Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
File: T04zJwO54ZxdoBGkjEsnbpsp11w.mft (raw, json)
Hash identifier: MRumCzP2qKiHXvRqtGABYNXCjkBJOArzmbdE6HNh0j8=
Subject key identifier: 47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7
Authority key identifier: 4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
Certificate issuer: /CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Certificate serial: 35B1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
Manifest number: 35B1
Signing time: Thu 05 Jun 2025 16:45:26 +0000
Manifest this update: Thu 05 Jun 2025 16:45:26 +0000
Manifest next update: Thu 05 Jun 2025 22:45:26 +0000
Files and hashes: 1: T04zJwO54ZxdoBGkjEsnbpsp11w.crl (hash: 94BxiUeWXeq2a93254MPPP2IFlgJQwdIRMCNAIHR+sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13745 (0x35b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F4E332703B9E19C5DA011A48C4B276E9B29D75C
Validity
Not Before: Jun 5 16:45:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=470D131A7541923CA9A1A4C76A5788ADFD240CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:41:3b:cc:83:cc:71:a2:fc:27:62:37:91:
ee:ce:92:88:cc:36:35:05:5d:e9:49:34:1a:8d:c0:
55:1f:c3:63:38:e4:56:b7:80:7a:b8:e4:0f:d7:00:
60:61:32:c1:b4:27:22:0d:3c:c4:4b:99:32:17:12:
56:19:47:d1:11:01:8a:98:c5:db:9f:b6:b9:b4:fb:
45:68:aa:4b:32:4b:e9:f8:a2:3f:79:86:ad:19:15:
73:3f:42:7e:99:5a:e3:ea:e4:9e:cb:30:17:dc:ef:
3f:41:52:03:b1:bc:c5:4e:27:7e:1e:53:80:9b:6f:
a8:2f:13:4c:b7:52:16:a6:cf:8f:06:9c:50:b3:07:
a3:b9:10:33:1c:69:53:51:39:93:25:8b:89:63:32:
34:c9:2e:ed:f1:04:87:0f:5c:d6:7e:fd:9d:1a:f8:
0b:cb:7d:7b:5b:7b:74:17:c5:c6:9a:0c:91:af:3d:
4a:49:12:7b:f0:7b:81:fe:8d:d0:c1:84:9b:c9:ae:
f5:61:5d:16:ab:73:48:03:32:39:34:eb:7a:54:a0:
68:73:1b:59:33:20:28:c2:70:d6:0c:aa:6d:b0:98:
02:cd:eb:f5:17:cc:cc:28:c9:7b:a2:32:39:fb:b5:
32:d9:7a:07:cd:53:91:88:41:f2:00:e6:a6:85:28:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:13:1A:75:41:92:3C:A9:A1:A4:C7:6A:57:88:AD:FD:24:0C:A7
X509v3 Authority Key Identifier:
keyid:4F:4E:33:27:03:B9:E1:9C:5D:A0:11:A4:8C:4B:27:6E:9B:29:D7:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/T04zJwO54ZxdoBGkjEsnbpsp11w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/308/T04zJwO54ZxdoBGkjEsnbpsp11w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:04:f7:43:76:fe:5a:e4:55:f1:09:6a:7d:ce:52:1a:01:
40:2f:af:b1:4d:4e:c1:ad:a7:b7:c1:36:a0:c3:63:1e:46:99:
10:95:42:63:0b:df:59:05:06:72:89:69:ac:18:1e:6a:b1:df:
eb:f3:b7:1b:9b:06:c5:bb:7e:a4:43:05:01:19:5d:44:e9:e3:
f0:a2:36:80:b9:05:2a:b2:61:c0:c1:ba:31:86:02:a1:f7:37:
79:e5:02:c1:26:31:92:3b:3b:ca:54:72:c6:b7:72:e6:0d:48:
aa:49:59:70:7a:db:fc:d8:60:50:95:20:e0:b1:3a:be:ff:33:
9e:14:74:72:e2:a5:0b:b2:9e:9e:e8:c3:2a:2a:87:59:66:f8:
53:fe:d0:5a:e4:3a:51:bd:ae:02:43:e3:76:70:4d:19:2c:74:
2c:74:54:eb:fd:75:d7:f2:a4:c1:69:fb:64:a7:04:a5:8f:80:
9c:b6:fe:c2:88:a6:91:2a:be:6b:be:71:8f:aa:23:ed:bd:a7:
3d:30:46:29:00:a8:de:a7:c7:e1:a2:7c:6c:d1:30:aa:46:f8:
fe:85:a3:1d:06:f7:fa:de:bb:78:1f:c9:c2:a1:4f:7d:f4:9c:
42:30:c1:a7:19:a7:51:e4:0b:98:78:93:0d:09:42:b8:5a:5c:
b7:59:e9:6b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEY0
RTMzMjcwM0I5RTE5QzVEQTAxMUE0OEM0QjI3NkU5QjI5RDc1QzAeFw0yNTA2MDUx
NjQ1MjZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ3MEQxMzFBNzU0MTky
M0NBOUExQTRDNzZBNTc4OEFERkQyNDBDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQbEE7zIPMcaL8J2I3ke7OkojMNjUFXelJNBqNwFUfw2M45Fa3
gHq45A/XAGBhMsG0JyINPMRLmTIXElYZR9ERAYqYxduftrm0+0VoqksyS+n4oj95
hq0ZFXM/Qn6ZWuPq5J7LMBfc7z9BUgOxvMVOJ34eU4Cbb6gvE0y3Uhamz48GnFCz
B6O5EDMcaVNROZMli4ljMjTJLu3xBIcPXNZ+/Z0a+AvLfXtbe3QXxcaaDJGvPUpJ
Envwe4H+jdDBhJvJrvVhXRarc0gDMjk063pUoGhzG1kzICjCcNYMqm2wmALN6/UX
zMwoyXuiMjn7tTLZegfNU5GIQfIA5qaFKJYdAgMBAAGjggIKMIICBjAdBgNVHQ4E
FgQURw0TGnVBkjypoaTHaleIrf0kDKcwHwYDVR0jBBgwFoAUT04zJwO54ZxdoBGk
jEsnbpsp11wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4
L1QwNHpKd081NFp4ZG9CR2tqRXNuYnBzcDExdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvVDA0ekp3TzU0Wnhkb0JHa2pFc25icHNwMTF3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA4L1QwNHpKd081NFp4ZG9C
R2tqRXNuYnBzcDExdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5tAT3Q3b+WuRV8Qlqfc5SGgFAL6+xTU7Brae3wTagw2MeRpkQlUJjC99ZBQZy
iWmsGB5qsd/r87cbmwbFu36kQwUBGV1E6ePwojaAuQUqsmHAwboxhgKh9zd55QLB
JjGSOzvKVHLGt3LmDUiqSVlwetv82GBQlSDgsTq+/zOeFHRy4qULsp6e6MMqKodZ
ZvhT/tBa5DpRva4CQ+N2cE0ZLHQsdFTr/XXX8qTBaftkpwSlj4Cctv7CiKaRKr5r
vnGPqiPtvac9MEYpAKjep8fhonxs0TCqRvj+haMdBvf63rt4H8nCoU999JxCMMGn
GadR5AuYeJMNCUK4Wly3Welr
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:39 2025 by rpki-client