Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
File:                     RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft (raw, json)
Hash identifier:          wf7USKAlfgvIFNj2C/3baoH4V7WVebNAX+uqCn7kf9w=
Subject key identifier:   96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
Authority key identifier: 44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9
Certificate issuer:       /CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
Certificate serial:       062D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
Manifest number:          062D
Signing time:             Tue 03 Jun 2025 21:09:13 +0000
Manifest this update:     Tue 03 Jun 2025 21:09:13 +0000
Manifest next update:     Wed 04 Jun 2025 03:09:13 +0000
Files and hashes:         1: RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl (hash: mE0IG0xlmdvt1+uMjiASoi18kM0n1+Y/viEwlOobx0A=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Jun 2025 03:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44102D23BA956E9AB5C32873EE4632D93E4FDBE9
        Validity
            Not Before: Jun  3 21:09:13 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=965DAA4854B55928CDA25F51C6ECDDC2AB6B315D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:2a:c0:63:43:33:68:45:08:82:ca:c2:a0:
                    51:b5:e8:7a:1f:b3:51:96:2e:95:ad:80:41:1d:a4:
                    18:78:c8:12:7d:24:cb:44:c7:01:03:53:56:c4:06:
                    0a:46:c5:c1:68:9c:5b:ce:ed:6c:37:fc:87:83:46:
                    78:77:47:58:3f:19:54:26:a6:4a:76:09:46:ac:1c:
                    8a:8d:f5:f9:24:27:22:27:31:2d:ed:14:82:5e:c0:
                    10:46:b2:82:8f:34:b2:85:7a:10:60:8d:81:68:5b:
                    26:25:a3:d1:cf:e0:1e:1c:26:f7:4e:c9:c3:b7:14:
                    f0:53:d0:42:a1:da:2b:2a:05:ca:4a:c4:2d:03:21:
                    2c:04:8b:85:07:69:2c:84:9b:bf:47:af:3d:d6:61:
                    95:11:97:aa:c1:ac:2a:95:63:67:5c:d7:57:3e:8b:
                    02:f5:35:9d:d9:91:2f:61:50:d4:8d:56:82:ff:40:
                    1b:a0:4a:84:c6:3f:24:ec:28:77:d5:cb:8e:44:f8:
                    a4:21:cd:2e:64:24:82:98:dd:c6:4d:e8:64:9b:61:
                    df:e5:ae:da:7d:58:6b:4e:58:11:f1:72:43:a3:00:
                    2e:84:35:f8:54:de:5c:4c:d6:b0:aa:92:1b:f6:1d:
                    0f:0f:9e:f3:b2:24:a4:2d:d7:93:4f:97:15:df:85:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:AA:48:54:B5:59:28:CD:A2:5F:51:C6:EC:DD:C2:AB:6B:31:5D
            X509v3 Authority Key Identifier:
                keyid:44:10:2D:23:BA:95:6E:9A:B5:C3:28:73:EE:46:32:D9:3E:4F:DB:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RBAtI7qVbpq1wyhz7kYy2T5P2-k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3306/RBAtI7qVbpq1wyhz7kYy2T5P2-k.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:9f:84:76:e6:56:99:ee:06:16:5d:c2:8d:8f:4e:ea:a9:
         49:7d:70:a0:a3:95:43:67:b9:10:df:d7:61:33:dc:f6:f1:ac:
         9a:72:b1:af:d8:91:e0:9c:66:e0:e7:24:4e:6a:b9:2e:41:43:
         02:f2:6b:93:21:c5:f9:b9:2a:e5:d8:69:4c:8e:31:61:d9:0f:
         05:f0:8e:3e:7e:4e:f1:d2:86:0d:79:82:c9:3e:ef:38:37:89:
         4f:63:f0:53:95:aa:c9:a6:05:cb:13:58:76:92:b4:71:9a:8a:
         ce:5f:39:93:7a:e4:f5:3c:35:1a:58:75:44:89:6e:a1:7e:22:
         56:00:ff:36:9b:59:f5:14:1e:73:1d:7e:e7:24:bf:37:99:3a:
         5d:a9:13:32:27:e0:63:cf:3c:73:4a:26:75:16:c0:85:55:86:
         55:cc:f9:d9:f5:56:ee:9c:81:6c:f5:62:ab:bb:23:6b:5d:31:
         43:03:63:c8:d8:84:cb:a8:76:39:46:16:f6:43:91:c5:87:51:
         c8:32:f3:e8:de:9d:47:54:3a:b0:40:19:e6:ee:2b:70:da:ae:
         91:91:ea:3f:a7:18:c8:e6:95:c1:be:ee:86:68:6e:a8:db:dd:
         45:d9:38:25:d4:48:cd:5c:01:b4:c3:ee:00:0e:41:43:c6:ce:
         8e:d0:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:03 2025 by rpki-client