Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
File: RHMR0DbVD1TEQW-41oIgp8uWgZk.mft (raw, json)
Hash identifier: QhJIXHiKvY4/ssyJrZxNWX564gS+R/D33naWo0kPOuQ=
Subject key identifier: E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
Authority key identifier: 44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
Certificate issuer: /CN=447311D036D50F54C4416FB8D68220A7CB968199
Certificate serial: 0F52
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
Manifest number: 0F52
Signing time: Sun 20 Jul 2025 16:10:15 +0000
Manifest this update: Sun 20 Jul 2025 16:10:15 +0000
Manifest next update: Sun 20 Jul 2025 22:10:15 +0000
Files and hashes: 1: RHMR0DbVD1TEQW-41oIgp8uWgZk.crl (hash: jU5YIdYE5JCo8d5/LmCjgEG/rdDVNHjGqAssdEUaVZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3922 (0xf52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447311D036D50F54C4416FB8D68220A7CB968199
Validity
Not Before: Jul 20 16:10:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E87AE688BDC7A10FDD5E9B3706E050B1F5ACABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:b5:20:11:08:e9:94:a4:b3:1b:10:e3:3b:
8c:9b:f3:3c:66:be:c4:8c:4c:8f:32:3d:75:bf:40:
7b:bf:65:97:b4:a5:fe:86:a0:df:27:cd:91:ff:04:
80:9d:7b:92:1a:d2:53:3d:27:c4:5d:a3:5c:c3:5c:
09:da:07:ba:5a:0d:d5:1e:a4:6c:fd:17:f2:a3:54:
d7:10:0c:f5:45:bd:d6:fd:89:c3:14:99:b0:96:26:
bc:f2:71:99:3c:9a:25:fd:6e:3a:9f:15:5b:01:e4:
f7:2c:71:0b:3b:9c:a5:e1:28:15:63:3d:3f:61:bd:
99:0c:65:f7:ea:a6:2c:32:c6:9d:ab:8c:6c:12:6b:
77:72:c5:92:9e:23:aa:85:b5:09:6f:7d:e2:b6:66:
82:64:e6:c8:d5:71:b8:db:e6:7a:ee:92:72:48:cc:
75:03:dc:86:79:a6:05:67:84:18:21:37:5e:9e:c6:
fa:3b:a9:a0:c7:79:33:d5:c7:75:d6:11:4c:2e:45:
14:55:6e:95:9f:eb:2f:c8:99:ec:42:7b:89:51:79:
b9:4c:8b:46:ff:73:f2:d0:7f:f8:9b:b8:2c:17:2d:
19:62:83:96:ac:c5:0c:ea:5b:04:bd:e1:b1:b2:7c:
6d:82:3a:c6:23:3d:6e:4f:20:11:17:4f:05:e1:7a:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:E6:88:BD:C7:A1:0F:DD:5E:9B:37:06:E0:50:B1:F5:AC:AB:CD
X509v3 Authority Key Identifier:
keyid:44:73:11:D0:36:D5:0F:54:C4:41:6F:B8:D6:82:20:A7:CB:96:81:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RHMR0DbVD1TEQW-41oIgp8uWgZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3219/RHMR0DbVD1TEQW-41oIgp8uWgZk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:8a:66:27:21:fb:b1:df:43:43:84:11:15:1c:b1:4a:68:ef:
b1:96:74:36:9a:59:5e:f3:9c:23:a5:f1:17:e2:39:88:2d:89:
56:45:82:36:1d:4b:e0:47:ee:64:72:46:13:47:8a:96:e0:56:
bf:e9:fa:b5:fe:50:fb:56:a2:50:87:18:c1:bf:35:0b:7d:39:
0c:b5:67:30:97:34:77:63:ba:91:4b:3d:47:a0:71:7b:88:03:
f2:39:e7:52:da:88:2b:79:6a:68:6d:c9:0f:0f:3b:c0:96:94:
55:85:30:7d:43:79:0e:eb:74:5b:83:8e:b5:0c:44:46:ed:85:
3e:28:72:4d:79:bd:6e:25:09:bf:6f:21:42:0c:f3:d0:5e:d7:
91:fe:6f:b0:d6:b9:2d:d5:bb:d1:5e:18:ba:6f:f0:d1:81:79:
0d:ba:25:15:72:8d:08:5a:cd:0a:93:b3:29:1e:be:a9:d5:97:
a2:38:5e:75:34:70:c7:5a:6f:11:70:a6:22:01:f1:f3:2d:0d:
23:8d:01:7f:b7:b1:a9:89:98:53:93:37:eb:5b:62:43:4d:a2:
33:fb:36:40:51:12:b3:48:13:59:fe:d7:f0:18:23:71:97:49:
60:eb:b7:cc:2a:2f:bf:5d:3b:30:44:05:3c:6f:df:79:7f:80:
fa:c8:87:98
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICD1IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDQ3
MzExRDAzNkQ1MEY1NEM0NDE2RkI4RDY4MjIwQTdDQjk2ODE5OTAeFw0yNTA3MjAx
NjEwMTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEU4N0FFNjg4QkRDN0Ex
MEZERDVFOUIzNzA2RTA1MEIxRjVBQ0FCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmULUgEQjplKSzGxDjO4yb8zxmvsSMTI8yPXW/QHu/ZZe0pf6G
oN8nzZH/BICde5Ia0lM9J8Rdo1zDXAnaB7paDdUepGz9F/KjVNcQDPVFvdb9icMU
mbCWJrzycZk8miX9bjqfFVsB5PcscQs7nKXhKBVjPT9hvZkMZffqpiwyxp2rjGwS
a3dyxZKeI6qFtQlvfeK2ZoJk5sjVcbjb5nruknJIzHUD3IZ5pgVnhBghN16exvo7
qaDHeTPVx3XWEUwuRRRVbpWf6y/ImexCe4lReblMi0b/c/LQf/ibuCwXLRlig5as
xQzqWwS94bGyfG2COsYjPW5PIBEXTwXhehJPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU6HrmiL3HoQ/dXps3BuBQsfWsq80wHwYDVR0jBBgwFoAURHMR0DbVD1TEQW+4
1oIgp8uWgZkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx
OS9SSE1SMERiVkQxVEVRVy00MW9JZ3A4dVdnWmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1JITVIwRGJWRDFURVFXLTQxb0lncDh1V2daay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTkvUkhNUjBEYlZEMVRF
UVctNDFvSWdwOHVXZ1prLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAK+KZich+7HfQ0OEERUcsUpo77GWdDaaWV7znCOl8RfiOYgtiVZFgjYdS+BH
7mRyRhNHipbgVr/p+rX+UPtWolCHGMG/NQt9OQy1ZzCXNHdjupFLPUegcXuIA/I5
51LaiCt5amhtyQ8PO8CWlFWFMH1DeQ7rdFuDjrUMREbthT4ock15vW4lCb9vIUIM
89Be15H+b7DWuS3Vu9FeGLpv8NGBeQ26JRVyjQhazQqTsykevqnVl6I4XnU0cMda
bxFwpiIB8fMtDSONAX+3samJmFOTN+tbYkNNojP7NkBRErNIE1n+1/AYI3GXSWDr
t8wqL79dOzBEBTxv33l/gPrIh5g=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:43 2025 by rpki-client