Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
File:                     -b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft (raw, json)
Hash identifier:          Pp3j26BxZHZN9G93CKNRwIN8rDkR1HXmaVYnjIo2wsU=
Subject key identifier:   DD:B2:29:D2:FE:32:B2:E2:5B:B1:FA:2A:A6:D0:DC:06:0C:24:A8:88
Authority key identifier: F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04
Certificate issuer:       /CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04
Certificate serial:       0EFF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
Manifest number:          0EFF
Signing time:             Tue 21 Oct 2025 07:35:46 +0000
Manifest this update:     Tue 21 Oct 2025 07:35:46 +0000
Manifest next update:     Tue 21 Oct 2025 13:35:46 +0000
Files and hashes:         1: -b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl (hash: iYdyuQpdKBmqbth1OY/Bt6KS7NleUdxBBebHe3brEn0=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3839 (0xeff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9BE3342C9FE8DB62E2F3B799B330CCDE3FE0C04
        Validity
            Not Before: Oct 21 07:35:46 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=DDB229D2FE32B2E25BB1FA2AA6D0DC060C24A888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:51:5e:cf:dd:4f:c0:93:55:44:42:00:8b:
                    7e:a6:69:10:54:66:68:45:39:b5:6d:b5:7c:c0:53:
                    24:8a:a7:3e:85:bb:32:68:c9:f4:56:41:8f:86:87:
                    de:0b:67:51:d7:55:33:d1:88:d2:c8:b2:0a:7b:22:
                    9f:49:e6:30:74:89:61:5f:74:c1:fb:1f:72:10:77:
                    66:66:c0:f7:ea:e2:a9:ed:f7:4c:bc:6f:ff:8a:4d:
                    90:3c:ca:c5:04:9f:b5:4a:3b:d1:a8:55:e5:1e:65:
                    cc:16:b3:88:aa:9f:d4:0d:25:e4:ec:d6:a2:a3:24:
                    ff:62:20:0d:7f:9f:e4:22:15:e6:5d:21:25:08:a8:
                    b8:18:6d:c1:9f:2b:4d:cf:fa:5b:34:2e:48:16:6a:
                    bb:51:7f:a8:cd:3f:5e:83:29:27:69:b5:ef:ae:b6:
                    37:9d:54:ce:a0:57:ba:43:5b:35:b4:f6:09:c9:55:
                    6f:d3:54:08:6c:2c:dc:8e:6b:a2:b1:b1:65:ee:6b:
                    dc:dd:5c:1e:06:56:12:a7:cc:44:80:32:25:ed:53:
                    80:28:42:fb:8f:df:1b:bc:2f:38:39:a5:83:10:d6:
                    96:57:88:b3:6b:7a:9b:3f:2e:f3:f2:17:13:30:f5:
                    5c:6b:ac:bb:f3:73:2d:b5:e4:4a:b4:f3:97:b9:58:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:29:D2:FE:32:B2:E2:5B:B1:FA:2A:A6:D0:DC:06:0C:24:A8:88
            X509v3 Authority Key Identifier:
                keyid:F9:BE:33:42:C9:FE:8D:B6:2E:2F:3B:79:9B:33:0C:CD:E3:FE:0C:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/775/-b4zQsn-jbYuLzt5mzMMzeP-DAQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3c:cc:53:2b:97:03:63:49:49:66:f0:ec:7c:c2:90:92:8d:
         ff:48:a8:dc:c5:7a:f9:8b:1d:b2:1e:58:63:5a:5d:55:84:72:
         59:a2:25:c7:1f:d2:2d:44:83:35:1b:28:b4:ef:78:ac:e0:70:
         a9:64:ad:69:02:f0:b2:01:68:b1:2c:a0:ab:76:65:b1:ed:31:
         79:0a:94:4f:c0:ff:08:4f:f0:98:b3:0a:e6:3c:a4:8e:6d:cf:
         aa:c0:d7:ac:61:c4:c4:a4:86:9f:ad:95:a7:bc:95:78:e4:45:
         d8:f0:41:fd:b3:5b:4b:2c:bf:b4:59:e0:d2:db:f4:ca:8c:99:
         4e:4a:d2:da:14:9d:1f:8f:2b:e5:b0:dc:b8:9c:3c:3b:c8:a8:
         cb:63:85:50:26:3f:08:87:2b:73:8c:a5:7f:c4:0d:e1:de:eb:
         97:18:13:06:4f:e4:d1:20:eb:70:fb:33:8d:2c:23:f1:e8:0e:
         54:77:4b:be:74:29:e0:ca:8d:54:38:9d:4e:ba:5a:b2:d0:21:
         5b:88:48:61:1b:cb:a1:27:14:35:97:eb:c2:aa:c5:8d:c1:46:
         29:e8:4c:f7:34:88:94:a7:59:28:bb:ca:b6:f7:8d:0b:d8:7d:
         0f:43:25:fb:a6:60:74:48:39:20:9c:be:5b:31:a9:7a:ea:cb:
         0c:66:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:15:34 2025 by rpki-client