Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
File: F6w3URKlYkYZSaNmCiPH5xwGM18.mft (raw, json)
Hash identifier: 08LY1vGjUjPezK+eH0DQLrwSAFIPxrcHzZjxzP1LmDE=
Subject key identifier: 9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D
Authority key identifier: 17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F
Certificate issuer: /CN=17AC375112A562461949A3660A23C7E71C06335F
Certificate serial: 03AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
Manifest number: 03A8
Signing time: Fri 21 Mar 2025 00:30:42 +0000
Manifest this update: Fri 21 Mar 2025 00:30:42 +0000
Manifest next update: Fri 21 Mar 2025 06:30:42 +0000
Files and hashes: 1: F6w3URKlYkYZSaNmCiPH5xwGM18.crl (hash: kttHMi8HPQlwNlkhg68tv8NFVkaub9R7cGeQP23cTck=)
2: ObV1EwOf_xKxvkjyxZX3fPfjjhg.roa (hash: aC/D4SGWKN5MpbX7jVbeUdllRiJHyjoSAnU78TKLKbs=)
3: Re3yW8Rn7krMvzvXMHzSrFM0l3c.roa (hash: 9jToPHySwiK8ywp/3AJR01tYj4lltsAKY0S9/fPicX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AC375112A562461949A3660A23C7E71C06335F
Validity
Not Before: Mar 21 00:30:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9A76F64D81A48D3F7316C1325C7F77C91A3D2C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:4c:17:00:5e:7d:e8:ad:8c:dd:41:a1:96:
4c:f2:c8:90:64:0b:ce:32:3c:28:4e:e8:4a:b8:9f:
22:79:c0:03:9a:6d:a9:38:9e:6e:ac:f6:4f:b6:30:
c6:d9:af:eb:e9:19:bf:4d:b4:b2:cb:2b:52:25:da:
8b:c9:42:2c:b0:ae:80:ea:5f:3a:0d:1d:33:96:41:
6c:d6:a3:b6:86:06:eb:cb:23:50:aa:5b:73:18:5c:
8f:37:3d:11:c4:e9:a7:fd:9b:b6:d8:02:f5:03:09:
61:07:52:f1:cf:6d:e6:dc:b2:b4:1e:2d:43:b4:a8:
5f:c3:6c:a8:59:c2:50:c1:13:a6:54:bb:e0:89:89:
8f:fe:43:ad:ab:23:2e:a9:cb:41:12:41:8c:e4:01:
4d:1f:47:e1:ef:d3:d5:33:a8:d1:a1:51:68:43:0c:
87:d2:a6:11:2a:02:e6:fb:03:59:40:04:98:4f:85:
df:92:a1:e5:c4:26:90:64:27:67:64:e1:a2:7a:69:
55:a0:3a:38:77:ea:ae:c3:a0:cb:a6:af:f1:0e:94:
8c:eb:7c:4b:b9:d6:a2:90:95:18:7b:cb:48:0c:34:
3c:92:89:ba:ce:b2:63:88:b6:be:8d:90:2b:3c:7b:
fa:20:86:ae:ba:ae:45:4f:e2:f4:4c:cd:51:f7:04:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:76:F6:4D:81:A4:8D:3F:73:16:C1:32:5C:7F:77:C9:1A:3D:2C:9D
X509v3 Authority Key Identifier:
keyid:17:AC:37:51:12:A5:62:46:19:49:A3:66:0A:23:C7:E7:1C:06:33:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/F6w3URKlYkYZSaNmCiPH5xwGM18.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2994/F6w3URKlYkYZSaNmCiPH5xwGM18.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:2f:e1:c3:55:df:58:13:dc:ef:e1:cd:71:00:5d:5b:ba:
89:95:46:c7:d9:be:64:03:17:ac:0a:d2:0b:15:02:38:14:40:
cc:ad:ef:a7:41:de:ae:6d:bc:ec:70:c4:62:fb:ae:99:51:e4:
d3:9a:28:6b:66:32:21:2d:cb:f5:e8:ef:98:7b:37:85:2f:7d:
82:3a:d8:58:d0:b4:94:24:e2:fe:58:2e:c5:d7:23:53:6f:38:
0a:8e:2d:3f:ff:95:9c:3e:98:73:8c:68:53:98:a1:e9:ab:29:
d1:84:f0:61:54:89:ae:7b:d3:02:1e:15:1a:8a:9c:2c:28:37:
ae:fd:4d:63:b3:f1:dd:8c:8e:df:fc:40:77:d8:06:28:b7:75:
4d:42:f0:39:59:df:17:73:f1:9a:11:13:17:68:a7:46:c8:25:
5c:b5:05:21:bb:13:9d:9a:b4:5a:cb:02:03:33:3c:f0:a1:1a:
b2:26:dc:49:5b:46:a1:eb:96:5b:12:ec:37:ae:58:b3:4b:53:
47:70:53:e1:16:54:c9:36:10:64:95:2e:7f:03:33:ae:52:17:
63:51:ae:0e:fa:4c:db:24:d6:14:04:18:a0:da:f3:51:9e:45:
17:57:c5:e7:d9:95:5d:37:2a:74:79:98:e5:e0:b4:55:b9:e0:
b7:81:48:d1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICA6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTdB
QzM3NTExMkE1NjI0NjE5NDlBMzY2MEEyM0M3RTcxQzA2MzM1RjAeFw0yNTAzMjEw
MDMwNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlBNzZGNjREODFBNDhE
M0Y3MzE2QzEzMjVDN0Y3N0M5MUEzRDJDOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaikwXAF596K2M3UGhlkzyyJBkC84yPChO6Eq4nyJ5wAOabak4
nm6s9k+2MMbZr+vpGb9NtLLLK1Il2ovJQiywroDqXzoNHTOWQWzWo7aGBuvLI1Cq
W3MYXI83PRHE6af9m7bYAvUDCWEHUvHPbebcsrQeLUO0qF/DbKhZwlDBE6ZUu+CJ
iY/+Q62rIy6py0ESQYzkAU0fR+Hv09UzqNGhUWhDDIfSphEqAub7A1lABJhPhd+S
oeXEJpBkJ2dk4aJ6aVWgOjh36q7DoMumr/EOlIzrfEu51qKQlRh7y0gMNDySibrO
smOItr6NkCs8e/oghq66rkVP4vRMzVH3BLgBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUmnb2TYGkjT9zFsEyXH93yRo9LJ0wHwYDVR0jBBgwFoAUF6w3URKlYkYZSaNm
CiPH5xwGM18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5
NC9GNnczVVJLbFlrWVpTYU5tQ2lQSDV4d0dNMTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0Y2dzNVUktsWWtZWlNhTm1DaVBINXh3R00xOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTQvRjZ3M1VSS2xZa1la
U2FObUNpUEg1eHdHTTE4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEDNL+HDVd9YE9zv4c1xAF1buomVRsfZvmQDF6wK0gsVAjgUQMyt76dB3q5t
vOxwxGL7rplR5NOaKGtmMiEty/Xo75h7N4UvfYI62FjQtJQk4v5YLsXXI1NvOAqO
LT//lZw+mHOMaFOYoemrKdGE8GFUia570wIeFRqKnCwoN679TWOz8d2Mjt/8QHfY
Bii3dU1C8DlZ3xdz8ZoRExdop0bIJVy1BSG7E52atFrLAgMzPPChGrIm3ElbRqHr
llsS7DeuWLNLU0dwU+EWVMk2EGSVLn8DM65SF2NRrg76TNsk1hQEGKDa81GeRRdX
xefZlV03KnR5mOXgtFW54LeBSNE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:34 2025 by rpki-client