Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft
File: QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft (raw, json)
Hash identifier: 0A+nW+GeLixzqghOMp2h93iKhpkFrciGKOCGZmjsjjo=
Subject key identifier: C4:6E:26:E6:D3:2D:1E:4F:A1:1A:95:32:B9:76:0E:FA:00:B3:12:56
Authority key identifier: 40:0E:A7:D3:13:33:74:B4:88:15:49:A3:E8:25:62:67:DB:1D:3F:9B
Certificate issuer: /CN=400EA7D3133374B4881549A3E8256267DB1D3F9B
Certificate serial: 09CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QA6n0xMzdLSIFUmj6CViZ9sdP5s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft
Manifest number: 09CC
Signing time: Sat 29 Mar 2025 10:28:53 +0000
Manifest this update: Sat 29 Mar 2025 10:28:53 +0000
Manifest next update: Sat 29 Mar 2025 16:28:53 +0000
Files and hashes: 1: QA6n0xMzdLSIFUmj6CViZ9sdP5s.crl (hash: z3CeY8CMp32cDRlAUiiYfeB5cT+rOrWVCd0CQBDfcNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400EA7D3133374B4881549A3E8256267DB1D3F9B
Validity
Not Before: Mar 29 10:28:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C46E26E6D32D1E4FA11A9532B9760EFA00B31256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:19:2b:73:8f:19:f3:48:9c:2b:ee:4b:38:
97:0d:da:3a:6b:ce:ae:26:30:d8:09:de:d0:50:19:
3f:8e:3e:f1:7c:bc:fd:fe:cd:b2:85:ed:2e:7a:da:
5e:10:4f:9a:7c:a8:be:94:ba:b1:c1:31:d2:46:89:
76:17:64:aa:9a:57:c5:07:11:4d:04:b3:ba:10:99:
77:9b:4d:56:64:aa:ff:df:74:d6:e6:74:86:c5:9f:
1a:7a:bf:99:e0:9f:28:9c:db:de:03:28:a7:45:5f:
a6:6e:a5:b4:3a:49:5d:90:a9:20:2c:98:63:6a:47:
3b:99:b4:f6:49:19:f3:6d:f6:f8:c2:9e:80:08:02:
a5:7b:1c:11:0e:5e:ed:de:de:9a:f1:f6:f5:f1:b9:
99:71:59:52:3f:76:c0:2b:dc:17:d9:56:6d:ab:32:
15:4f:b7:e0:c8:cb:a7:85:3c:8b:12:a5:0b:b1:c1:
0a:49:8a:21:a4:7a:f0:e4:81:58:38:6c:5f:e8:dc:
97:57:58:54:b9:35:71:d9:0f:e1:69:43:ab:7f:0e:
d1:65:47:70:45:47:19:64:fe:a6:9d:fe:e0:34:27:
4a:5c:bb:11:52:8c:f7:d1:1c:db:49:25:7b:f9:9d:
63:a5:24:a7:c6:c9:54:9a:4b:c4:c6:f2:39:36:72:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:26:E6:D3:2D:1E:4F:A1:1A:95:32:B9:76:0E:FA:00:B3:12:56
X509v3 Authority Key Identifier:
keyid:40:0E:A7:D3:13:33:74:B4:88:15:49:A3:E8:25:62:67:DB:1D:3F:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QA6n0xMzdLSIFUmj6CViZ9sdP5s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3244/QA6n0xMzdLSIFUmj6CViZ9sdP5s.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a4:d7:3b:6d:49:3b:d1:fb:d5:f8:ac:18:dd:c0:7b:79:c3:
49:e5:9a:b0:df:6e:db:e4:c7:76:9e:4b:c8:a8:77:bf:dc:06:
1a:5a:17:e1:c9:5a:df:e9:80:57:f9:92:1c:a4:ce:d1:67:b0:
6b:56:f4:41:54:f3:b6:06:45:11:ab:88:43:4e:1b:cf:72:d0:
1c:8f:db:95:15:6a:fd:82:61:09:28:db:e7:f3:70:8c:d5:11:
7c:fc:1d:b9:18:ce:15:b1:ed:03:be:f9:3d:60:af:30:6c:8f:
69:eb:15:17:d9:8b:48:8b:02:2e:3f:31:e0:d4:fa:89:5a:e6:
ab:e5:f6:49:70:b4:d2:c7:cf:77:77:70:4d:2c:11:54:fb:3c:
6b:15:2a:02:7e:6c:19:ca:8d:cb:32:68:c5:72:2f:96:85:cb:
c9:88:83:df:2a:9b:9d:6b:c9:41:13:e6:78:d6:e9:fc:df:53:
46:5e:4f:2e:d3:a2:b9:11:b9:90:81:fb:0b:44:c5:0c:ea:b7:
5a:b0:51:c5:c1:d4:c3:57:95:8e:f1:77:b5:da:45:16:2b:98:
b7:2b:68:74:b2:86:64:75:4c:82:a2:04:b7:a8:e3:02:16:ed:
e1:f7:2b:7f:cd:bc:28:85:f4:40:86:be:e7:ef:d7:56:53:24:
63:93:15:1d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDAw
RUE3RDMxMzMzNzRCNDg4MTU0OUEzRTgyNTYyNjdEQjFEM0Y5QjAeFw0yNTAzMjkx
MDI4NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM0NkUyNkU2RDMyRDFF
NEZBMTFBOTUzMkI5NzYwRUZBMDBCMzEyNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCvxkrc48Z80icK+5LOJcN2jprzq4mMNgJ3tBQGT+OPvF8vP3+
zbKF7S562l4QT5p8qL6UurHBMdJGiXYXZKqaV8UHEU0Es7oQmXebTVZkqv/fdNbm
dIbFnxp6v5ngnyic294DKKdFX6ZupbQ6SV2QqSAsmGNqRzuZtPZJGfNt9vjCnoAI
AqV7HBEOXu3e3prx9vXxuZlxWVI/dsAr3BfZVm2rMhVPt+DIy6eFPIsSpQuxwQpJ
iiGkevDkgVg4bF/o3JdXWFS5NXHZD+FpQ6t/DtFlR3BFRxlk/qad/uA0J0pcuxFS
jPfRHNtJJXv5nWOlJKfGyVSaS8TG8jk2cs5xAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUxG4m5tMtHk+hGpUyuXYO+gCzElYwHwYDVR0jBBgwFoAUQA6n0xMzdLSIFUmj
6CViZ9sdP5swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
NC9RQTZuMHhNemRMU0lGVW1qNkNWaVo5c2RQNXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FBNm4weE16ZExTSUZVbWo2Q1ZpWjlzZFA1cy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDQvUUE2bjB4TXpkTFNJ
RlVtajZDVmlaOXNkUDVzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAF2k1zttSTvR+9X4rBjdwHt5w0nlmrDfbtvkx3aeS8iod7/cBhpaF+HJWt/p
gFf5khykztFnsGtW9EFU87YGRRGriENOG89y0ByP25UVav2CYQko2+fzcIzVEXz8
HbkYzhWx7QO++T1grzBsj2nrFRfZi0iLAi4/MeDU+ola5qvl9klwtNLHz3d3cE0s
EVT7PGsVKgJ+bBnKjcsyaMVyL5aFy8mIg98qm51ryUET5njW6fzfU0ZeTy7TorkR
uZCB+wtExQzqt1qwUcXB1MNXlY7xd7XaRRYrmLcraHSyhmR1TIKiBLeo4wIW7eH3
K3/NvCiF9ECGvufv11ZTJGOTFR0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:02 2025 by rpki-client