Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
File: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft (raw, json)
Hash identifier: 1winzF2V8Yr5u0MAeLAd5EbiRj0gkkpCTPXrXVKpOsk=
Subject key identifier: ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
Authority key identifier: 33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
Certificate issuer: /CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Certificate serial: 0D5C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
Manifest number: 0D5C
Signing time: Thu 05 Jun 2025 16:44:16 +0000
Manifest this update: Thu 05 Jun 2025 16:44:15 +0000
Manifest next update: Thu 05 Jun 2025 22:44:15 +0000
Files and hashes: 1: M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl (hash: SOaIoUbsF3KSgTwHhWFxm0ithoQlZGZCibyzlhoGY4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33468F568261F2D808F7030E09CFABBE1EE0ED14
Validity
Not Before: Jun 5 16:44:15 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=ED36A94A5AD0ECFE0D6E81ADB7E375D2E5C24013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:a7:6e:3b:c7:5d:17:9a:a4:66:67:49:8c:
6a:96:c6:86:41:c0:df:00:c5:aa:1d:9f:cd:8f:62:
a1:d7:c3:2f:89:8c:e0:4f:59:ca:44:40:6a:4b:a5:
2b:bc:5e:bc:0b:07:9d:c2:69:d4:c5:1c:06:40:04:
54:50:5b:87:2e:b5:d0:ac:33:3d:0a:01:c6:e0:03:
df:f7:b2:1d:fa:03:e7:b1:f5:49:f7:e3:5c:0f:db:
c6:b0:39:08:01:78:6f:88:49:65:a4:09:de:b5:a2:
30:06:d6:68:8a:15:bf:f7:51:77:74:df:33:df:32:
00:a2:42:d8:01:3d:fe:d5:93:52:27:3b:e5:35:92:
4c:45:67:b6:37:18:65:94:0e:d8:e7:72:70:cb:d1:
6d:44:ef:98:1c:23:8e:2b:7f:7b:52:8f:7d:11:ac:
c4:41:29:a3:17:a3:de:47:14:a3:9b:98:ea:70:b4:
24:61:d8:c3:cd:d4:66:77:36:c0:dd:f0:9f:8c:9c:
fc:58:57:ed:10:a5:47:51:58:58:54:c7:80:82:42:
8e:b9:c7:9e:51:6a:f5:b9:31:2a:24:9d:e4:8f:cc:
30:fd:24:1e:ae:04:42:cf:ae:7f:40:28:b1:23:03:
1d:7c:1d:9e:a6:8e:47:49:50:1d:e8:19:80:5e:18:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:A9:4A:5A:D0:EC:FE:0D:6E:81:AD:B7:E3:75:D2:E5:C2:40:13
X509v3 Authority Key Identifier:
keyid:33:46:8F:56:82:61:F2:D8:08:F7:03:0E:09:CF:AB:BE:1E:E0:ED:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3228/M0aPVoJh8tgI9wMOCc-rvh7g7RQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:76:66:c2:45:f8:ce:44:4b:29:a3:89:a3:78:10:e6:a9:
3c:56:92:22:5b:05:21:48:bc:95:b6:68:bb:35:3f:be:2d:57:
7c:2d:37:2c:55:0c:cf:02:d0:29:82:b8:4b:51:e9:ce:12:cf:
24:d5:0c:24:52:10:c7:f9:10:2a:c4:06:92:ea:75:50:d4:a9:
9d:9d:61:0e:21:62:7e:70:db:88:27:d7:28:a0:a6:23:63:94:
33:c0:93:b8:5f:08:c9:3d:92:37:14:82:35:b7:b8:b5:18:08:
c7:4d:61:0e:5d:d6:72:56:17:c9:00:68:02:1b:29:8a:33:14:
66:a8:b5:f5:66:05:4c:ed:fd:e5:0b:71:3c:c8:cc:d1:cf:16:
5a:4a:ff:3f:b8:8d:ca:f5:12:59:34:0a:2e:a7:45:7c:92:1d:
11:7d:66:87:53:b5:8c:a3:35:c2:28:6a:12:60:f4:b6:8c:26:
ba:c7:74:05:27:f8:c5:46:ce:1d:6e:2b:e9:11:8d:59:bc:82:
4e:c4:d1:c4:d4:3c:6b:c7:4f:99:b1:7e:4e:da:94:13:2b:b2:
69:b1:a0:76:fd:f6:48:43:eb:19:5c:81:8a:a6:47:8e:ea:90:
cd:cc:fc:7a:3f:1c:6c:85:b1:02:9c:17:5d:6c:ac:c5:b0:42:
35:3b:97:ed
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzM0
NjhGNTY4MjYxRjJEODA4RjcwMzBFMDlDRkFCQkUxRUUwRUQxNDAeFw0yNTA2MDUx
NjQ0MTVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVEMzZBOTRBNUFEMEVD
RkUwRDZFODFBREI3RTM3NUQyRTVDMjQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWa6duO8ddF5qkZmdJjGqWxoZBwN8Axaodn82PYqHXwy+JjOBP
WcpEQGpLpSu8XrwLB53CadTFHAZABFRQW4cutdCsMz0KAcbgA9/3sh36A+ex9Un3
41wP28awOQgBeG+ISWWkCd61ojAG1miKFb/3UXd03zPfMgCiQtgBPf7Vk1InO+U1
kkxFZ7Y3GGWUDtjncnDL0W1E75gcI44rf3tSj30RrMRBKaMXo95HFKObmOpwtCRh
2MPN1GZ3NsDd8J+MnPxYV+0QpUdRWFhUx4CCQo65x55RavW5MSokneSPzDD9JB6u
BELPrn9AKLEjAx18HZ6mjkdJUB3oGYBeGCzlAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU7TapSlrQ7P4NboGtt+N10uXCQBMwHwYDVR0jBBgwFoAUM0aPVoJh8tgI9wMO
Cc+rvh7g7RQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy
OC9NMGFQVm9KaDh0Z0k5d01PQ2MtcnZoN2c3UlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL00wYVBWb0poOHRnSTl3TU9DYy1ydmg3ZzdSUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjgvTTBhUFZvSmg4dGdJ
OXdNT0NjLXJ2aDdnN1JRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAI4WdmbCRfjOREspo4mjeBDmqTxWkiJbBSFIvJW2aLs1P74tV3wtNyxVDM8C
0CmCuEtR6c4SzyTVDCRSEMf5ECrEBpLqdVDUqZ2dYQ4hYn5w24gn1yigpiNjlDPA
k7hfCMk9kjcUgjW3uLUYCMdNYQ5d1nJWF8kAaAIbKYozFGaotfVmBUzt/eULcTzI
zNHPFlpK/z+4jcr1Elk0Ci6nRXySHRF9ZodTtYyjNcIoahJg9LaMJrrHdAUn+MVG
zh1uK+kRjVm8gk7E0cTUPGvHT5mxfk7alBMrsmmxoHb99khD6xlcgYqmR47qkM3M
/Ho/HGyFsQKcF11srMWwQjU7l+0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:13:30 2025 by rpki-client