
Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft
File: LLZxhuKWyJ4fNHee1moHf34FDMs.mft (raw, json)
Hash identifier: PmHyqZjBRnvvAfX0a7NQ50SdvkdYVLVFb9YLurjaEH0=
Subject key identifier: EE:E7:66:07:45:31:6C:EB:B5:5D:77:23:23:D6:F3:BF:7E:02:0E:02
Authority key identifier: 2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
Certificate issuer: /CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Certificate serial: 092C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft
Manifest number: 0926
Signing time: Fri 21 Mar 2025 00:32:05 +0000
Manifest this update: Fri 21 Mar 2025 00:32:05 +0000
Manifest next update: Fri 21 Mar 2025 06:32:05 +0000
Files and hashes: 1: LLZxhuKWyJ4fNHee1moHf34FDMs.crl (hash: Mdn1DgYGbqHJr/l0JkMiXIQYZ8gXhTE53B5dNhRAqmo=)
2: eIX9B5oTT8Afk53vQvu3daVchQ4.roa (hash: CQJJJrzHb+FxMotc0vFAgvb52xx3drbyHUT6aG+tOUU=)
3: i10qSHnh6m8aVzQOZKXcvexHxls.roa (hash: H/N+6B6Hpc3orlFtq/bmwtX3N0sXzEiHz+xcVYx8joE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Validity
Not Before: Mar 21 00:32:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EEE7660745316CEBB55D772323D6F3BF7E020E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:23:70:38:ae:2c:7f:6d:08:58:b8:f7:eb:
b8:57:c9:56:bf:b5:2a:c3:48:5b:90:7b:7a:6d:cb:
3d:10:78:c8:0c:d7:81:0b:4e:20:9a:2f:cb:dc:ec:
2e:2f:20:2e:6f:49:18:c2:2e:03:1b:f9:66:59:82:
c5:db:17:c6:7b:0d:41:fa:04:14:7f:18:47:e2:c6:
56:52:56:35:d8:fc:c7:ad:bf:a2:4e:1f:2c:7d:c8:
f9:ae:c7:e8:ab:9d:9f:e8:9a:f2:19:3a:48:64:e0:
20:b4:d6:ed:4d:af:d0:bb:0d:fc:47:e7:22:0f:0e:
be:b0:dd:3f:bf:57:09:c5:02:a6:b3:47:5a:ef:5c:
29:e0:91:bd:0c:0c:07:b7:86:a4:e5:26:66:f0:a8:
85:9e:ee:df:4f:2e:e8:ac:da:8d:9f:31:78:21:2b:
dc:c6:5c:14:a9:3f:f0:50:fa:92:9c:7a:79:01:3f:
f3:23:9e:2b:58:3d:ef:33:c0:27:26:df:e1:7e:c3:
e0:77:7d:9c:2a:86:fa:35:a4:91:8f:41:b0:2a:8c:
74:e3:63:ee:c0:04:48:f5:6f:92:bf:a2:98:03:e9:
2d:ca:ae:a1:9f:cb:78:e9:17:f6:af:4b:72:2b:45:
75:2f:44:82:d9:79:f6:3c:6c:09:5c:d5:d7:2e:a1:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E7:66:07:45:31:6C:EB:B5:5D:77:23:23:D6:F3:BF:7E:02:0E:02
X509v3 Authority Key Identifier:
keyid:2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:ae:bf:8a:0b:22:c0:54:c5:95:96:d9:92:74:eb:d4:39:
e9:ce:af:a6:26:44:cd:ef:57:e1:bc:85:7c:02:5e:af:b0:53:
80:f7:57:69:6a:79:a3:49:62:af:0e:4d:73:ce:e9:4b:5f:88:
6e:cf:f0:04:02:82:96:e6:2c:0a:d5:08:f1:63:51:ba:eb:72:
c0:14:05:39:8d:77:0a:fb:a9:5c:c5:60:e5:8c:46:16:8c:a7:
e2:2d:cd:16:59:e1:64:4b:91:4d:07:15:0b:b3:53:54:5a:ca:
05:d2:9b:5d:ae:ae:34:07:37:6d:0e:a4:51:c0:f9:f2:5a:17:
8e:e0:13:47:95:52:c1:44:8f:c5:7e:94:01:5b:df:e7:86:4d:
ad:2c:50:93:20:7b:07:28:99:76:14:6a:08:7a:69:2f:4c:89:
6f:85:0f:4f:8c:b0:20:65:c2:66:29:db:24:a2:46:8c:20:44:
15:96:fd:d5:85:03:b0:9f:f0:21:02:53:59:75:2b:df:02:cb:
0a:07:5d:51:e8:78:3c:70:b6:36:ee:af:85:1f:a9:05:c4:a1:
aa:81:01:e7:27:b6:32:3e:39:14:ae:17:66:a2:ae:74:e0:41:
a0:5c:c4:4a:3f:b2:09:6e:d0:60:bc:79:2d:b3:eb:67:e0:cf:
3e:e6:c3:6d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC
NjcxODZFMjk2Qzg5RTFGMzQ3NzlFRDY2QTA3N0Y3RTA1MENDQjAeFw0yNTAzMjEw
MDMyMDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVFRTc2NjA3NDUzMTZD
RUJCNTVENzcyMzIzRDZGM0JGN0UwMjBFMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkLSNwOK4sf20IWLj367hXyVa/tSrDSFuQe3ptyz0QeMgM14EL
TiCaL8vc7C4vIC5vSRjCLgMb+WZZgsXbF8Z7DUH6BBR/GEfixlZSVjXY/Metv6JO
Hyx9yPmux+irnZ/omvIZOkhk4CC01u1Nr9C7DfxH5yIPDr6w3T+/VwnFAqazR1rv
XCngkb0MDAe3hqTlJmbwqIWe7t9PLuis2o2fMXghK9zGXBSpP/BQ+pKcenkBP/Mj
nitYPe8zwCcm3+F+w+B3fZwqhvo1pJGPQbAqjHTjY+7ABEj1b5K/opgD6S3KrqGf
y3jpF/avS3IrRXUvRILZefY8bAlc1dcuoXGlAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQU7udmB0UxbOu1XXcjI9bzv34CDgIwHwYDVR0jBBgwFoAULLZxhuKWyJ4fNHee
1moHf34FDMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
Ni9MTFp4aHVLV3lKNGZOSGVlMW1vSGYzNEZETXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xMWnhodUtXeUo0Zk5IZWUxbW9IZjM0RkRNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDYvTExaeGh1S1d5SjRm
TkhlZTFtb0hmMzRGRE1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAW9rr+KCyLAVMWVltmSdOvUOenOr6YmRM3vV+G8hXwCXq+wU4D3V2lqeaNJ
Yq8OTXPO6UtfiG7P8AQCgpbmLArVCPFjUbrrcsAUBTmNdwr7qVzFYOWMRhaMp+It
zRZZ4WRLkU0HFQuzU1RaygXSm12urjQHN20OpFHA+fJaF47gE0eVUsFEj8V+lAFb
3+eGTa0sUJMgewcomXYUagh6aS9MiW+FD0+MsCBlwmYp2ySiRowgRBWW/dWFA7Cf
8CECU1l1K98CywoHXVHoeDxwtjbur4UfqQXEoaqBAecntjI+ORSuF2airnTgQaBc
xEo/sglu0GC8eS2z62fgzz7mw20=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:07:09 2025 by rpki-client