Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
File:                     kEgXQ3MJLmD9IX-_HSOR79WjObw.mft (raw, json)
Hash identifier:          iODZx2RvcLguD+BvtXMQRusn/k9bEQbDZCdp0DcddJE=
Subject key identifier:   30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
Authority key identifier: 90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC
Certificate issuer:       /CN=9048174373092E60FD217FBF1D2391EFD5A339BC
Certificate serial:       05EF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
Manifest number:          05EF
Signing time:             Wed 13 Aug 2025 16:05:51 +0000
Manifest this update:     Wed 13 Aug 2025 16:05:51 +0000
Manifest next update:     Wed 13 Aug 2025 22:05:51 +0000
Files and hashes:         1: kEgXQ3MJLmD9IX-_HSOR79WjObw.crl (hash: ybHnJ1s37CBkYbUUsNhAi+9tJFZG3iPFKkUj6wGfplk=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9048174373092E60FD217FBF1D2391EFD5A339BC
        Validity
            Not Before: Aug 13 16:05:51 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=30337587DFE9C72743A1F630DB98C1A2C739259F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:ba:ed:85:29:cf:39:2a:e0:6f:d7:56:94:
                    bb:25:1a:e8:39:74:40:39:fb:bd:da:af:13:2d:47:
                    33:f5:50:8d:d9:25:74:61:57:c8:7c:b5:ee:77:75:
                    26:19:fd:e8:c5:50:0f:30:90:42:9c:a0:85:78:91:
                    78:2c:e5:db:df:3f:7f:a2:1b:7d:eb:71:8b:82:65:
                    21:4d:df:57:ca:76:30:ba:09:8f:52:2e:d9:70:db:
                    e1:e2:52:6d:08:c4:16:f9:d1:ce:40:da:8c:e2:cd:
                    ee:58:d3:68:a5:ba:4b:c3:92:3c:72:03:94:92:b4:
                    6f:ac:4b:ad:6b:05:88:ad:f4:a3:8a:42:62:5e:fb:
                    8a:c6:3c:51:aa:e4:d4:cd:a0:c0:48:62:ea:8d:0d:
                    22:a2:86:63:e3:1a:a0:83:f8:67:df:e1:1d:f6:99:
                    b7:48:e6:07:d0:b2:58:a8:29:64:45:16:c4:ff:6b:
                    9e:3a:e2:25:f4:b4:8e:99:2f:fd:00:cc:05:a7:cd:
                    8c:a5:53:8a:ab:99:bc:93:65:99:bf:c7:2d:32:a2:
                    29:b4:12:82:3a:64:d8:8a:1a:4f:a2:37:90:cc:9c:
                    24:88:59:14:a3:b7:de:d3:4e:f5:0b:a2:e2:6b:ca:
                    93:65:10:e2:86:a5:71:56:fa:77:78:7b:19:cc:a1:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:75:87:DF:E9:C7:27:43:A1:F6:30:DB:98:C1:A2:C7:39:25:9F
            X509v3 Authority Key Identifier:
                keyid:90:48:17:43:73:09:2E:60:FD:21:7F:BF:1D:23:91:EF:D5:A3:39:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kEgXQ3MJLmD9IX-_HSOR79WjObw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3320/kEgXQ3MJLmD9IX-_HSOR79WjObw.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:1b:34:c3:83:89:e7:91:b6:a5:80:ac:52:03:8d:33:69:
         bc:2b:8a:ad:14:23:13:a6:ea:48:0c:30:f8:0c:36:9f:29:02:
         10:48:61:28:eb:ee:8f:a5:42:81:21:09:17:d5:94:d8:69:73:
         55:ec:77:62:fc:3b:8e:15:49:2e:26:3d:48:62:12:48:e9:18:
         5c:9f:19:74:ff:ed:42:85:bd:67:90:29:78:02:46:f7:db:a3:
         3d:7d:e2:04:53:b3:ff:87:39:fb:90:78:96:ec:1b:27:2e:97:
         8f:ba:bc:ad:8b:cd:46:3a:fd:bd:ab:17:95:04:30:19:ae:f3:
         b6:e8:22:6f:e2:99:1b:b0:61:d1:0b:e6:ab:7e:65:27:6c:8f:
         62:d9:18:75:2e:63:e7:28:ff:0b:6c:25:af:29:d9:6b:36:f8:
         65:49:80:06:db:2d:84:75:15:20:04:9d:cf:9c:75:7e:ba:3b:
         76:1a:f9:58:57:96:98:44:0c:44:c0:98:77:a5:21:31:6e:62:
         eb:a0:0c:7a:8f:1d:86:75:bb:85:f5:e8:a4:a3:96:cb:0e:dd:
         c4:1d:33:d8:73:06:af:45:78:6c:57:fe:d8:08:9c:aa:df:2e:
         31:6b:b8:01:45:89:f2:6b:65:95:b7:df:4a:b0:07:a1:c2:00:
         54:5f:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 19:12:11 2025 by rpki-client