Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
File: YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft (raw, json)
Hash identifier: GQAY5BsKp1TFVnVzFwDSOQ6MnWZxug2FbnpKL6G20rQ=
Subject key identifier: 40:55:24:F8:A4:98:A0:EB:82:AF:0D:63:81:60:15:AF:66:D9:34:BD
Authority key identifier: 62:B8:57:75:DF:2F:59:5C:C9:1A:47:1F:F7:31:9C:A4:78:B7:9A:46
Certificate issuer: /CN=62B85775DF2F595CC91A471FF7319CA478B79A46
Certificate serial: 18C3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YrhXdd8vWVzJGkcf9zGcpHi3mkY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
Manifest number: 18C3
Signing time: Thu 05 Jun 2025 16:40:05 +0000
Manifest this update: Thu 05 Jun 2025 16:40:05 +0000
Manifest next update: Thu 05 Jun 2025 22:40:05 +0000
Files and hashes: 1: YrhXdd8vWVzJGkcf9zGcpHi3mkY.crl (hash: dOL1SLOWwIOtipsMLfzZBiVvQ5EUoDUtLdxLmRZBsGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62B85775DF2F595CC91A471FF7319CA478B79A46
Validity
Not Before: Jun 5 16:40:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=405524F8A498A0EB82AF0D63816015AF66D934BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:76:69:91:27:34:3b:02:9d:50:ff:63:f5:
fd:6d:e7:7e:30:eb:26:cc:d5:5e:95:f7:ee:9a:54:
cd:40:31:f0:a4:48:57:10:dc:4b:c4:9b:26:7e:02:
ba:38:5d:35:00:e7:41:b2:2d:7e:7f:6f:a3:ea:0d:
f0:e4:11:33:b1:ed:1d:7c:d1:64:ef:bf:92:2a:c7:
b9:95:3e:f5:5b:5d:95:b7:06:85:87:42:76:2a:49:
42:64:83:54:af:56:62:ce:7e:72:91:bc:fb:74:8b:
ce:ea:82:45:d8:e6:9e:c7:80:9d:7f:be:3c:ef:98:
30:4b:f0:24:5f:71:4a:1b:22:8b:0c:91:74:2a:83:
da:84:56:4a:f7:e5:70:7d:2f:70:48:b1:c8:f0:70:
07:3a:5a:e3:31:c7:05:5d:a0:b8:42:db:46:cc:5a:
d6:7d:2f:fd:31:75:56:c7:d6:e5:33:71:b9:f0:f6:
70:5a:6b:66:ff:36:aa:3b:6f:32:4e:d2:60:0d:f0:
ba:c6:22:22:11:55:83:96:c0:ec:f1:2b:d5:8d:a1:
97:ae:69:fd:a7:1f:c4:10:a8:36:83:e4:c7:41:3b:
fc:c7:6d:8a:8c:8d:e0:c8:0d:7a:de:5f:ac:5f:78:
ff:87:3c:0b:3d:99:83:28:6f:26:d2:6b:2f:4a:9d:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:24:F8:A4:98:A0:EB:82:AF:0D:63:81:60:15:AF:66:D9:34:BD
X509v3 Authority Key Identifier:
keyid:62:B8:57:75:DF:2F:59:5C:C9:1A:47:1F:F7:31:9C:A4:78:B7:9A:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YrhXdd8vWVzJGkcf9zGcpHi3mkY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2968/YrhXdd8vWVzJGkcf9zGcpHi3mkY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:a6:9b:b2:94:96:a8:b8:9e:c1:c7:b3:6d:9f:c4:6f:aa:
5e:32:be:f6:d7:f3:4a:e4:26:ad:b8:a8:72:6c:57:a0:a9:03:
f5:31:6a:a8:b7:9a:d1:10:3a:31:1b:06:bd:81:e1:f6:6c:a9:
9c:45:b0:bc:83:25:84:00:a0:0f:30:fb:4f:75:73:87:cf:97:
5f:f3:1c:c6:bc:d8:2c:2a:ab:7a:47:5b:8d:b3:58:35:f8:9e:
d8:9e:63:9e:95:71:f6:8d:5d:48:bf:3d:09:40:2b:6a:0a:93:
06:c7:c3:35:db:51:f9:99:03:d7:8e:6f:ef:bf:66:32:6c:47:
b0:2c:76:74:d7:82:f7:f3:35:0f:b8:0f:d5:1e:19:78:31:0d:
f9:4f:7f:29:92:a9:08:8f:f9:ee:45:32:87:7e:c9:bb:a0:24:
cc:a4:ad:d2:8c:c6:0c:77:d0:d1:4a:b5:3d:91:87:b1:c2:cb:
43:d6:9c:e4:a3:6f:8b:60:77:f0:2e:ef:ef:d6:8c:61:38:83:
9e:41:a5:66:bd:ce:bc:b4:02:b8:50:c6:d8:c6:91:5e:1d:e0:
ad:60:e8:ed:43:ac:3e:ee:5b:b4:aa:a2:94:9c:60:6b:7f:04:
21:63:2b:0f:8b:c0:80:f1:b7:51:20:e2:0d:3c:48:d5:67:04:
52:6c:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:24 2025 by rpki-client