Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft
File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json)
Hash identifier: W0KsAFYzBDrtSi8IV+zdvFb8rAHoOlyjkPwJsp6oO90=
Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E
Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A
Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A
Certificate serial: 1518
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft
Manifest number: 1518
Signing time: Sat 29 Mar 2025 10:31:50 +0000
Manifest this update: Sat 29 Mar 2025 10:31:50 +0000
Manifest next update: Sat 29 Mar 2025 16:31:50 +0000
Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: sU7fhvDhZ4HDvy2vab9/81c0uu9uQLEi5M1iHRVYhvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5400 (0x1518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A
Validity
Not Before: Mar 29 10:31:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca:
46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f:
f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17:
50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0:
9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d:
da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f:
82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d:
b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae:
fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11:
a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c:
fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d:
85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61:
56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b:
bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19:
a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1:
77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef:
02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E
X509v3 Authority Key Identifier:
keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:45:52:12:4f:04:f8:79:11:42:6e:97:3b:77:7e:86:3b:22:
80:60:85:6f:1e:28:cd:bd:cc:db:4f:7f:c3:1b:13:7b:08:9c:
96:68:6a:6a:3f:dd:03:68:6e:2a:9a:e9:c8:5d:d6:2c:8e:0e:
4d:3f:9a:67:73:61:14:50:98:8f:90:f8:1a:6c:9d:1d:55:3d:
5b:95:56:b5:a5:a8:a3:77:81:f3:98:a5:ae:bb:31:c8:bc:26:
e2:3d:49:6f:e4:8c:93:18:e6:e6:3a:37:c7:37:b5:0e:f7:d8:
96:07:b7:3f:f7:86:c1:14:69:8b:82:e0:b1:55:b7:7b:19:eb:
86:e0:a2:e9:87:14:de:38:1c:82:3d:8a:67:47:2a:a4:cb:09:
1c:c3:b6:6b:00:30:53:8b:41:f6:d8:aa:ed:ce:20:e6:c1:cf:
d2:b8:6b:0a:2a:86:63:8e:3b:70:5c:12:a1:c2:01:4e:81:ad:
28:7c:32:80:86:96:fa:cb:16:35:23:f2:d9:49:c7:67:6a:ac:
63:bb:68:1b:22:07:d0:b7:2b:14:b2:b5:ee:7a:08:1d:43:61:
ae:44:a3:da:a3:51:cd:f0:bc:52:3d:a3:84:e8:25:c0:18:54:
7d:81:82:48:72:2c:90:b9:bb:4e:ed:2b:35:f6:f2:06:fc:c6:
c2:fb:56:e2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICFRgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0
QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTAzMjkx
MDMxNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0
OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT
tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ
TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj
EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV
pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn
gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+
mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0
My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F
VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKtFUhJPBPh5EUJulzt3foY7IoBghW8eKM29zNtPf8MbE3sInJZoamo/3QNo
biqa6chd1iyODk0/mmdzYRRQmI+Q+BpsnR1VPVuVVrWlqKN3gfOYpa67Mci8JuI9
SW/kjJMY5uY6N8c3tQ732JYHtz/3hsEUaYuC4LFVt3sZ64bgoumHFN44HII9imdH
KqTLCRzDtmsAMFOLQfbYqu3OIObBz9K4awoqhmOOO3BcEqHCAU6BrSh8MoCGlvrL
FjUj8tlJx2dqrGO7aBsiB9C3KxSyte56CB1DYa5Eo9qjUc3wvFI9o4ToJcAYVH2B
gkhyLJC5u07tKzX28gb8xsL7VuI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:19 2025 by rpki-client