Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
File:                     eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft (raw, json)
Hash identifier:          GB0ZUVet5GpGHSvRD3IR+Y7K3ZKsGbjm0iaGBtn3AYk=
Subject key identifier:   1E:D4:B4:B6:AA:23:46:57:F8:53:E4:CD:54:D3:9D:EF:71:C1:7F:49
Authority key identifier: 79:3F:2B:5F:A4:BB:FD:A7:FA:B7:82:29:37:79:02:2A:DC:19:F5:6D
Certificate issuer:       /CN=793F2B5FA4BBFDA7FAB782293779022ADC19F56D
Certificate serial:       06DA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eT8rX6S7_af6t4IpN3kCKtwZ9W0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
Manifest number:          06DA
Signing time:             Mon 28 Apr 2025 16:06:27 +0000
Manifest this update:     Mon 28 Apr 2025 16:06:27 +0000
Manifest next update:     Mon 28 Apr 2025 22:06:27 +0000
Files and hashes:         1: eT8rX6S7_af6t4IpN3kCKtwZ9W0.crl (hash: 8X0S4/jos0JBFvRCBKQsrAwAsczXggitcGkW/em3BZA=)

Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eT8rX6S7_af6t4IpN3kCKtwZ9W0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793F2B5FA4BBFDA7FAB782293779022ADC19F56D
        Validity
            Not Before: Apr 28 16:06:27 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=1ED4B4B6AA234657F853E4CD54D39DEF71C17F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:00:f2:9e:db:bf:0f:2b:94:6c:26:22:0c:
                    a8:41:9b:6c:c4:21:41:fa:37:86:21:c8:cf:86:60:
                    64:12:5e:8e:3b:01:00:4c:44:e6:93:ae:a0:fa:7f:
                    3a:19:d0:eb:da:a7:47:d8:fc:57:53:29:64:e8:db:
                    2a:70:d4:d6:99:bb:26:86:15:ab:00:a9:95:6c:03:
                    e6:4c:66:c9:79:11:1d:da:a1:a6:72:60:ed:bc:79:
                    22:8c:da:b0:69:8d:e9:9b:7a:52:c2:90:76:b2:75:
                    7c:50:8c:fc:88:29:08:23:38:48:6d:ba:98:93:4f:
                    0e:9e:9b:3a:42:82:80:71:58:e3:d0:90:01:fe:4c:
                    2c:50:19:9e:55:ac:db:e4:76:f1:14:13:94:1f:ab:
                    4a:99:d7:7a:6d:06:c3:6a:c4:97:af:3e:cd:3c:27:
                    9f:5c:2e:ce:c3:52:4d:da:b8:13:d1:45:8d:a3:27:
                    18:88:c7:a6:b6:68:ce:80:0f:39:56:9f:19:8b:e2:
                    b7:2a:ca:87:f0:83:72:83:4d:d0:ba:75:59:47:6e:
                    cd:f5:21:8b:24:f3:96:c0:5c:6f:dd:51:cc:2f:b9:
                    90:11:c3:d8:a4:ef:5b:53:ec:a4:01:92:c4:7a:15:
                    1c:5f:f9:e7:fd:e6:e9:78:fb:fd:5f:42:cb:5a:36:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D4:B4:B6:AA:23:46:57:F8:53:E4:CD:54:D3:9D:EF:71:C1:7F:49
            X509v3 Authority Key Identifier:
                keyid:79:3F:2B:5F:A4:BB:FD:A7:FA:B7:82:29:37:79:02:2A:DC:19:F5:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/eT8rX6S7_af6t4IpN3kCKtwZ9W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3281/eT8rX6S7_af6t4IpN3kCKtwZ9W0.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:bc:a6:1f:73:5a:70:2c:4b:d0:3e:05:5d:55:41:84:6e:
         de:af:a8:b5:09:c9:d8:89:35:ed:bc:23:5a:bb:4d:9b:07:b4:
         93:cf:af:43:70:bc:f9:9c:36:a7:42:26:31:82:b2:bf:16:4f:
         0d:54:fd:2f:e3:89:6d:b8:59:16:4b:d5:1a:6f:1b:b8:1d:bc:
         38:a6:22:fe:7a:76:fa:b5:ea:3b:bf:ed:8e:a6:f6:fa:76:dc:
         29:4b:a5:1a:60:5c:ab:43:a7:ca:fb:bd:1e:da:d8:1c:18:bb:
         53:54:50:ab:db:bf:88:4c:80:19:4e:a9:52:a3:01:29:80:fc:
         84:5e:5e:5e:a5:af:eb:b9:56:d5:73:97:e6:36:75:30:c0:0e:
         6d:03:ec:9f:50:7f:9c:b4:77:75:ae:bd:3f:02:f4:06:81:33:
         ab:42:82:f5:05:e8:92:28:b8:e1:d3:df:2a:80:3f:09:51:4b:
         1d:e3:2f:79:40:fe:1e:fd:13:79:b6:26:0f:52:89:84:3c:28:
         d4:46:bf:16:e8:d7:df:65:f4:ab:a3:40:d9:75:57:4a:3b:fe:
         9a:d4:24:5d:df:46:73:d5:2a:ad:8b:8b:be:09:50:8d:f5:e6:
         14:5b:f7:62:1e:7e:76:8f:68:d8:ce:2b:5a:bb:4e:cd:c7:c2:
         62:2a:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:27 2025 by rpki-client on console.sobornost.net