Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
File: ZdphvcoswPjKldJNOUK8CH2MkqY.mft (raw, json)
Hash identifier: FSleALLJ+5pgzpFEC+pDYs1Zs0vOAdRvlLyC63I7sIA=
Subject key identifier: CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 1D11
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
Manifest number: 1D02
Signing time: Fri 04 Apr 2025 19:05:53 +0000
Manifest this update: Fri 04 Apr 2025 19:05:53 +0000
Manifest next update: Sat 05 Apr 2025 01:05:53 +0000
Files and hashes: 1: 4uklLsPfoxE79Kxnm-BvKPP2ly8.roa (hash: Lnp3SsoDEtTBxBYSvxm8pagjQwhoG+5G4qXTNmds4ho=)
2: ZdphvcoswPjKldJNOUK8CH2MkqY.crl (hash: drG5wP+VfvhuL6yKs2uDtoYB/R9zZTyQlXd2CbCbxfg=)
3: wuMc5_h3ESCq4Y53qARzye0cxIA.roa (hash: l+pDBHJI9r+UtBFGnISvEObI5TJY34qLko/XVOGPvKA=)
4: x9bpqLhAhX9qNX226VHCu7bO8F4.roa (hash: RN0rk0sw5l70M2HAYil9zq4iBHqXzkq/SEDlRj6hoZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7441 (0x1d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: Apr 4 19:05:53 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CBFFA004795DF91F8F02A48790BAE7C7D1E8E23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:16:7f:f5:25:11:26:6a:5f:d3:00:b1:c0:
80:3e:a9:ed:e9:bd:a5:20:18:19:94:8e:1f:77:09:
fe:42:0e:07:1f:e4:9a:27:23:a9:38:ed:eb:01:79:
14:5c:7d:e0:53:4c:bf:c7:b3:ca:27:b5:91:71:b1:
e4:3a:03:14:fb:4e:24:87:09:e9:52:21:75:ae:00:
88:7d:ac:d5:d9:bb:69:dc:af:39:df:2c:0e:55:f5:
24:9b:91:79:b9:7d:98:21:4e:ba:28:67:8b:d4:31:
7f:42:05:e4:47:8f:53:3f:a4:2f:4c:ec:d1:df:bf:
76:8c:80:48:6b:8c:00:1d:87:6a:f1:67:40:ea:2f:
8c:bd:80:7e:37:4f:0d:fa:ac:fb:e0:93:c4:85:85:
ee:b1:57:5b:27:dd:9b:e7:16:30:5d:2a:de:8d:75:
9e:69:4a:14:0c:8e:a9:d7:dc:b2:55:85:cf:14:8c:
51:cf:bf:a8:2c:d0:63:5b:83:96:0a:95:22:b8:aa:
a4:ba:8d:de:5f:e5:9f:45:5c:92:44:15:40:8a:3b:
be:ed:55:b1:24:f2:16:76:79:cd:95:45:5e:6c:a0:
8b:e9:35:25:3b:6a:6a:05:10:38:a6:20:6f:f6:09:
fb:ea:42:f5:d9:94:47:63:a6:c8:3e:85:ba:c9:d0:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:A0:04:79:5D:F9:1F:8F:02:A4:87:90:BA:E7:C7:D1:E8:E2:3F
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:3d:bc:30:cf:e3:84:2f:a4:d1:cc:e5:b0:88:80:8c:a0:
40:b1:fb:c3:f9:77:0a:6c:64:a1:35:31:c0:36:22:da:cb:43:
09:a9:19:5c:6f:bf:62:47:46:f7:f8:35:9e:55:2b:e3:47:dd:
78:3e:7a:db:c3:db:ba:a6:90:50:fb:76:c7:47:f7:23:5e:1f:
eb:c3:2c:05:22:d4:d8:cc:d6:7e:aa:2c:89:a4:d7:65:93:7b:
f2:1c:f9:ec:04:aa:f6:38:87:e7:73:81:99:95:32:14:84:5f:
84:2a:51:59:01:f9:54:c6:f2:47:c6:58:56:07:8f:32:42:4c:
5b:05:ce:c0:d4:0b:36:93:f6:bd:e0:18:78:5d:2f:db:5f:90:
48:6f:6e:92:cf:be:20:ef:45:cf:c0:4e:d5:cc:fc:0c:a2:c7:
62:c9:ed:8f:31:74:67:8d:cf:04:ed:d3:5b:25:04:75:21:45:
df:a4:97:a6:26:3a:51:c4:b2:a4:c9:fc:b2:d0:1b:8c:42:d0:
04:44:32:2b:59:6d:5b:6a:a1:71:31:5c:66:d2:46:f2:87:18:
71:16:e3:d1:55:87:e8:ac:72:24:66:03:ce:c3:f2:fa:d8:33:
4a:fa:70:fa:88:82:29:d7:e9:ef:39:42:ad:59:f7:fe:a0:1c:
39:c9:d9:7c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICHREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE
QTYxQkRDQTJDQzBGOENBOTVEMjREMzk0MkJDMDg3RDhDOTJBNjAeFw0yNTA0MDQx
OTA1NTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENCRkZBMDA0Nzk1REY5
MUY4RjAyQTQ4NzkwQkFFN0M3RDFFOEUyM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU+hZ/9SURJmpf0wCxwIA+qe3pvaUgGBmUjh93Cf5CDgcf5Jon
I6k47esBeRRcfeBTTL/Hs8ontZFxseQ6AxT7TiSHCelSIXWuAIh9rNXZu2ncrznf
LA5V9SSbkXm5fZghTrooZ4vUMX9CBeRHj1M/pC9M7NHfv3aMgEhrjAAdh2rxZ0Dq
L4y9gH43Tw36rPvgk8SFhe6xV1sn3ZvnFjBdKt6NdZ5pShQMjqnX3LJVhc8UjFHP
v6gs0GNbg5YKlSK4qqS6jd5f5Z9FXJJEFUCKO77tVbEk8hZ2ec2VRV5soIvpNSU7
amoFEDimIG/2CfvqQvXZlEdjpsg+hbrJ0PV1AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUy/+gBHld+R+PAqSHkLrnx9Ho4j8wHwYDVR0jBBgwFoAUZdphvcoswPjKldJN
OUK8CH2MkqYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz
OS9aZHBodmNvc3dQaktsZEpOT1VLOENIMk1rcVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1pkcGh2Y29zd1BqS2xkSk5PVUs4Q0gyTWtxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MzkvWmRwaHZjb3N3UGpL
bGRKTk9VSzhDSDJNa3FZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGPRPbwwz+OEL6TRzOWwiICMoECx+8P5dwpsZKE1McA2ItrLQwmpGVxvv2JH
Rvf4NZ5VK+NH3Xg+etvD27qmkFD7dsdH9yNeH+vDLAUi1NjM1n6qLImk12WTe/Ic
+ewEqvY4h+dzgZmVMhSEX4QqUVkB+VTG8kfGWFYHjzJCTFsFzsDUCzaT9r3gGHhd
L9tfkEhvbpLPviDvRc/ATtXM/Ayix2LJ7Y8xdGeNzwTt01slBHUhRd+kl6YmOlHE
sqTJ/LLQG4xC0AREMitZbVtqoXExXGbSRvKHGHEW49FVh+isciRmA87D8vrYM0r6
cPqIginX6e85Qq1Z9/6gHDnJ2Xw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:41 2025 by rpki-client