Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
File: D0BCGu_TepwoYqhQBOR57yH1tgg.mft (raw, json)
Hash identifier: cDkM5t9VTr4aytKUE9zhr/9bEMItjat7DpPPEbM32SU=
Subject key identifier: D2:AA:2B:81:B1:CF:2E:13:B3:38:8C:73:65:92:AD:2D:54:0B:61:33
Authority key identifier: 0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
Certificate issuer: /CN=0F40421AEFD37A9C2862A85004E479EF21F5B608
Certificate serial: 1E85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D0BCGu_TepwoYqhQBOR57yH1tgg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
Manifest number: 1E85
Signing time: Thu 05 Jun 2025 16:40:53 +0000
Manifest this update: Thu 05 Jun 2025 16:40:53 +0000
Manifest next update: Thu 05 Jun 2025 22:40:53 +0000
Files and hashes: 1: D0BCGu_TepwoYqhQBOR57yH1tgg.crl (hash: Go+t8ULQP2WyHnkWByiEJA+/jZmnPUiMcFT6BE4W5Vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7813 (0x1e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F40421AEFD37A9C2862A85004E479EF21F5B608
Validity
Not Before: Jun 5 16:40:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D2AA2B81B1CF2E13B3388C736592AD2D540B6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:49:6b:0a:0c:5a:00:44:15:cc:66:d8:93:
d4:4c:39:17:54:a6:3a:37:3b:62:cd:d5:45:b1:d4:
57:2d:3b:e0:b2:b2:d4:fb:04:44:40:4b:6b:04:4c:
72:d0:14:1b:3b:79:ac:62:4b:7a:58:35:f6:46:6b:
5e:be:43:19:9b:6c:74:d5:00:86:21:f5:34:e4:34:
48:f8:bd:29:10:3f:51:10:67:71:08:fa:fb:bd:c6:
3e:dc:b5:1d:e6:6f:a0:a5:4f:35:be:d1:02:fe:17:
c8:64:7e:0c:fe:59:77:ce:30:1c:eb:a9:09:25:1c:
b7:ed:e9:5d:c0:10:02:a4:45:f7:b4:91:63:d4:34:
3c:53:47:39:58:3f:8e:14:bc:27:7c:8b:e5:56:12:
6a:a7:93:3d:9f:a3:bd:61:6b:ff:97:da:31:4a:5d:
25:c4:00:ec:f9:09:8f:4e:c6:e9:96:d8:51:21:59:
ef:b2:45:c6:91:19:14:ab:04:32:bc:0c:6a:f5:73:
0a:69:04:61:46:b1:fb:fe:72:8c:15:50:fd:1e:67:
6b:b3:f7:ca:2b:73:6a:00:e1:cb:d6:a0:e0:cb:1a:
84:88:e1:11:11:63:2d:c0:10:56:64:d4:f3:5f:fd:
55:aa:92:2e:9b:3a:1b:df:65:58:df:81:02:8b:ad:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:2B:81:B1:CF:2E:13:B3:38:8C:73:65:92:AD:2D:54:0B:61:33
X509v3 Authority Key Identifier:
keyid:0F:40:42:1A:EF:D3:7A:9C:28:62:A8:50:04:E4:79:EF:21:F5:B6:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/D0BCGu_TepwoYqhQBOR57yH1tgg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1089/D0BCGu_TepwoYqhQBOR57yH1tgg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:11:fa:91:2c:f2:69:4a:61:d9:99:0c:e6:ac:a3:ce:cd:26:
c1:4a:3d:00:58:af:3b:48:7c:a4:24:65:62:54:2d:17:a7:d2:
f6:05:23:c4:5a:ec:ba:e9:cd:45:3f:17:a0:4b:47:45:e1:a1:
2a:86:e7:17:06:92:1d:cd:04:23:9f:9e:72:ca:60:cc:75:ca:
7b:fd:97:a1:af:82:9d:06:4f:ab:c4:85:55:7a:86:18:db:0c:
2e:76:5a:ad:b8:22:dc:01:43:84:b5:61:06:b4:4a:e5:b7:13:
4a:6e:ad:fe:c9:09:49:1d:dc:ec:5e:7e:67:4d:15:f3:fe:6c:
ac:08:5e:4f:b0:60:0a:b3:25:43:1a:6f:14:07:e1:48:dd:07:
68:35:17:b8:11:5c:be:2a:bb:3e:4b:a7:03:76:8a:22:bc:d8:
58:bc:26:0b:44:c1:fb:65:1e:f3:66:ff:8c:d2:e4:1e:bb:42:
1a:64:41:07:6a:c9:81:51:e8:eb:68:ba:bf:3c:cf:a8:cb:fa:
10:2d:8a:32:5d:df:b3:d4:c3:1d:00:54:a6:09:db:a7:b9:3c:
80:f8:92:c1:b5:8c:77:3c:12:8e:c3:70:4c:66:11:a7:56:9a:
83:0f:f5:7e:f1:ce:35:71:48:5f:05:eb:6b:08:c4:7b:88:01:
ef:73:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:04 2025 by rpki-client