Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
File:                     0Thk00ASqL2IAiF99LmT9iQBB2w.mft (raw, json)
Hash identifier:          WZkt5O6lkF8/OdSaNUFOW+KQ+fldb4QK3DCtPRx1CdM=
Subject key identifier:   00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
Authority key identifier: D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C
Certificate issuer:       /CN=D13864D34012A8BD8802217DF4B993F62401076C
Certificate serial:       0619
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
Manifest number:          0619
Signing time:             Wed 05 Nov 2025 20:14:19 +0000
Manifest this update:     Wed 05 Nov 2025 20:14:19 +0000
Manifest next update:     Thu 06 Nov 2025 02:14:19 +0000
Files and hashes:         1: 0Thk00ASqL2IAiF99LmT9iQBB2w.crl (hash: bValsm9rkpARijx1AnerAlzyM3ouP8KeBA1hArQmhWY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 02:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D13864D34012A8BD8802217DF4B993F62401076C
        Validity
            Not Before: Nov  5 20:14:19 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=0091B73BA0641118D02A80455962198207B83AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:dd:4f:f5:72:89:66:0d:f6:f6:47:59:ec:
                    ef:40:b2:1c:56:8e:08:72:8a:d3:68:9a:b4:0f:7c:
                    ea:16:27:97:c8:f2:4c:ec:26:15:97:6c:e3:16:9a:
                    09:5c:90:34:44:85:54:23:41:4d:b4:41:a7:41:92:
                    f2:33:4c:fe:3b:19:8c:40:d3:bc:8f:e3:31:d6:2e:
                    c7:fe:4c:6c:3e:e4:ef:c8:74:0a:db:1d:3c:e2:07:
                    38:d5:0c:a0:16:fc:6f:22:f5:09:8f:2b:ad:b0:11:
                    2f:ec:3f:04:f1:82:ed:38:51:42:d2:46:ab:fb:e4:
                    24:f6:1a:60:04:66:6a:4b:5a:9d:78:14:c1:84:90:
                    c1:4c:a3:6e:14:e2:3b:7c:dd:5d:e1:c1:d2:83:6f:
                    11:6d:40:89:48:47:e2:d6:c4:63:c5:e8:c7:15:d1:
                    ed:eb:a7:fb:b5:09:fe:b5:d7:c3:a5:e4:6a:dc:61:
                    dd:8f:73:dd:fe:ec:f4:da:7a:40:a0:61:62:f5:c5:
                    35:6a:28:36:e0:ef:db:a9:1b:f7:40:e1:fa:12:9f:
                    67:c5:4e:48:84:83:1d:93:c7:b3:3f:ba:c4:09:25:
                    8a:b4:b0:a9:b7:68:8c:a9:b3:88:a5:ba:d1:75:16:
                    2c:0c:36:fc:c2:72:a2:1b:56:c0:e1:c5:6c:d9:4a:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:91:B7:3B:A0:64:11:18:D0:2A:80:45:59:62:19:82:07:B8:3A:C5
            X509v3 Authority Key Identifier:
                keyid:D1:38:64:D3:40:12:A8:BD:88:02:21:7D:F4:B9:93:F6:24:01:07:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0Thk00ASqL2IAiF99LmT9iQBB2w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3343/0Thk00ASqL2IAiF99LmT9iQBB2w.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:72:8e:f7:83:19:de:09:d0:59:c8:fe:04:e2:f8:9a:2c:
         8d:b4:76:31:33:83:4a:43:de:88:45:f9:82:e2:4b:94:0f:c4:
         1f:54:4d:9c:32:96:4c:e5:12:1f:b4:58:f0:82:03:a3:65:bc:
         9d:b9:da:43:19:58:16:6a:c4:62:d4:53:e8:3b:d4:1d:de:b5:
         f0:78:65:5f:73:cd:aa:c1:94:a4:16:22:0a:2f:e4:c9:cf:34:
         f2:fe:6a:73:74:37:92:05:c1:c1:91:06:1c:6e:6d:ff:6c:41:
         5f:2a:53:86:5e:88:f0:42:50:2f:b1:86:a9:4a:35:7a:44:0c:
         65:aa:54:e0:95:ef:6b:fe:0c:3c:f3:aa:c5:1d:1e:26:e6:f8:
         41:1f:9d:af:4d:53:fe:1e:cd:cc:14:c5:85:ea:94:67:e8:40:
         c8:5f:4e:92:91:17:42:9f:57:c2:93:48:49:db:7f:91:4f:84:
         4f:cb:d0:2f:e1:74:4c:e6:f0:34:e8:d2:61:78:a1:b5:ad:94:
         cc:07:81:ab:60:e9:f3:a3:7c:a4:95:db:6a:f8:1d:82:53:49:
         15:75:2f:fd:2f:df:38:a3:c6:2b:4e:7c:e6:f4:90:cd:75:57:
         cc:36:fe:56:86:19:10:cd:9f:d5:98:4d:38:01:f9:3d:e9:fa:
         eb:1b:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:15:45 2025 by rpki-client