Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
File:                     siBZMMmnzLPKhy8QeQqwa2_acHI.mft (raw, json)
Hash identifier:          cN+IzdUDmWKJSgt4QRRYvi0/BV8Xk11VtAuTg78If6w=
Subject key identifier:   35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1
Authority key identifier: B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72
Certificate issuer:       /CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072
Certificate serial:       07B0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
Manifest number:          07B0
Signing time:             Mon 28 Apr 2025 17:07:56 +0000
Manifest this update:     Mon 28 Apr 2025 17:07:56 +0000
Manifest next update:     Mon 28 Apr 2025 23:07:56 +0000
Files and hashes:         1: siBZMMmnzLPKhy8QeQqwa2_acHI.crl (hash: UHIOWjULy7R5MBs9jRu5uUaWaPMhbJADVamjLc4EdOM=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2205930C9A7CCB3CA872F10790AB06B6FDA7072
        Validity
            Not Before: Apr 28 17:07:56 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=35B1A6FDB2A57B2492AF9E83B4247A6310827BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:55:cb:58:88:9a:53:9a:3e:03:72:a9:1d:03:
                    b9:05:0d:34:3e:fa:84:e2:5f:cd:d8:92:bc:06:95:
                    e0:27:7a:48:23:00:2a:c0:84:6f:f3:5e:fc:d1:6b:
                    16:5a:56:86:3d:a6:b7:e6:68:a6:f1:39:47:6b:ae:
                    bc:1b:b9:5c:88:c7:3e:69:a4:77:0d:4b:68:09:fe:
                    e4:f4:24:32:74:05:6e:04:76:55:5b:76:9b:24:00:
                    53:a8:94:cc:dc:62:ef:28:ad:b5:bd:77:c2:28:68:
                    c8:e4:34:aa:dc:ab:17:85:e1:1c:67:cf:0c:b4:e0:
                    48:95:fc:b3:0f:b9:0c:d1:d1:f4:bd:ea:a4:49:d4:
                    b4:0d:d4:30:8b:80:9b:eb:25:98:ca:ae:30:27:6b:
                    58:1d:65:af:80:e2:dd:82:99:bf:9c:7a:20:ec:d6:
                    52:52:85:00:f6:0f:20:99:3c:d0:40:f5:86:4e:b7:
                    d8:59:72:d3:72:47:0a:3c:fd:32:23:f1:47:e3:e1:
                    00:a1:bc:98:ce:b8:63:c7:90:0c:b5:8b:f0:c3:c8:
                    96:66:f7:7e:cc:0c:4f:4c:25:77:13:c5:ab:96:df:
                    e0:14:42:24:6e:d3:14:de:98:76:91:6d:2e:a9:6b:
                    d2:c9:47:86:33:95:58:f2:2c:2b:a1:b2:d3:08:9c:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:A6:FD:B2:A5:7B:24:92:AF:9E:83:B4:24:7A:63:10:82:7B:B1
            X509v3 Authority Key Identifier:
                keyid:B2:20:59:30:C9:A7:CC:B3:CA:87:2F:10:79:0A:B0:6B:6F:DA:70:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/siBZMMmnzLPKhy8QeQqwa2_acHI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3264/siBZMMmnzLPKhy8QeQqwa2_acHI.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:2c:b7:d6:3b:65:6d:88:4f:2c:ac:d0:92:23:b4:39:36:
         04:07:12:e5:29:09:db:27:d7:cf:33:86:52:29:a7:84:03:0e:
         cf:fc:12:83:98:98:8a:d8:c3:f6:8d:8a:11:a6:f3:a4:ec:fe:
         c8:4c:77:46:a7:46:a6:2a:30:65:42:b4:01:49:13:2a:99:97:
         53:b1:15:ef:22:13:b8:7b:0b:fe:e0:b8:2b:c3:89:a8:bb:a7:
         b6:99:46:00:bf:58:c4:51:70:6f:be:dc:21:ac:ca:cf:ef:fa:
         a9:a4:96:ab:63:50:76:58:f1:29:ff:7b:34:e5:37:ac:81:11:
         fd:74:0e:27:21:50:89:90:38:e7:0b:8a:9a:d5:35:a2:ee:40:
         50:ef:18:7a:6a:96:24:07:9c:b4:2a:36:42:e7:bc:ba:ad:54:
         c4:e5:87:e6:28:e5:77:db:c7:08:a6:87:7a:fa:29:74:ff:6b:
         84:53:57:b5:49:7f:43:cb:8d:ed:7a:a3:b2:53:5f:75:21:5e:
         13:7f:17:34:e6:60:4b:5a:04:a2:e6:0b:81:97:65:ea:a5:d2:
         a4:c7:6f:c7:1a:68:d4:9e:7c:83:45:cd:8f:53:61:7d:1a:29:
         07:00:aa:ce:25:37:a1:41:a7:86:9e:6f:ef:54:fc:19:e3:8f:
         87:fe:0a:2e
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjIy
MDU5MzBDOUE3Q0NCM0NBODcyRjEwNzkwQUIwNkI2RkRBNzA3MjAeFw0yNTA0Mjgx
NzA3NTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM1QjFBNkZEQjJBNTdC
MjQ5MkFGOUU4M0I0MjQ3QTYzMTA4MjdCQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2VctYiJpTmj4DcqkdA7kFDTQ++oTiX83YkrwGleAnekgjACrA
hG/zXvzRaxZaVoY9prfmaKbxOUdrrrwbuVyIxz5ppHcNS2gJ/uT0JDJ0BW4EdlVb
dpskAFOolMzcYu8orbW9d8IoaMjkNKrcqxeF4Rxnzwy04EiV/LMPuQzR0fS96qRJ
1LQN1DCLgJvrJZjKrjAna1gdZa+A4t2Cmb+ceiDs1lJShQD2DyCZPNBA9YZOt9hZ
ctNyRwo8/TIj8Ufj4QChvJjOuGPHkAy1i/DDyJZm937MDE9MJXcTxauW3+AUQiRu
0xTemHaRbS6pa9LJR4YzlVjyLCuhstMInI2FAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUNbGm/bKleySSr56DtCR6YxCCe7EwHwYDVR0jBBgwFoAUsiBZMMmnzLPKhy8Q
eQqwa2/acHIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
NC9zaUJaTU1tbnpMUEtoeThRZVFxd2EyX2FjSEkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NpQlpNTW1uekxQS2h5OFFlUXF3YTJfYWNISS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjQvc2lCWk1NbW56TFBL
aHk4UWVRcXdhMl9hY0hJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEgRLLfWO2VtiE8srNCSI7Q5NgQHEuUpCdsn188zhlIpp4QDDs/8EoOYmIrY
w/aNihGm86Ts/shMd0anRqYqMGVCtAFJEyqZl1OxFe8iE7h7C/7guCvDiai7p7aZ
RgC/WMRRcG++3CGsys/v+qmklqtjUHZY8Sn/ezTlN6yBEf10DichUImQOOcLiprV
NaLuQFDvGHpqliQHnLQqNkLnvLqtVMTlh+Yo5Xfbxwimh3r6KXT/a4RTV7VJf0PL
je16o7JTX3UhXhN/FzTmYEtaBKLmC4GXZeql0qTHb8caaNSefINFzY9TYX0aKQcA
qs4lN6FBp4aeb+9U/Bnjj4f+Ci4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net