Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
File:                     6ExiO8s49imh7IolaGifaOjftzI.mft (raw, json)
Hash identifier:          W5avYjDWE1+lLSBYbn6t75ygliMJN384YYgEL8CaMBo=
Subject key identifier:   77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F
Authority key identifier: E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32
Certificate issuer:       /CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732
Certificate serial:       07F8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
Manifest number:          07F8
Signing time:             Wed 13 Aug 2025 16:04:26 +0000
Manifest this update:     Wed 13 Aug 2025 16:04:26 +0000
Manifest next update:     Wed 13 Aug 2025 22:04:26 +0000
Files and hashes:         1: 6ExiO8s49imh7IolaGifaOjftzI.crl (hash: mXkD4a2G2a1Z5mFxgyxZzVhI02kK1qBYmPfAx0g7PNA=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2040 (0x7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84C623BCB38F629A1EC8A2568689F68E8DFB732
        Validity
            Not Before: Aug 13 16:04:26 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=77F78EBE9B2B774078DC1CA651FBCAF031472A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:b3:2e:96:ff:1b:eb:3d:7a:37:56:6e:e6:
                    ea:bc:24:34:f7:c5:fc:90:55:dd:3b:bd:24:5b:25:
                    6a:da:56:d3:6a:f3:0e:f9:49:80:ca:5d:ff:90:f9:
                    a8:ab:34:fa:51:b5:b3:9a:98:16:38:e3:f6:ea:23:
                    26:ca:7c:24:ca:37:ac:21:9a:0c:05:ba:bc:6b:d6:
                    35:55:4a:f0:8c:51:5f:11:d3:3e:7f:7f:08:1d:09:
                    e9:f8:0b:ea:f5:25:cd:7e:0a:48:e8:3b:e0:90:d6:
                    f1:16:a7:1b:15:80:dd:b0:fb:55:f3:f8:20:f1:3e:
                    20:77:eb:20:36:21:3a:99:33:fa:18:64:32:b7:3c:
                    2e:3c:38:eb:4a:a1:21:6a:06:e3:7d:b8:d2:ff:eb:
                    1c:67:24:95:16:a7:c5:be:71:37:1e:e3:03:d5:f2:
                    c6:8a:86:ad:db:1f:d2:e1:e5:e6:5b:ea:87:3d:20:
                    30:d9:49:1f:71:c7:69:be:1c:51:c2:15:32:78:5c:
                    6c:be:e3:72:64:ed:46:d4:98:4f:45:29:a5:8a:7c:
                    c7:6e:d6:42:04:d6:52:73:ca:bd:70:40:3e:52:0d:
                    a3:02:d8:c2:4a:21:21:c2:00:36:80:04:3e:63:b1:
                    05:99:6b:d9:53:93:3a:16:16:49:0f:74:a4:36:f4:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:8E:BE:9B:2B:77:40:78:DC:1C:A6:51:FB:CA:F0:31:47:2A:2F
            X509v3 Authority Key Identifier:
                keyid:E8:4C:62:3B:CB:38:F6:29:A1:EC:8A:25:68:68:9F:68:E8:DF:B7:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6ExiO8s49imh7IolaGifaOjftzI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/6ExiO8s49imh7IolaGifaOjftzI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:03:27:fa:af:a4:8e:4c:b7:e3:b3:e1:20:e6:0f:93:36:b7:
         22:a5:53:df:03:17:28:a3:c3:c9:97:29:71:07:e3:ad:43:9c:
         e0:fb:76:a8:5a:ee:d0:e6:e9:2c:83:36:bf:a2:e6:6c:23:3f:
         df:bc:97:65:70:18:9e:80:3e:75:7a:e9:40:72:ed:11:b8:00:
         49:58:7d:2e:ca:35:59:2b:62:e6:c7:9d:ab:3b:99:44:b3:96:
         ac:4b:be:23:60:05:cf:ad:7c:da:94:e3:c0:a5:3e:27:86:2a:
         7a:4a:ba:67:53:21:bc:ec:90:49:14:50:8b:f8:de:03:34:97:
         73:71:31:b7:66:31:93:3f:5e:96:f7:8a:1c:e1:b5:ad:e9:6b:
         31:fb:1f:5c:7f:b4:36:06:f2:68:ab:1c:d8:2c:6d:02:2a:c6:
         3e:c8:de:84:7c:58:20:7e:7a:9f:96:02:d0:88:23:5a:6d:8f:
         cf:88:43:59:2f:de:01:37:e7:5b:9e:2b:d8:cb:8b:0e:d3:2f:
         88:2d:19:4b:d3:d8:4d:a0:7a:b0:a6:bb:48:b5:fe:b3:7a:86:
         54:aa:66:1a:44:0f:70:e7:a2:74:84:4c:5c:97:f4:54:0a:d5:
         92:5d:61:08:78:50:1b:3d:1f:cb:04:f0:00:2e:0a:fe:a2:42:
         ca:76:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:12:10 2025 by rpki-client