Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json)
Hash identifier: 9U4tvlQSiUI1pSnxkDToLs7POvldozZKVil3eMM4kFs=
Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 219E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
Manifest number: 2122
Signing time: Sat 29 Mar 2025 10:29:32 +0000
Manifest this update: Sat 29 Mar 2025 10:29:32 +0000
Manifest next update: Sat 29 Mar 2025 16:29:32 +0000
Files and hashes: 1: -9NqEbVLtxcMQGDhsFUsirUgR90.roa (hash: YAPD8DouMRjl8InJgmqoPXZ+pjhCQ4vLb0TAZBDeTVA=)
2: -OwUbQLzqS9CtZr_wtRPxfVPmaw.roa (hash: nU8McGO3g2yTqZQuoumVj83hRYLsBYNlvrV6uYQKZvY=)
3: 0tIdMYbPh52gcnbONKM9sxEByR4.roa (hash: 5KLm0nAa5fOcsr0fbhaiO/JacSV520TVs9rJMJnaPNk=)
4: 4r97Xtcderk2rYaAfCVbfPoW-to.roa (hash: GeqdqfE7ko6jT4bYJmB3zZUkfFl2QdouEXCxGMC+aoA=)
5: 7gi6WSx9-W3Q_-0BTXzk72FY--s.roa (hash: hOgIBhnJyd+67kfMJ+asIvXRzv98Q3BxXFjjyBGTNkc=)
6: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (hash: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=)
7: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (hash: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=)
8: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (hash: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=)
9: F-PLBkUJrhrV-KBJeTXlAo3uFIQ.roa (hash: G0OcVUn1H6U6vze7iL2fHDtXQLPXmGQGcExdKogT03k=)
10: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (hash: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=)
11: HReb-ywFRD2sicgKUd2w0b7x10E.roa (hash: y65mKFijZQhce38APb8340kQcqbx8J1XoRf25Cv+AsE=)
12: Jti-bdW-scu_L4qJSVV8bFC34Hg.roa (hash: von2PiMAe0B935XVhzke3hrz/cpQJvoVxPOBvVAOqbQ=)
13: Kg-iXs-ZgDNd-P3bwxgPfjGf6H4.roa (hash: gT/dloENLe+1DgzIP0bxSsTmtxSc8ITXoF0nYrR0/LM=)
14: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (hash: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=)
15: Mb88DUngG1AeeJ_spzyhH1MtIe8.roa (hash: rPbaYvCyBWVV6nFsWT4yFzdUpbPZoHNmTE5IeHtHFsA=)
16: OIcAhWMzK_7prvQFEasxweToIj0.roa (hash: xBqcWZW2JugLmKQfZ49aES8JiB/8xJHGQsV4BM/CTao=)
17: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: A9uj6y4LmuC9EHEJaW0vHRzNyeLQwOAWIr7NtaTvMtw=)
18: WMANHMiWx1g3CI3Gqpc2-P8j_7k.roa (hash: qNeI26rm2x8bpU/OqzZTNDcppRMsi9Yh3o3Np4XxV+s=)
19: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (hash: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=)
20: gjOyscTAwPENBh0n5Aa3QndEX60.roa (hash: HfhectSQmQlUhPpiM7eLV3JM7FPBo3tgWE1WoKdnnqs=)
21: hDX4u7pdx7Zf5kqxUv0PItrx1f4.roa (hash: grzzaZRI5mpPViDtJPvajB5QsdXQjicqtx/xXdx9O+4=)
22: n5ZNxatvv4XCouElRwkMzO6ANTQ.roa (hash: 2V2xIDmOEpYGle2/9Z9l+ERcP87JlV8yB1t7el2xCxY=)
23: tBEau9qaHWyukHWT05JHQ8xv6yU.roa (hash: yhpnPts3yhegRpvu3PBV7bzk7TlZ6bt6sB2BKxLt30s=)
24: tgoxuWcvzb42md0unwEcPBA-z-E.roa (hash: 8U1tCdX/+rNtC4iXplL0V8fy1x9AMLWS0KUZb06OkVk=)
25: tihOEV-WyZh2J6zruajXK8SgAPU.roa (hash: AUMG4eEdxdoP6cesREJuZwDefP4CdbQDPkHCN/F8erw=)
26: tou57tkArzeegu37p7K21QZeqNI.roa (hash: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=)
27: uzejoKzTeKDkpAiT_kC3H2af84w.roa (hash: pxi1SN6x6SJe2L7OxxGf3guFu+VTbediU/lKPs/cm4c=)
28: ywYi0okn_GT3W2d2eD_7GQ0HewM.roa (hash: dhJ6G/hO2IpTJvPzX9YY2GzSuWjpi6GsiEi7zCLlzSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8606 (0x219e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Mar 29 10:29:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18:
a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53:
ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a:
95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49:
3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6:
6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9:
34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7:
8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71:
05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42:
14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f:
30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f:
e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2:
91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc:
8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb:
4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1:
33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f:
84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:df:c3:e7:11:4c:e5:06:ac:54:d2:57:a2:90:51:46:78:
1e:c9:4b:62:86:74:5a:fd:ad:d1:4a:74:f0:07:32:7b:ea:2c:
68:a6:4c:17:c0:8e:64:50:ab:6d:2f:56:89:d4:6c:f4:68:0f:
f4:d0:52:28:51:03:f9:65:da:1d:22:5a:d8:3f:6e:91:22:fb:
99:4b:53:5d:95:c8:21:72:92:27:c4:01:77:11:09:97:4c:d9:
b2:3d:df:94:5e:58:9a:b1:f4:59:eb:98:c2:b1:98:d2:0f:b9:
45:5e:03:2c:c1:23:20:41:6a:2c:e6:27:19:a1:1e:ac:ce:f8:
37:c6:62:31:de:06:5c:80:f0:65:0c:fa:09:72:0e:25:e9:4f:
01:af:07:21:e8:30:3a:27:a4:22:8a:0c:e8:25:b6:4d:17:ad:
7c:40:ff:c6:23:6e:e6:d6:61:fc:79:38:95:a7:89:f5:07:84:
c9:45:a1:8a:38:56:a0:3c:b7:ba:5c:19:45:39:05:10:5b:11:
da:cd:f3:67:42:b9:0d:ac:79:09:71:e1:d9:91:63:ab:12:aa:
f8:12:ff:ca:ef:b0:25:5e:d4:41:4c:25:1a:95:e5:e5:60:dc:
54:3f:d8:95:7c:65:e4:04:78:82:50:a3:a2:b9:d0:06:cf:ac:
1c:f7:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:04 2025 by rpki-client