Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
File:                     DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft (raw, json)
Hash identifier:          3JzscAFXjMT4IwBr+k11i9rF1g6XLwkvZJ1udJdXPdQ=
Subject key identifier:   FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       188E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
Manifest number:          188E
Signing time:             Wed 13 Aug 2025 16:05:54 +0000
Manifest this update:     Wed 13 Aug 2025 16:05:54 +0000
Manifest next update:     Wed 13 Aug 2025 22:05:54 +0000
Files and hashes:         1: DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl (hash: YqSOQBPEZvS+pOvZVX6+sR0Ffg+sntr4nwsZf7btUpg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6286 (0x188e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Aug 13 16:05:54 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=FCF5439A91CB5C8B12A0B1D20ABD085D68E38CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:5c:90:18:ef:c8:62:22:03:31:02:88:92:
                    ba:69:ac:3b:08:40:66:9e:e0:16:c3:6c:fb:4c:c1:
                    42:4b:e7:72:0e:3c:24:8a:f0:06:ab:87:ce:8e:68:
                    ff:2f:b6:f5:69:a5:47:f1:d8:ee:20:52:61:a7:ad:
                    4b:ce:b6:f9:47:df:5a:23:da:7e:e4:c0:b0:6c:d3:
                    51:fb:0e:f4:7e:65:09:72:b0:99:91:7c:e5:83:25:
                    2f:00:a1:35:2d:fe:86:ab:69:7c:dc:fc:ee:b3:ec:
                    58:d7:af:49:db:c1:42:b2:6f:b4:1b:47:da:34:4f:
                    14:37:4e:d7:f6:66:6b:e2:d6:b5:ba:f5:a2:dc:e3:
                    1d:db:7a:06:81:50:e1:74:a7:9f:b6:1a:ca:b9:36:
                    49:3a:4d:e4:d4:48:1f:5e:49:58:cc:14:4c:b3:cf:
                    bf:33:ba:7b:4d:3b:0c:fb:cc:4b:84:da:79:9c:b5:
                    75:a8:ad:41:96:48:56:08:c6:1d:f2:63:2a:3f:01:
                    14:51:0a:c0:0a:fc:e2:1c:c7:01:8b:fd:57:c6:d4:
                    f1:dd:cb:ac:1a:80:eb:7d:50:13:a9:29:7f:90:00:
                    ec:d5:8e:bb:bc:8b:cf:d3:5b:89:a4:c0:5f:d7:d9:
                    49:9e:d9:e2:9c:da:0f:05:3d:58:c3:7a:cd:05:31:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:43:9A:91:CB:5C:8B:12:A0:B1:D2:0A:BD:08:5D:68:E3:8C:E2
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:c5:df:35:9c:b3:c1:8f:b6:3d:9e:c9:22:3f:69:38:6b:
         3c:9e:60:cd:d4:b9:18:54:d6:7a:50:82:cd:6c:2c:ce:4d:ac:
         ae:23:28:5b:0e:f7:27:44:95:0f:b7:ff:cf:4e:ae:f3:66:36:
         a0:07:be:f7:46:9e:35:7d:db:d1:1e:d6:34:65:8f:b6:11:8c:
         4c:62:14:b3:02:9e:27:16:56:f4:17:15:a5:1d:b5:e4:37:8c:
         13:a8:4b:31:5d:58:8a:a7:e6:5b:b1:85:c0:d4:9c:61:9b:01:
         83:90:51:7f:78:31:67:85:50:38:b0:dc:a9:68:66:b5:45:29:
         a2:64:89:63:f7:7c:09:f4:96:7e:57:4a:32:50:a6:a7:84:34:
         9f:7c:bc:fe:58:08:9f:59:f7:25:e1:de:e2:97:39:3a:3c:06:
         d7:c3:16:2c:39:66:bd:48:83:e8:cf:3a:ae:77:e9:a4:c2:37:
         aa:b2:a1:d8:c5:66:5f:76:58:a3:54:d8:bb:5b:3d:89:83:ef:
         09:27:1b:53:b3:0d:96:85:d8:37:d7:e4:38:6f:9f:2e:f1:14:
         ba:3a:68:3f:25:f1:00:c8:23:ec:2a:f0:3b:68:48:cc:a0:d3:
         98:a4:d9:a0:2c:0e:07:96:9f:79:62:d0:3c:03:b3:02:67:f2:
         83:e1:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:07:09 2025 by rpki-client