Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
File: NxT4EtSpDicn7ABvXkzukIk0r3g.mft (raw, json)
Hash identifier: ohWGL6kStL5+vgoB2SoXDZY78jOerpWgvW+wmmla+Zw=
Subject key identifier: D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
Authority key identifier: 37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
Certificate issuer: /CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Certificate serial: 1D43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
Manifest number: 1D43
Signing time: Thu 05 Jun 2025 16:39:27 +0000
Manifest this update: Thu 05 Jun 2025 16:39:27 +0000
Manifest next update: Thu 05 Jun 2025 22:39:27 +0000
Files and hashes: 1: NxT4EtSpDicn7ABvXkzukIk0r3g.crl (hash: KsRwWbNF6ud80lqkOm0nRVL39bjV+ZLt4dtjn9ZPdZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7491 (0x1d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3714F812D4A90E2727EC006F5E4CEE908934AF78
Validity
Not Before: Jun 5 16:39:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D4727BD1540DF9B6C4FCC174C40A002280302BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:3b:6c:95:b3:19:b9:3c:7f:39:15:f1:fd:
b5:9a:0d:ba:0a:83:cf:0b:a9:32:4a:ca:fd:8f:1b:
6f:47:00:29:45:8d:60:ee:28:18:fd:d7:fb:7f:64:
ef:7e:1a:0a:cf:8c:34:ba:5b:61:b5:06:1f:0b:0d:
e3:bc:71:9b:9c:a1:a8:2c:7b:f9:40:62:42:f9:7a:
bb:ef:ee:7b:87:00:71:3b:9d:88:82:03:e1:31:35:
45:68:19:50:53:82:cf:b2:98:1d:7d:9b:ea:4e:fd:
e0:a5:fc:fc:e8:78:8f:1e:bc:32:20:2e:38:36:d5:
9b:80:27:94:10:10:57:d4:8f:1e:eb:a2:1e:a4:4e:
25:cf:74:bb:2f:a0:63:d9:e0:46:f0:ea:a8:3f:0f:
a6:15:6a:18:76:b1:18:10:34:b2:12:65:9a:8e:24:
55:5c:e4:42:15:ac:20:09:ac:fd:4c:d9:e4:ae:f9:
cf:6d:24:a6:9e:58:90:f9:7c:bf:53:a1:79:36:b5:
b6:5f:4d:61:ac:0b:4e:c0:02:8d:ed:02:71:78:51:
30:c9:c9:fe:b6:8c:43:03:1e:8c:21:e5:3a:c1:50:
8e:02:c4:07:e4:5a:c2:d7:3e:c3:0d:16:fd:ef:36:
d7:b2:a6:7c:43:3b:d4:c0:9e:5d:4e:17:63:ec:3a:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:7B:D1:54:0D:F9:B6:C4:FC:C1:74:C4:0A:00:22:80:30:2B:DA
X509v3 Authority Key Identifier:
keyid:37:14:F8:12:D4:A9:0E:27:27:EC:00:6F:5E:4C:EE:90:89:34:AF:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/NxT4EtSpDicn7ABvXkzukIk0r3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2330/NxT4EtSpDicn7ABvXkzukIk0r3g.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:f4:b8:04:4c:f6:87:67:ab:d1:68:70:65:49:11:4c:e4:10:
4a:95:6f:79:2f:48:1f:c7:3a:d8:dd:7b:d0:be:e8:6a:e6:2a:
be:9d:21:8f:51:bd:f1:5b:27:e1:fc:bc:50:f7:17:20:b6:78:
db:d9:f4:a8:92:68:3e:43:5e:51:c2:84:47:ab:c5:6c:bc:f1:
80:8c:4b:3d:fe:83:c9:bd:b1:82:66:73:d7:22:f2:b4:e4:f8:
e8:29:f3:43:e1:cf:1a:18:a4:58:c1:6d:43:ac:3b:eb:1e:f5:
5d:89:e1:96:46:ea:5a:b2:7c:29:d7:03:cf:46:80:1b:20:bd:
8b:09:ac:ee:8a:e8:80:fc:15:dd:06:7f:21:79:d2:5e:7f:61:
f9:9f:aa:72:a8:c3:5b:27:e0:2c:f8:a5:08:94:e7:ba:b3:8c:
ee:8e:51:93:82:1a:8c:20:c6:ec:ea:f7:ea:51:6a:8a:72:55:
c2:71:8e:fa:21:37:6b:b9:f9:fd:03:dc:7d:33:09:f1:41:63:
1c:51:3a:67:d3:cf:4f:c2:c1:ef:fc:67:35:e8:48:2a:8d:34:
c7:a4:f4:9d:cb:df:f1:49:b9:b6:65:31:ef:2b:e1:44:de:55:
58:36:ab:75:73:7f:4a:8a:2f:dd:a9:71:d6:3d:50:e2:42:33:
f3:01:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:55 2025 by rpki-client