Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
File:                     r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft (raw, json)
Hash identifier:          mTB4JNrrj41SnzXPYOjC6AHsPGoH3CeMQOrRq1ocxeg=
Subject key identifier:   D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45
Authority key identifier: AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9
Certificate issuer:       /CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
Certificate serial:       0836
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
Manifest number:          0836
Signing time:             Wed 13 Aug 2025 16:04:08 +0000
Manifest this update:     Wed 13 Aug 2025 16:04:08 +0000
Manifest next update:     Wed 13 Aug 2025 22:04:08 +0000
Files and hashes:         1: r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl (hash: 4nCDccy8KoILDKGtms0pMnOxeEnF3ZBm2ZWYAKnTh1w=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8A571C0C7CBA3193C7E941CF4631DC33023FD9
        Validity
            Not Before: Aug 13 16:04:08 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=D6B5D0D793BEE5208699C6F0E215FCD9707B1F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:d3:0e:1b:f9:dc:f6:c3:da:9d:8d:58:6b:
                    30:74:cc:fd:09:29:47:9c:42:0f:f9:5a:0c:5b:55:
                    53:de:89:be:bb:75:56:38:3b:da:0d:68:d3:2b:70:
                    b1:26:7a:56:ae:ba:25:52:b2:76:d1:4e:f7:45:ca:
                    d6:71:1f:b7:99:69:7a:00:54:ef:ae:86:fc:af:88:
                    78:a4:02:52:49:6e:1e:42:20:5c:5d:d4:93:21:45:
                    e6:2d:9b:4f:d4:1f:4a:75:a5:6a:62:9e:42:77:a2:
                    77:67:7b:8f:c8:cc:8a:b3:cc:64:11:c1:42:46:c4:
                    0a:8c:18:e6:ab:8d:da:1e:5b:5f:69:c8:02:8d:00:
                    ba:8d:99:4a:00:a9:63:9f:e1:98:17:5f:7e:e0:c9:
                    13:28:4f:df:dd:a6:7c:e5:95:05:b2:4b:fa:50:54:
                    fd:70:66:ba:85:3d:a9:a7:dd:04:08:ed:40:c0:21:
                    de:12:93:80:09:36:b2:16:c0:04:3a:5f:a1:12:18:
                    c6:5a:ec:e1:a5:92:18:ee:25:d9:96:fa:43:60:f4:
                    51:89:df:74:0e:96:d3:3a:54:72:a0:e3:b5:f8:b0:
                    97:44:2b:86:d0:c0:ee:6c:00:55:a1:de:ba:7e:79:
                    43:e8:04:5c:5f:7a:20:47:ad:55:f9:6f:15:cb:99:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B5:D0:D7:93:BE:E5:20:86:99:C6:F0:E2:15:FC:D9:70:7B:1F:45
            X509v3 Authority Key Identifier:
                keyid:AF:8A:57:1C:0C:7C:BA:31:93:C7:E9:41:CF:46:31:DC:33:02:3F:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3293/r4pXHAx8ujGTx-lBz0Yx3DMCP9k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:74:9f:5d:1b:f2:44:16:5b:b1:40:58:a0:06:ef:a7:33:
         4a:83:ea:ae:2c:37:30:1a:3b:4a:82:be:22:75:78:a4:11:57:
         44:99:a3:cb:0b:48:ae:47:fb:1b:ba:99:bb:7c:cd:ef:02:30:
         28:38:1b:b9:0e:7d:68:aa:4e:5b:2d:0f:29:1f:49:8c:de:2f:
         49:ae:f3:17:ff:21:c8:9f:7e:d8:b9:47:2c:75:b9:9e:11:51:
         55:40:7c:25:de:0e:da:18:ed:56:af:20:c3:b1:ac:1e:6e:53:
         7b:bd:39:f1:8e:cc:4a:87:ee:f9:b8:1d:5f:ae:55:ce:0f:42:
         7a:36:e8:f0:49:ef:0a:e9:71:6b:59:61:f4:b1:0d:10:ef:c1:
         65:8c:83:ec:f8:68:58:3a:05:cd:cc:95:be:be:1a:2e:b0:b8:
         4a:4d:b8:71:43:2c:6d:46:6a:47:40:e3:df:27:d9:ba:e6:f9:
         b8:2f:ea:76:42:f9:12:75:d1:38:12:51:c3:46:43:10:e9:e6:
         dd:50:07:8d:e2:58:5b:c5:a7:d9:e8:82:60:7d:0e:46:85:53:
         bb:40:67:73:86:c9:1d:f5:d6:b3:d9:00:9e:d4:19:6c:6e:0e:
         e4:de:50:c8:0d:c3:11:f6:66:ae:17:b6:5e:df:8a:c7:82:18:
         1a:87:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:07:11 2025 by rpki-client