Oct 2025 02:34:59 +0000
Manifest next update:     Mon 20 Oct 2025 08:34:59 +0000
Files and hashes:         1: h_17fpSNGju7kJe0WdcTt0M8C2U.crl (hash: UHQIfEUERxHLucIv53cAPWvLPpyr2dTlOFq+nH8qi5A=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 08:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11878 (0x2e66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87FD7B7E948D1A3BBB9097B459D713B7433C0B65
        Validity
            Not Before: Oct 20 02:34:59 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=C3345DED0C47F98D2F7E31DDD0475585DA8793B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:3d:86:a9:25:8c:84:d2:47:0d:30:23:25:
                    bd:d1:70:38:60:c2:2c:2d:ac:14:bd:46:c4:40:26:
                    1d:a0:7f:40:53:55:29:99:99:09:51:8c:c4:9a:51:
                    6b:37:41:de:48:3a:cc:21:9d:6e:97:b8:af:bd:37:
                    a1:93:e7:c0:a5:22:f4:ee:bf:fa:1d:92:ef:3a:07:
                    ad:ad:91:9b:ef:8e:a1:7b:44:44:a9:b4:ac:59:5c:
                    ef:74:0f:12:63:cc:fc:6a:7b:e2:a7:62:71:b5:e6:
                    bb:51:aa:f9:83:25:6c:1e:d5:3e:b2:92:62:63:86:
                    02:22:de:8b:50:2b:3a:13:45:86:bf:7e:83:ba:21:
                    44:e5:d1:a7:e0:68:db:cd:fd:6b:88:e7:8a:a9:8c:
                    84:4e:b9:d1:f2:74:d6:e5:16:ea:14:87:60:31:ea:
                    dc:60:55:16:3e:2b:f0:ea:3e:34:b5:57:8b:e7:9d:
                    eb:15:6f:6f:e2:14:c5:8f:d8:f1:a0:1f:2d:30:e5:
                    fc:7a:cf:ec:74:87:d1:a1:d8:42:45:d8:0f:c4:c7:
                    a1:32:a7:37:37:aa:7d:75:78:f7:b3:48:8b:3a:05:
                    69:5d:ef:d8:1d:80:b5:bf:0b:8c:7c:c3:65:b7:a3:
                    6e:a0:63:a1:e3:d0:94:26:ad:18:02:3e:63:5d:b9:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:34:5D:ED:0C:47:F9:8D:2F:7E:31:DD:D0:47:55:85:DA:87:93:B9
            X509v3 Authority Key Identifier:
                keyid:87:FD:7B:7E:94:8D:1A:3B:BB:90:97:B4:59:D7:13:B7:43:3C:0B:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/h_17fpSNGju7kJe0WdcTt0M8C2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/643/h_17fpSNGju7kJe0WdcTt0M8C2U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:d9:4a:02:fd:c5:1f:f4:31:b1:03:f0:65:7e:15:0f:28:
         e9:02:1d:22:a2:e8:0a:94:92:f4:e7:6b:96:20:c1:e0:c3:aa:
         2f:f9:82:f6:63:5c:a4:5b:10:c4:cb:3e:59:47:d2:c0:ed:99:
         3c:4d:ce:7a:eb:1b:06:5e:c8:dc:2b:be:18:ea:99:02:c0:02:
         11:8e:47:54:d9:46:9f:f4:6d:b7:68:cf:c1:0a:a0:7a:60:74:
         00:38:f4:c8:d5:57:3e:65:f4:86:67:25:77:f9:39:e3:68:d6:
         d6:cf:6e:a4:40:ff:4f:65:b0:db:75:ff:0d:b5:c8:83:49:7f:
         f4:a6:44:8b:3c:8a:82:19:11:0a:fd:72:1d:3a:3f:67:1f:8f:
         38:90:66:88:d2:68:f6:cd:44:88:7c:e0:30:41:e4:6a:5a:05:
         71:d7:98:57:6a:fe:c6:ca:0a:83:f3:54:2c:ea:23:b4:96:8e:
         74:4f:b1:c9:eb:d8:00:e5:b2:c4:64:30:28:43:5f:d1:b4:56:
         5d:fe:be:62:ea:e7:6d:03:bf:16:1b:63:e8:08:1f:6b:d7:95:
         f9:ae:09:d7:81:23:98:34:56:b8:37:d8:71:91:da:63:00:3e:
         d9:48:2f:7b:b4:9b:8d:5f:19:44:49:f9:b9:be:30:d1:4a:5f:
         8e:7d:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:28 2025 by rpki-client