Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3240/n2FqH-9ETrX-pbjXOI8opMzn528.mft
File: n2FqH-9ETrX-pbjXOI8opMzn528.mft (raw, json)
Hash identifier: ktHXLmDGsVGQI7RUr1aHb+IKtqh3uzjPi2AthdcXLPI=
Subject key identifier: 91:00:25:C3:7F:59:C3:71:B5:38:AF:1D:0F:07:76:95:CE:AE:F5:85
Authority key identifier: 9F:61:6A:1F:EF:44:4E:B5:FE:A5:B8:D7:38:8F:28:A4:CC:E7:E7:6F
Certificate issuer: /CN=9F616A1FEF444EB5FEA5B8D7388F28A4CCE7E76F
Certificate serial: 0D43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n2FqH-9ETrX-pbjXOI8opMzn528.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3240/n2FqH-9ETrX-pbjXOI8opMzn528.mft
Manifest number: 0D43
Signing time: Mon 21 Jul 2025 16:42:05 +0000
Manifest this update: Mon 21 Jul 2025 16:42:05 +0000
Manifest next update: Mon 21 Jul 2025 22:42:05 +0000
Files and hashes: 1: n2FqH-9ETrX-pbjXOI8opMzn528.crl (hash: plm1iZr/Kqf0VTkKwSK8SHkNfS8RMlI80t1Ap6mbg7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F616A1FEF444EB5FEA5B8D7388F28A4CCE7E76F
Validity
Not Before: Jul 21 16:42:05 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=910025C37F59C371B538AF1D0F077695CEAEF585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:be:8b:66:f8:84:1b:3d:8f:e3:a4:25:c1:
05:e8:a6:2e:13:08:ca:95:79:b3:b2:e9:19:c9:a4:
63:cc:8b:86:1a:20:98:4f:3d:fd:42:9f:b8:b6:62:
9a:f0:d1:85:dc:e9:ca:76:06:65:f6:fb:30:98:78:
3a:88:3c:23:14:26:fd:30:1d:06:38:ee:6e:b0:65:
03:55:71:91:85:0c:9a:cc:26:f4:fe:a8:bf:4b:6c:
f4:4a:e0:c0:84:8d:c0:b6:14:14:1e:a9:01:71:07:
80:40:3b:3d:15:68:48:ae:11:dd:9c:1d:ec:51:e0:
4b:79:70:ba:fb:93:37:b6:4e:23:5f:99:8e:55:30:
0b:b7:a8:b8:f7:15:26:ea:1f:e2:8c:e3:5a:91:66:
26:f3:4a:73:e0:e2:ff:0b:7e:79:48:5f:d1:dc:59:
24:f4:4d:b7:cf:61:91:74:38:78:b1:c9:30:85:40:
46:ba:6d:d4:b3:34:4c:61:24:ee:19:77:e0:03:1d:
4f:c6:f4:77:e2:f7:6c:df:06:c0:84:d7:1f:0d:b4:
2d:51:2f:c2:78:b3:e1:24:fd:0e:ad:7b:60:f2:58:
17:a6:55:81:90:72:8b:45:70:ec:9b:0a:72:52:49:
b9:1f:e6:02:87:ef:31:ae:7a:ea:b8:57:3b:0d:e1:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:25:C3:7F:59:C3:71:B5:38:AF:1D:0F:07:76:95:CE:AE:F5:85
X509v3 Authority Key Identifier:
keyid:9F:61:6A:1F:EF:44:4E:B5:FE:A5:B8:D7:38:8F:28:A4:CC:E7:E7:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3240/n2FqH-9ETrX-pbjXOI8opMzn528.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/n2FqH-9ETrX-pbjXOI8opMzn528.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3240/n2FqH-9ETrX-pbjXOI8opMzn528.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:56:d3:86:e3:3f:f1:b5:fb:a5:e0:41:c7:c7:c3:54:d0:e4:
6e:50:4c:29:03:9a:dc:19:14:46:79:85:c1:a9:15:65:d5:08:
7c:14:f7:a6:96:7b:22:ed:2b:f6:bf:2e:d2:79:ff:c9:50:a8:
04:55:e3:a6:be:45:81:f9:c9:07:5f:7f:17:1d:92:2a:b4:c3:
ad:1f:1a:9f:b7:0a:4c:db:59:21:a5:fa:dd:39:94:29:46:8c:
6b:27:fe:cf:d1:b7:ed:f9:16:54:23:4e:88:c1:7c:9b:b6:ff:
89:1e:00:bc:ce:d7:e5:52:c3:98:7e:2d:bc:3f:28:6f:92:4b:
cf:af:18:60:95:e0:cd:5f:b5:f5:09:f9:d7:25:47:a6:10:ce:
35:f3:71:81:60:39:67:24:0b:34:bc:68:3f:2b:52:02:0c:00:
23:80:5a:06:42:06:0b:c4:a5:b1:47:47:24:55:26:76:40:97:
a6:e6:5d:9f:0f:49:29:ff:f8:81:01:29:58:39:ca:1d:1c:cf:
a4:58:7d:61:41:cb:02:ba:6d:44:89:b8:00:23:6d:2e:9e:91:
d2:2d:d9:31:70:79:43:69:d4:59:3f:3a:4c:d5:4b:39:a0:8f:
d5:a4:f0:9c:ee:8f:99:6e:8d:22:83:7f:12:4c:fd:8f:2f:85:
78:e7:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:54:00 2025 by rpki-client