Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft
File:                     yxZwfq8L39Eyav2b3sav-m5jupg.mft (raw, json)
Hash identifier:          ZoR99dJQY+zV6c3p0os/K9UDnE32pnbMkmLZnJdFKb0=
Subject key identifier:   3E:A7:5D:13:9C:8C:A9:79:DD:22:BD:F5:C1:02:12:40:FB:CC:F9:07
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Certificate issuer:       /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial:       0DFA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft
Manifest number:          0DD5
Signing time:             Mon 08 Sep 2025 00:02:56 +0000
Manifest this update:     Mon 08 Sep 2025 00:02:56 +0000
Manifest next update:     Mon 08 Sep 2025 06:02:56 +0000
Files and hashes:         1: 97ad_V9gjeta71mcDWjobxSFplo.roa (hash: 9WkgIVAeGwOyq6J+cnXq/X0O6Hs/OuNeES2HB4KDO/A=)
                          2: BJ-O3PDAitrk2WmrvlNUc42anOk.roa (hash: psYNF8zopnBB3hw2V1psj7j4j7AFQdU9GdITGNN72fU=)
                          3: C3rraOFQOzyr2t_liETQ7LXyT_s.roa (hash: KvWCQOvwuyDnltKjiO/WIke3NfDmO4O9idygqvPUVZ0=)
                          4: LwqpANaQfgPYztUVixrCSwwSpb4.roa (hash: zRXAx7fdtjW6s8eYOV1hapaN/Lrdxhjvh/rsIcXhaHE=)
                          5: NDt9_Zy5xFmNFH8DWWCQrHH-AF0.roa (hash: FjYOpNGlHchQ1H5lVdER0sT7OhXYwZRVxoySSzp2x6o=)
                          6: NEIVfzA8gSdgIttGBAcC05dVuww.roa (hash: UEISRdPVouCB2TgBpa6JbQT7Rjbx48H/sDHyZI2N+xA=)
                          7: Ou9Mh8HtVO_3pMQh97VqyrWxmgo.roa (hash: 2D1MSRDWf/VlzhmTI+FdFguyzLILDrNJqO07CDQr4qg=)
                          8: ULqSC4GwPEFShTqbFNcCDKI6Hi0.roa (hash: R4oGAyXZf43GVTCiKXLq1aODq5CmaIK5EgCnSH+mJnY=)
                          9: ZU9LEfdkz_ai2UlyXANueDI1OgU.roa (hash: 10Nds2ZZb3+nVop90gK3sKg4ABGYNC+bvs2aqxObyC0=)
                          10: mYrHHv-tXUm8zvPCiVVHlFQeA-Y.roa (hash: Ndebnz/VJzrPk2L5DUkV8W9j8kHZFwUZcbNj85tMtoQ=)
                          11: sNXxpQ408tdgwXFnWK8OUqQDgo8.roa (hash: h09zP7klaJgGz0ySKA33BP7AKmE4xlmoPbzrtHGOIec=)
                          12: yxZwfq8L39Eyav2b3sav-m5jupg.crl (hash: qmWZ1hsP8IuKYmAULmCXNkb8FZ/UL7VzhcLVF6P5CnE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
        Validity
            Not Before: Sep  8 00:02:56 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=3EA75D139C8CA979DD22BDF5C1021240FBCCF907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:f2:7b:bc:0c:a6:c3:a8:82:72:ee:c6:69:
                    f6:f6:14:28:8d:bc:e9:9a:96:7a:bc:c7:f3:13:cb:
                    e7:e6:de:87:f0:12:e6:e4:e2:b7:5c:a0:3e:0d:66:
                    d4:77:0c:9c:1a:20:9f:bf:61:30:1a:59:f1:88:12:
                    1f:68:38:b4:6a:29:c4:0e:fb:df:61:52:a4:71:d2:
                    c2:2b:d0:b3:31:34:ac:a1:0a:ab:e4:c6:fd:2c:74:
                    65:fe:e2:c2:16:bc:b5:7b:40:d6:96:4d:ba:d3:6f:
                    e1:d4:59:0c:13:fd:24:82:04:32:b2:69:7b:9f:f8:
                    59:36:dc:72:d8:d2:64:60:12:b2:bc:84:dd:49:62:
