Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
File: TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft (raw, json)
Hash identifier: Fdy5+TtUKgE6jZag3DuVk0XJaLLBZzpSNYJPFzmYwF4=
Subject key identifier: 68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 2135
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
Manifest number: 211D
Signing time: Thu 23 Oct 2025 12:37:24 +0000
Manifest this update: Thu 23 Oct 2025 12:37:24 +0000
Manifest next update: Thu 23 Oct 2025 18:37:24 +0000
Files and hashes: 1: LPgCeljI_ZVbxoMdtzQXf2nSvzg.roa (hash: LJPQpknVI2351DLnJTd+3o5hMujraGBO1JYNYtf8ac4=)
2: MnvOtq71Oi22pGAIXVtl5vjfkes.roa (hash: 9a+1b3uSIug5Ieufpkte8k8A9GM0MbX8R87sWvfIauI=)
3: TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl (hash: A9zB7f1eGWZ7ieIyW+QbPR5OqQ3pLPwV4XIGQvvm4Uw=)
4: bcuGU_LZdBKf0rjoAeB7vCusDrc.roa (hash: bK0+BCNlbFcbIp8Cpp4YYE8n913yHgvv4sKJ4d67BN4=)
5: d2sYkPTL92v9TaXcJHXLIV8eCaM.roa (hash: cJEnNuYf/jm+XnYMy8z9oAFzIGlCSCdP5F9vIGVn4P0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8501 (0x2135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Oct 23 12:37:24 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6800B29027F006269714735503A73430F6BC04F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:27:18:94:1b:76:9e:41:b6:2e:39:c8:17:
73:2e:0c:a1:0b:3a:15:aa:b4:47:bb:81:d1:b1:ad:
fa:96:26:45:24:b4:61:55:47:03:9d:8d:55:6f:a2:
72:e7:a3:d0:95:1d:b8:bc:cb:a9:68:09:ae:7c:a2:
e9:9f:48:05:b0:9f:3d:ce:e1:b3:be:40:53:cd:62:
87:24:c5:7c:41:0b:00:48:83:0a:f9:ec:b4:37:c4:
02:3c:2d:e7:05:0a:d8:f9:a8:3d:17:de:50:03:f8:
9f:d7:4a:06:3a:6c:5d:1b:0c:0b:be:4b:6b:63:0d:
bc:02:bb:bc:44:72:e2:c7:c4:3f:78:62:70:e9:bf:
12:d4:95:2c:4d:c1:e7:52:f3:91:19:b7:0d:79:fd:
8d:b0:fd:a2:88:55:32:07:a4:3f:39:db:94:54:20:
7c:b6:60:f6:3b:47:a0:9f:41:78:1f:59:7e:38:08:
05:5c:a5:c5:d9:f6:18:a6:4d:c0:21:b2:7e:2f:6b:
4e:d0:46:9f:4d:67:f4:19:e4:18:44:74:95:22:04:
8c:9b:e7:ba:af:1f:18:70:4f:72:74:b7:7b:08:66:
da:ab:83:c5:2f:50:71:ae:d8:b4:ae:d1:8e:a8:12:
5a:a1:2c:20:e7:1e:79:8a:77:45:ea:a0:7e:2d:0b:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:B2:90:27:F0:06:26:97:14:73:55:03:A7:34:30:F6:BC:04:F7
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:b8:53:b4:c2:50:98:d8:00:78:84:5d:11:54:fa:d9:4f:
9d:5a:22:18:89:e1:6d:20:5d:94:a5:1d:1f:7a:b3:ed:9b:6d:
33:e6:ff:7b:13:23:c0:53:ad:05:af:3f:af:0d:e8:11:16:90:
38:c7:3d:33:51:ef:6f:03:f6:5f:1d:4d:15:56:82:f4:b4:15:
86:d4:ca:27:33:23:43:60:6e:7d:9b:01:dc:da:5a:a8:7a:23:
e1:02:42:4e:cc:53:a8:32:93:96:b4:bc:ef:0c:ea:e6:55:c6:
d4:e1:0e:d9:1d:3d:79:fa:1f:14:d1:bd:e9:2f:c5:73:95:04:
48:5e:30:dc:2d:91:e6:d7:f6:9e:61:54:2a:46:a7:1f:2f:37:
a4:d4:82:1a:20:b4:01:70:4a:ca:ff:d1:01:df:2b:b2:4c:0d:
2e:25:65:99:5d:99:65:d4:e1:80:c2:c1:f0:6a:b7:66:93:f5:
dc:79:7d:93:b8:ac:6a:e5:c3:85:38:88:a9:90:39:08:83:d5:
a2:62:9b:b9:05:9e:86:95:dd:d9:b4:1b:23:a0:89:63:9c:93:
e9:56:c3:14:ba:78:ba:71:ee:32:3c:28:01:8e:70:6b:22:29:
28:4f:b1:44:4a:28:cb:28:3f:85:6b:b4:5a:51:b3:65:63:5e:
3d:b7:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:37:48 2025 by rpki-client