Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
File:                     EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft (raw, json)
Hash identifier:          zh9G4FXqChSsi+3EdNNFTGfW1UVKo0r9460gPZrK4G4=
Subject key identifier:   A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
Authority key identifier: 10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4
Certificate issuer:       /CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
Certificate serial:       0483
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
Manifest number:          0483
Signing time:             Wed 13 Aug 2025 16:05:19 +0000
Manifest this update:     Wed 13 Aug 2025 16:05:19 +0000
Manifest next update:     Wed 13 Aug 2025 22:05:19 +0000
Files and hashes:         1: EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl (hash: 3Ax7q9LHq8MS2XMflFzlim09avpcIOH23jyAfAM6gdg=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 22:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10E3282E8BC15405DDCB49A73D4AD0E087C927B4
        Validity
            Not Before: Aug 13 16:05:19 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=A9620144365395A8F6D895CCDE6821914F2DB639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:85:d9:83:6a:04:c7:2a:c0:b8:36:ec:5c:
                    95:b2:d3:67:cf:3a:c0:58:9f:4e:e0:3c:04:48:f2:
                    aa:70:44:64:8b:72:37:f7:d3:46:4b:d0:17:ab:26:
                    51:37:7f:48:a1:d7:cc:f3:41:ef:2d:26:a0:35:30:
                    20:cc:02:f5:26:d8:5d:3d:59:08:c8:e8:a3:b0:8b:
                    84:18:0f:2a:99:d9:2f:fc:31:06:51:52:b5:43:b5:
                    f7:09:c9:df:a0:da:e5:bf:7b:2d:59:f4:ec:55:1b:
                    b8:e3:c0:4f:16:40:7f:d9:c5:89:94:c1:42:32:f2:
                    9a:fb:9e:4c:f5:66:56:43:0b:67:0c:0e:0e:52:75:
                    91:df:75:77:6d:30:97:8f:ac:14:7f:86:7c:db:a7:
                    70:2e:03:26:65:f6:11:04:8c:77:53:2c:0a:41:70:
                    7b:c2:05:cc:4c:a7:53:55:85:41:8d:22:5d:36:0b:
                    d1:a1:5b:6a:a9:1a:c8:1e:4e:19:d4:51:74:93:c1:
                    c1:9a:61:54:58:ad:c8:a4:62:8c:c9:00:c0:d7:9f:
                    bd:9e:25:e9:1d:90:b8:24:90:64:b6:24:70:c5:81:
                    3e:9b:1c:55:cb:0d:8b:d0:7e:86:46:ac:60:00:27:
                    21:cb:ea:23:af:53:a5:84:25:12:9d:f8:20:0a:70:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:01:44:36:53:95:A8:F6:D8:95:CC:DE:68:21:91:4F:2D:B6:39
            X509v3 Authority Key Identifier:
                keyid:10:E3:28:2E:8B:C1:54:05:DD:CB:49:A7:3D:4A:D0:E0:87:C9:27:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3341/EOMoLovBVAXdy0mnPUrQ4IfJJ7Q.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:87:e7:ba:15:8d:40:55:56:5e:ef:60:ad:54:76:4d:e0:
         6b:cd:ed:bb:ea:c2:f1:e5:aa:b7:87:51:06:7d:03:95:ee:a5:
         94:6e:e0:a0:f9:f6:a8:4a:84:f1:01:63:3d:05:12:1c:d6:14:
         c4:00:a6:26:80:96:4c:9c:4f:bf:e2:73:cc:26:cd:92:34:6c:
         c7:aa:66:77:b9:7c:3f:5c:11:09:0f:6d:dd:24:82:7c:fc:93:
         33:2b:8b:43:c5:d9:71:9f:aa:3c:25:ad:57:30:df:6c:70:9f:
         1d:30:da:61:d9:4f:31:4e:64:f3:39:f3:a3:0f:c0:72:31:61:
         9a:66:1b:40:0d:b7:47:b8:22:1c:69:36:26:33:f4:bc:42:44:
         79:29:97:83:b1:99:11:ad:71:42:f0:82:51:7a:23:0b:0d:8e:
         cb:4b:98:34:60:b3:41:68:e8:0a:39:c6:0d:84:ec:63:4e:9c:
         96:02:ea:58:cc:9c:e5:56:7d:e3:08:04:e5:99:6c:bb:13:f5:
         f6:09:3d:6e:8d:b8:30:19:2b:f2:08:33:65:8d:69:92:bb:a9:
         b7:8a:65:5b:59:04:22:cb:04:f0:72:c0:cd:51:f1:9a:a1:ce:
         01:80:39:f9:58:30:ce:12:12:ba:09:40:8a:25:06:69:b9:64:
         7b:49:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:25:55 2025 by rpki-client