                    95:19:ae:58:fd:fe:43:40:56:0b:32:a2:ee:8b:98:
                    e1:0f:a7:7a:cc:56:0c:6d:1e:54:1c:9e:db:b1:20:
                    6b:5b:d8:3c:24:2e:12:28:13:13:82:ff:3f:01:87:
                    50:e3:ad:8b:28:37:74:da:6d:34:21:d6:3e:ff:2f:
                    5d:ae:3c:8d:50:ac:72:6b:6c:41:c8:21:db:70:04:
                    90:c0:21:29:19:db:7f:e4:42:95:41:a6:c7:cc:77:
                    a0:76:ed:15:4b:cf:ea:fa:cb:53:40:59:82:f3:34:
                    f2:4c:74:77:36:ce:41:7d:4a:69:13:d0:7a:3f:1e:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:5D:13:9C:8C:A9:79:DD:22:BD:F5:C1:02:12:40:FB:CC:F9:07
            X509v3 Authority Key Identifier:
                keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:c9:78:39:2d:0f:f5:94:9b:03:13:ae:ad:e4:2d:f6:b0:
         37:e4:ea:8d:e4:77:82:07:ea:cd:8e:83:c8:58:5b:2c:15:de:
         2c:55:62:b6:f5:78:f8:60:71:67:01:e5:33:d5:80:a8:a0:e3:
         60:16:7d:91:3e:7f:bb:90:49:7c:d5:7f:57:f2:83:c7:7d:2b:
         6e:a7:f4:9b:62:77:e9:e1:95:af:26:ae:64:77:c9:2e:2c:b9:
         bd:53:d4:f4:4a:a8:b3:ad:4d:1b:51:ed:82:7a:db:d4:1e:02:
         90:be:86:de:ed:f5:d2:27:37:11:e3:ec:67:8a:20:47:26:d6:
         4b:9d:7b:6a:7d:d4:8d:a6:6c:ee:92:6e:23:09:9a:2a:e1:62:
         48:9c:2d:8f:8c:26:81:d3:f2:92:d5:6c:e3:9c:29:e6:a7:52:
         02:ee:be:2c:d5:8c:26:fb:bf:bc:c7:c9:16:b2:51:4c:6b:71:
         13:9e:0a:89:51:09:59:3a:0f:e4:ab:b9:cd:95:fe:7f:b3:4e:
         c1:3d:a5:72:37:e0:28:34:a9:26:2d:a5:95:33:50:f6:cf:6f:
         25:b1:41:3c:48:ee:da:10:3c:a2:f2:da:b9:df:55:e7:97:7f:
         ec:76:ec:32:4a:62:e9:74:d7:0b:89:24:0a:a2:21:6c:bb:8a:
         0a:2a:ca:51
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTA5MDgw
MDAyNTZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDNFQTc1RDEzOUM4Q0E5
NzlERDIyQkRGNUMxMDIxMjQwRkJDQ0Y5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi4PJ7vAymw6iCcu7Gafb2FCiNvOmalnq8x/MTy+fm3ofwEubk
4rdcoD4NZtR3DJwaIJ+/YTAaWfGIEh9oOLRqKcQO+99hUqRx0sIr0LMxNKyhCqvk
xv0sdGX+4sIWvLV7QNaWTbrTb+HUWQwT/SSCBDKyaXuf+Fk23HLY0mRgErK8hN1J
YpUZrlj9/kNAVgsyou6LmOEPp3rMVgxtHlQcntuxIGtb2DwkLhIoExOC/z8Bh1Dj
rYsoN3TabTQh1j7/L12uPI1QrHJrbEHIIdtwBJDAISkZ23/kQpVBpsfMd6B27RVL
z+r6y1NAWYLzNPJMdHc2zkF9SmkT0Ho/HmpLAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUPqddE5yMqXndIr31wQISQPvM+QcwHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUveXhad2ZxOEwzOUV5
YXYyYjNzYXYtbTVqdXBnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGatyXg5LQ/1lJsDE66t5C32sDfk6o3kd4IH6s2Og8hYWywV3ixVYrb1ePhg
cWcB5TPVgKig42AWfZE+f7uQSXzVf1fyg8d9K26n9Jtid+nhla8mrmR3yS4sub1T
1PRKqLOtTRtR7YJ629QeApC+ht7t9dInNxHj7GeKIEcm1kude2p91I2mbO6SbiMJ
mirhYkicLY+MJoHT8pLVbOOcKeanUgLuvizVjCb7v7zHyRayUUxrcROeColRCVk6
D+Sruc2V/n+zTsE9pXI34Cg0qSYtpZUzUPbPbyWxQTxI7toQPKLy2rnfVeeXf+x2
7DJKYul01wuJJAqiIWy7igoqylE=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:13 2025 by rpki-client