Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft
File: _RcrCSdVjbeuit47T13UnttFtYI.mft (raw, json)
Hash identifier: D4vCfcON3onvLbeYC7TqW7RUPsGAzFknYtUL1lTcyNA=
Subject key identifier: BA:C0:BE:93:0C:6F:B2:3A:14:6F:2C:FE:AB:B2:C3:1E:12:51:DC:FA
Authority key identifier: FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82
Certificate issuer: /CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582
Certificate serial: 0CE0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft
Manifest number: 0CE0
Signing time: Tue 10 Jun 2025 07:11:07 +0000
Manifest this update: Tue 10 Jun 2025 07:11:07 +0000
Manifest next update: Tue 10 Jun 2025 13:11:07 +0000
Files and hashes: 1: _RcrCSdVjbeuit47T13UnttFtYI.crl (hash: /ia1zuSPzKi32oYoaZeblYrrcFJvvQbJRaw8v3xyXks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD172B0927558DB7AE8ADE3B4F5DD49EDB45B582
Validity
Not Before: Jun 10 07:11:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=BAC0BE930C6FB23A146F2CFEABB2C31E1251DCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:ab:1a:a5:83:5f:12:80:b0:22:4b:21:78:
4a:c7:c5:39:29:89:85:6c:06:2b:a7:35:76:ce:38:
26:fe:07:7c:70:75:4c:5b:ae:a4:ff:63:9b:05:a8:
76:67:47:62:c2:d5:3b:a2:32:6d:2e:cc:05:20:86:
44:cf:91:86:8c:c9:f7:3b:14:5d:07:5b:c0:58:8f:
f4:ab:f7:bd:4f:56:d3:d2:80:25:e0:e8:c5:3b:8c:
ff:a4:0d:0f:fe:4c:be:d1:8e:b5:a3:d1:01:f3:dc:
62:c0:86:db:fb:e8:b9:ca:cf:12:a3:d8:74:92:14:
31:64:61:af:8a:83:6e:e4:ac:93:1d:e1:0a:20:f4:
4c:69:e0:07:4f:ef:3b:d6:61:b3:e6:42:49:0d:40:
f4:7f:8e:fa:11:ad:b4:9a:80:96:28:cd:50:fc:68:
14:13:e7:dd:05:41:c2:25:50:06:ab:4b:fb:c1:d9:
28:29:73:4c:d6:38:3b:ce:e1:f6:d0:de:0a:38:a5:
2f:83:fb:b2:8d:1d:09:f3:b2:e0:5e:82:61:30:12:
35:6d:32:c8:5b:92:63:19:07:d3:ad:48:ed:8e:09:
7f:b7:b8:09:91:60:75:90:f6:54:c3:69:08:da:cc:
ba:87:68:79:7e:8a:5a:7a:ba:85:57:95:16:fe:c8:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:BE:93:0C:6F:B2:3A:14:6F:2C:FE:AB:B2:C3:1E:12:51:DC:FA
X509v3 Authority Key Identifier:
keyid:FD:17:2B:09:27:55:8D:B7:AE:8A:DE:3B:4F:5D:D4:9E:DB:45:B5:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_RcrCSdVjbeuit47T13UnttFtYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3236/_RcrCSdVjbeuit47T13UnttFtYI.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:5b:d9:c6:cd:c0:e8:17:9e:ea:13:a7:0c:bd:f3:7c:8d:
10:79:13:77:10:07:a8:b2:4b:84:21:e2:d2:8b:b7:12:e6:ca:
4e:ed:bc:48:0c:b2:1d:90:31:d9:ef:11:18:10:62:ef:b9:03:
7f:36:3e:25:7f:ca:fa:11:e6:36:b2:9a:2e:7f:89:8d:cf:52:
eb:01:c5:97:ca:d9:56:74:98:ab:f6:ad:2c:6d:ae:3e:b4:9c:
d9:63:bf:f2:9b:15:c9:85:59:26:92:c8:59:7c:6f:95:0b:79:
d0:18:82:18:ec:1a:39:61:85:48:a7:02:3b:70:1b:53:e8:15:
e9:c1:13:2c:d1:1d:84:00:92:ba:ea:5e:bf:0e:2f:16:35:0c:
e0:cb:02:2b:74:16:00:84:e9:6e:d3:e9:9a:07:81:b1:1e:df:
7e:2b:23:0e:e4:d2:74:5e:a4:66:f1:11:ab:d0:c1:97:d7:67:
68:9b:eb:43:8d:21:66:f5:58:cb:fc:1a:10:60:c6:4a:fc:7a:
59:4b:d7:8a:c2:f9:61:9b:6b:ad:6a:68:d1:02:6a:5b:db:10:
bb:fd:6a:c9:9b:76:4a:0b:b6:2c:87:29:3b:6c:6a:1f:c9:17:
16:b7:7a:ac:1b:1f:c3:0c:3d:22:58:a9:59:88:bb:f5:63:9a:
55:9a:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:04:53 2025 by rpki-client