Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
File:                     94vx0ILraGpYQf5xsAL3zXu4b3U.mft (raw, json)
Hash identifier:          fSbUBLxr7YuCZ2kgHe7QUNVKq/gNiRNQOVBTvblR15Q=
Subject key identifier:   3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
Authority key identifier: F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75
Certificate issuer:       /CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
Certificate serial:       3AF5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
Manifest number:          3AF5
Signing time:             Sun 20 Jul 2025 11:44:53 +0000
Manifest this update:     Sun 20 Jul 2025 11:44:53 +0000
Manifest next update:     Sun 20 Jul 2025 17:44:53 +0000
Files and hashes:         1: 94vx0ILraGpYQf5xsAL3zXu4b3U.crl (hash: eR4jt46pbi8yAvbR6mQ3xHDhkS3nZheItEIyt2V0QHI=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 13:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15093 (0x3af5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78BF1D082EB686A5841FE71B002F7CD7BB86F75
        Validity
            Not Before: Jul 20 11:44:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=3B987191E7BF5E432C382D9B7CEF182E3F4687AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:97:1c:6f:47:43:47:d0:0f:a8:77:a2:c1:
                    6c:a5:3c:fd:e2:df:d5:ae:46:46:04:a7:ff:5e:a3:
                    2f:78:61:66:e6:fb:28:75:ab:70:0f:a9:32:b8:e1:
                    bc:d8:7f:17:32:a0:19:97:f8:7a:f6:01:c1:3e:31:
                    4e:55:ec:d7:a3:00:b1:bd:cf:1a:3b:6c:9d:9c:36:
                    28:d3:34:e6:ae:f5:de:46:44:a0:f2:51:3e:c8:cc:
                    db:89:a0:a0:ab:cd:00:ff:96:24:e9:41:d1:08:72:
                    9a:6d:d3:9f:96:ee:7d:0c:ad:08:37:5d:10:df:cc:
                    36:77:46:4f:13:70:cb:04:ee:97:26:05:4c:17:80:
                    1d:1f:f0:53:9a:16:0d:a0:07:30:a3:a6:84:2f:51:
                    e2:ff:79:3e:9f:44:46:4c:1a:53:d2:0e:d8:cf:65:
                    fc:a4:64:f6:be:d2:b3:5c:23:18:66:78:98:e2:12:
                    78:d8:89:c4:1c:08:bb:6f:81:e4:71:c3:92:84:fa:
                    0d:97:1b:56:32:67:ec:bc:8d:12:fc:4f:2a:61:b5:
                    e4:fa:2f:0e:14:83:82:ae:fa:fb:9f:7a:b7:32:e8:
                    6a:26:56:54:27:d2:31:81:3f:e3:de:ef:49:5a:37:
                    dc:b0:4a:06:8b:cb:93:a4:ce:97:2e:45:3a:d0:6c:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:71:91:E7:BF:5E:43:2C:38:2D:9B:7C:EF:18:2E:3F:46:87:AF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:F1:D0:82:EB:68:6A:58:41:FE:71:B0:02:F7:CD:7B:B8:6F:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/94vx0ILraGpYQf5xsAL3zXu4b3U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/333/94vx0ILraGpYQf5xsAL3zXu4b3U.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:62:35:2d:38:4c:2c:da:a8:fb:0f:03:13:0a:77:8e:fe:c7:
         9e:4f:26:53:80:dd:1f:11:0e:1f:b6:1e:03:b2:fb:2a:84:94:
         f8:c6:00:9e:b8:35:82:2e:70:b2:73:92:b7:a7:57:97:99:0a:
         c4:f3:1d:9d:99:a4:a8:d7:a5:64:ea:55:30:ea:74:1c:da:ae:
         8a:11:9c:c6:01:fd:3b:26:98:7b:0a:78:34:75:c8:98:98:f5:
         d5:e0:e5:d0:e0:6e:aa:10:22:2d:19:49:e5:de:63:a2:f5:41:
         e3:50:a4:a3:59:ed:29:7a:02:58:4e:ce:14:0e:59:96:49:bf:
         b9:33:9d:3d:c4:bf:22:1f:3d:3d:93:1a:6e:97:ff:c0:a1:e0:
         2f:74:48:55:c2:a0:6c:51:dd:81:ad:b4:c7:a8:e3:4a:4f:b3:
         42:4b:75:a6:15:eb:3e:96:1b:3f:db:99:69:2c:23:54:e1:58:
         20:c6:f5:53:98:df:90:1b:ec:91:6c:e5:05:40:4d:8b:d2:ca:
         7f:b9:71:2a:68:53:8e:15:e2:7e:52:df:35:cc:fc:11:09:77:
         84:a1:a9:86:d2:15:76:f4:aa:fc:b9:3c:56:d5:60:e5:18:f4:
         5d:73:22:8c:8f:93:20:3b:84:ca:0a:b5:8a:28:48:a9:99:9f:
         45:f8:91:d9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICOvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjc4
QkYxRDA4MkVCNjg2QTU4NDFGRTcxQjAwMkY3Q0Q3QkI4NkY3NTAeFw0yNTA3MjAx
MTQ0NTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNCOTg3MTkxRTdCRjVF
NDMyQzM4MkQ5QjdDRUYxODJFM0Y0Njg3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa1pccb0dDR9APqHeiwWylPP3i39WuRkYEp/9eoy94YWbm+yh1
q3APqTK44bzYfxcyoBmX+Hr2AcE+MU5V7NejALG9zxo7bJ2cNijTNOau9d5GRKDy
UT7IzNuJoKCrzQD/liTpQdEIcppt05+W7n0MrQg3XRDfzDZ3Rk8TcMsE7pcmBUwX
gB0f8FOaFg2gBzCjpoQvUeL/eT6fREZMGlPSDtjPZfykZPa+0rNcIxhmeJjiEnjY
icQcCLtvgeRxw5KE+g2XG1YyZ+y8jRL8TyphteT6Lw4Ug4Ku+vufercy6GomVlQn
0jGBP+Pe70laN9ywSgaLy5OkzpcuRTrQbMdZAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQUO5hxkee/XkMsOC2bfO8YLj9Gh68wHwYDVR0jBBgwFoAU94vx0ILraGpYQf5x
sAL3zXu4b3UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
Lzk0dngwSUxyYUdwWVFmNXhzQUwzelh1NGIzVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOTR2eDBJTHJhR3BZUWY1eHNBTDN6WHU0YjNVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMzLzk0dngwSUxyYUdwWVFm
NXhzQUwzelh1NGIzVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCvYjUtOEws2qj7DwMTCneO/seeTyZTgN0fEQ4fth4DsvsqhJT4xgCeuDWCLnCy
c5K3p1eXmQrE8x2dmaSo16Vk6lUw6nQc2q6KEZzGAf07Jph7Cng0dciYmPXV4OXQ
4G6qECItGUnl3mOi9UHjUKSjWe0pegJYTs4UDlmWSb+5M509xL8iHz09kxpul//A
oeAvdEhVwqBsUd2BrbTHqONKT7NCS3WmFes+lhs/25lpLCNU4VggxvVTmN+QG+yR
bOUFQE2L0sp/uXEqaFOOFeJ+Ut81zPwRCXeEoamG0hV29Kr8uTxW1WDlGPRdcyKM
j5MgO4TKCrWKKEipmZ9F+JHZ
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:31 2025 by rpki-client