Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
File: QIfatnFyg2sIIHXOGL5eX6RdXpU.mft (raw, json)
Hash identifier: u8uOFgAVREMGBaLMdSQo49uQvrb3qfgq6h/dUNdDl3A=
Subject key identifier: CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 1E97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
Manifest number: 1E8D
Signing time: Thu 05 Jun 2025 16:41:12 +0000
Manifest this update: Thu 05 Jun 2025 16:41:11 +0000
Manifest next update: Thu 05 Jun 2025 22:41:11 +0000
Files and hashes: 1: QIfatnFyg2sIIHXOGL5eX6RdXpU.crl (hash: OvAAbge07MSIdvGL/W2tzC1+fYdaChPKs09avO31Hdw=)
2: Xo2xzHkIY-YGuMySicyhhRpo8IE.roa (hash: QgOMwwkT8JO8mXrvSbMFJwD24TDI++b2WLOiuCQt8Nw=)
3: xF_kY5igAZ4pYp7sRgDqMyeVigQ.roa (hash: JqA1NDUEHISd0ZMcDg+01lOgp+bGBK0kQMU/tV9LvqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7831 (0x1e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: Jun 5 16:41:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CE09CE2088BACCACECA60409C320ABA420B6A981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:d6:b0:ae:5c:af:ef:c8:10:46:06:59:c0:
2f:29:3e:47:cd:37:1f:fe:0e:4c:7f:2f:81:e0:cf:
a5:c9:8b:a0:8c:b6:3e:5b:03:c0:07:73:b9:28:ae:
fd:12:08:0f:cf:34:8d:3d:f4:44:74:2f:a7:0b:49:
06:54:e4:78:4e:9c:98:78:9a:1b:d6:e6:17:a8:91:
e1:17:75:da:a6:8a:17:64:10:b2:23:17:42:b4:b3:
26:d5:17:b4:7f:b8:d0:77:9f:71:0c:c2:ed:ff:0d:
7f:2f:06:de:4d:cf:77:ee:5a:9f:80:59:bf:27:94:
59:02:03:6a:35:d7:64:85:09:ba:4b:63:dd:bb:38:
80:bf:5f:66:a4:f0:6c:47:13:38:66:f5:37:27:9b:
a3:37:33:bd:fc:ce:c4:54:4a:ed:cd:41:ee:f2:3f:
6d:91:b3:40:01:2b:dd:d1:8b:10:36:7d:4c:d7:35:
13:80:b6:f3:b2:8f:15:39:db:eb:d0:b4:2e:18:41:
56:5a:50:0f:4b:75:c8:b8:08:6c:4b:97:63:fd:9a:
95:19:38:31:b9:fd:83:9a:6a:84:8e:bb:84:9d:b4:
2c:4f:d4:0a:e4:a2:ad:ea:61:94:83:85:67:13:85:
6e:e2:d9:03:0e:57:d7:56:97:20:ff:2e:03:38:4b:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:91:da:8c:67:02:04:05:22:d8:13:d6:f5:72:50:5a:01:
43:de:f0:7a:96:85:3a:20:b2:0b:ac:88:1e:78:d9:7a:c9:05:
14:1a:41:e6:a8:a4:68:08:10:b6:82:c8:12:5f:a4:e7:13:7f:
da:38:79:4f:bc:6f:b8:90:54:94:7c:e5:9c:48:51:84:12:71:
d2:62:39:ae:48:1f:bd:d1:f4:cd:02:0e:d7:c2:e0:c6:f9:4a:
bf:a1:ec:42:65:1a:d0:a2:dc:71:aa:55:72:df:d7:e8:a7:4c:
70:e4:b6:26:13:4f:a1:95:1c:07:8d:b0:22:43:c1:04:fa:24:
96:78:3a:5e:d2:76:4b:ee:79:11:47:57:ea:c8:b5:21:60:33:
05:28:12:c0:49:c0:a9:7b:4b:f9:da:d2:a1:72:6c:66:94:9a:
44:0f:18:de:d3:e7:13:91:73:be:76:69:7c:68:83:37:f9:60:
e2:b1:85:6c:34:4e:ee:c6:61:eb:79:7a:d1:8b:4a:04:5d:7c:
39:09:c9:45:6a:3e:2d:0c:b7:41:14:46:28:2e:ab:cb:15:62:
fb:77:0c:80:95:9b:49:3a:67:68:ff:ef:3d:1c:2e:68:d3:89:
09:fd:35:73:43:0d:82:97:f4:74:5a:41:13:88:95:8c:8c:d9:
34:af:50:42
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4
N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yNTA2MDUx
NjQxMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENFMDlDRTIwODhCQUND
QUNFQ0E2MDQwOUMzMjBBQkE0MjBCNkE5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7L9awrlyv78gQRgZZwC8pPkfNNx/+Dkx/L4Hgz6XJi6CMtj5b
A8AHc7korv0SCA/PNI099ER0L6cLSQZU5HhOnJh4mhvW5heokeEXddqmihdkELIj
F0K0sybVF7R/uNB3n3EMwu3/DX8vBt5Nz3fuWp+AWb8nlFkCA2o112SFCbpLY927
OIC/X2ak8GxHEzhm9Tcnm6M3M738zsRUSu3NQe7yP22Rs0ABK93RixA2fUzXNROA
tvOyjxU52+vQtC4YQVZaUA9Ldci4CGxLl2P9mpUZODG5/YOaaoSOu4SdtCxP1Ark
oq3qYZSDhWcThW7i2QMOV9dWlyD/LgM4S4hnAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUzgnOIIi6zKzspgQJwyCrpCC2qYEwHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO
GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvUUlmYXRuRnlnMnNJ
SUhYT0dMNWVYNlJkWHBVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAIrLkdqMZwIEBSLYE9b1clBaAUPe8HqWhTogsgusiB542XrJBRQaQeaopGgI
ELaCyBJfpOcTf9o4eU+8b7iQVJR85ZxIUYQScdJiOa5IH73R9M0CDtfC4Mb5Sr+h
7EJlGtCi3HGqVXLf1+inTHDktiYTT6GVHAeNsCJDwQT6JJZ4Ol7SdkvueRFHV+rI
tSFgMwUoEsBJwKl7S/na0qFybGaUmkQPGN7T5xORc752aXxogzf5YOKxhWw0Tu7G
Yet5etGLSgRdfDkJyUVqPi0Mt0EURiguq8sVYvt3DICVm0k6Z2j/7z0cLmjTiQn9
NXNDDYKX9HRaQROIlYyM2TSvUEI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:07:53 2025 by rpki-client