Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json)
Hash identifier: lSan9djeFj7nYGYYeeOZ/ofKfW5awC8cPTasJYYomr4=
Subject key identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1D32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
Manifest number: 1D12
Signing time: Sat 29 Mar 2025 10:31:11 +0000
Manifest this update: Sat 29 Mar 2025 10:31:11 +0000
Manifest next update: Sat 29 Mar 2025 16:31:11 +0000
Files and hashes: 1: 5ZTA9OpLnIyrHxyW5G4YQxHS7k8.roa (hash: 1G9TvIGpOI19k+vNY2vWqyAcGnf/NgnyIFlBuchbsrU=)
2: ERGuAEO4hc2K_QNhDs0oPd2Ovhs.roa (hash: /xveDAj10Cqwa30t8+mVrd6NxA4uKtlsdoO1YjXjPOM=)
3: GRQWmU7kj2MtZz8P0rhABLNxJmo.roa (hash: xODLseQ5OuG7zJVn2IeWVbKpN/ynDTW7X462XK2DiW0=)
4: ME9y6iE9_arWH9Fs4BYwAi0vlDo.roa (hash: ccNS9q/DL6E/wtDUgZtIMTYW86d7GQqpLSA3TKwdwhY=)
5: UYYH8nf7t3pHRtHfYdrj9_du1LI.roa (hash: TaRSS1gmX2lvWtqnWK7fdhRVGpVjUSEIVC9l9749sHc=)
6: b_xJrKXfr9iR-P1PshZUFr11DEI.roa (hash: KEtj9jXlsW8crqkjMlm5YVVy0ObCZcEDc+GqHIOmI/M=)
7: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: CcwxNyhrkCnOpmqj9oP9F4OaqM/V1+7SEZzH/C2nVDs=)
8: tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa (hash: SXZrx4Q4IxBEYib/DtnwGYISea4XlmC7x5pSx7JcMyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7474 (0x1d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Mar 29 10:31:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e:
31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed:
f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d:
82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6:
b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87:
86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89:
a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b:
d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a:
c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4:
fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca:
56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9:
34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c:
eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2:
2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd:
ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f:
ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a:
cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:15:6b:e4:1e:d4:ee:ce:59:ac:fd:95:15:5c:4a:bd:04:
78:08:70:d2:62:54:bd:d5:d8:11:e4:48:4b:1c:3a:f9:c5:a4:
85:4e:0e:74:71:9a:ac:35:bc:15:11:36:ea:90:75:54:97:e3:
8d:a2:27:e7:2d:85:d7:6a:05:35:30:1d:31:9c:a5:a6:9a:ed:
c1:51:1c:d3:61:1f:89:0f:5a:00:21:e9:d4:19:f2:ff:60:70:
15:1f:8b:6d:18:00:3f:8e:8c:86:04:99:27:78:aa:14:7d:0f:
a3:ca:f1:4a:a4:cd:85:93:4f:a6:09:d9:52:3d:0f:1b:10:bd:
20:91:94:1c:8a:90:dd:d6:68:ae:d8:a6:2c:cc:58:c9:a4:2b:
de:27:02:bc:18:c4:18:2d:ba:9c:80:d7:a5:68:7b:13:6b:2b:
08:ce:6f:fe:77:32:b1:34:38:cd:e0:06:64:42:89:d1:3d:d4:
fa:3d:a7:3f:d7:c9:70:e6:2d:63:1e:a1:f6:1d:21:d1:0a:cb:
b2:84:5b:fa:46:88:16:be:cf:4a:9b:8b:4e:5e:0f:2d:97:00:
24:56:8a:37:3d:35:38:7a:28:90:9c:4e:8d:b6:93:0e:57:38:
81:b7:8f:a0:51:10:f6:43:94:6e:46:09:cc:e1:25:67:94:5c:
43:dc:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:03 2025 by rpki-client