Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
File: zJxrrh4RAiWutPnSb5WBXY-SoY4.mft (raw, json)
Hash identifier: RkgC/eC1QvQgn17aqz8FHbV+szvZCynLg14FiaFdsVw=
Subject key identifier: 22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5
Authority key identifier: CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E
Certificate issuer: /CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E
Certificate serial: 09FB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
Manifest number: 09FB
Signing time: Thu 05 Jun 2025 16:41:17 +0000
Manifest this update: Thu 05 Jun 2025 16:41:17 +0000
Manifest next update: Thu 05 Jun 2025 22:41:17 +0000
Files and hashes: 1: zJxrrh4RAiWutPnSb5WBXY-SoY4.crl (hash: fZP1sZJW7LYoDzUk1XcewtF+0j/t+31yjUvTDM2lK18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC9C6BAE1E110225AEB4F9D26F95815D8F92A18E
Validity
Not Before: Jun 5 16:41:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=2232CEEE9F2C0E9D8EC61870CE6F50A937F482C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:7d:69:60:a4:5b:19:24:87:10:8a:4a:9d:
bc:c3:45:30:06:4b:14:c8:35:f2:1d:3e:5a:eb:27:
9b:4b:ee:c4:7e:1c:70:d5:ec:6f:0a:fe:5d:56:34:
22:b2:a0:2b:8d:44:a9:5f:1d:00:9f:16:b5:7a:45:
d6:83:a8:fe:fe:84:05:f2:c4:36:60:96:26:f7:cd:
1b:0f:f6:3c:8f:41:1f:87:7d:a7:7a:f4:a3:10:85:
68:7d:da:85:35:83:53:da:34:4a:06:53:8d:3f:1b:
66:ec:bb:31:27:68:3b:eb:d5:8a:2e:51:a2:d6:d7:
1b:64:ac:61:49:ed:23:eb:60:6a:3f:07:38:40:92:
5a:08:b6:7f:3e:db:13:f7:e5:ea:b6:b8:12:ef:56:
ab:bb:1b:49:f3:a7:b4:48:22:c6:ef:12:e1:5b:a9:
34:0e:f3:54:b0:49:0f:3b:db:6c:2b:d2:03:77:c8:
a2:38:4a:ed:e3:56:75:f6:f2:84:00:cf:2f:52:f2:
87:e2:bc:f5:09:6d:63:9a:7a:fc:29:1c:6e:a8:05:
1c:c6:9f:3d:f1:86:f2:bc:5b:c8:01:1d:a0:66:61:
aa:ba:d2:9e:a4:20:b1:49:7f:58:87:c4:f6:f4:4c:
5b:bd:bb:9a:3c:f8:30:e8:82:77:21:90:fd:ec:d8:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:CE:EE:9F:2C:0E:9D:8E:C6:18:70:CE:6F:50:A9:37:F4:82:C5
X509v3 Authority Key Identifier:
keyid:CC:9C:6B:AE:1E:11:02:25:AE:B4:F9:D2:6F:95:81:5D:8F:92:A1:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zJxrrh4RAiWutPnSb5WBXY-SoY4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3254/zJxrrh4RAiWutPnSb5WBXY-SoY4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:39:01:61:83:0f:5a:7b:95:5c:7b:d7:97:b2:42:71:7f:dd:
0c:a9:97:44:04:4e:49:7e:0e:0c:63:6b:58:37:c0:1c:af:8d:
82:5a:15:fb:b6:32:52:29:24:50:2b:48:e5:3b:e7:29:36:0d:
3b:0b:ba:38:16:8a:19:9c:c1:06:87:67:b2:14:8d:6b:6a:c2:
2d:d4:2f:da:6e:51:fb:0e:5e:1c:91:83:92:ed:47:2c:8a:7d:
42:dd:61:1d:02:f2:eb:7c:35:ee:ef:75:90:41:d1:14:10:ae:
c1:c0:56:f6:97:03:9a:7c:23:9d:f0:c3:80:1f:11:9c:40:81:
69:65:6e:96:9a:9a:68:60:d4:b0:36:ca:e7:50:13:36:d0:98:
0a:c7:a5:87:2e:0f:67:e1:5f:aa:73:03:15:ee:b9:61:64:bc:
33:ae:0d:24:9f:e3:16:bd:4a:ed:b9:02:71:44:5d:f8:f5:01:
b2:00:be:76:42:5c:de:7e:79:f8:38:e7:c4:c0:ec:dc:a2:c7:
fd:b5:40:7f:48:8e:8c:2d:a5:a7:b8:e6:82:d3:b5:b2:fe:d8:
6c:2e:81:11:f2:86:5c:9a:f5:08:3f:85:ae:42:ce:a2:8f:d7:
11:17:a2:29:0d:b3:59:f1:a2:14:66:be:3f:a0:b7:20:07:94:
a7:48:74:99
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0M5
QzZCQUUxRTExMDIyNUFFQjRGOUQyNkY5NTgxNUQ4RjkyQTE4RTAeFw0yNTA2MDUx
NjQxMTdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIyMzJDRUVFOUYyQzBF
OUQ4RUM2MTg3MENFNkY1MEE5MzdGNDgyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvk31pYKRbGSSHEIpKnbzDRTAGSxTINfIdPlrrJ5tL7sR+HHDV
7G8K/l1WNCKyoCuNRKlfHQCfFrV6RdaDqP7+hAXyxDZglib3zRsP9jyPQR+Hfad6
9KMQhWh92oU1g1PaNEoGU40/G2bsuzEnaDvr1YouUaLW1xtkrGFJ7SPrYGo/BzhA
kloItn8+2xP35eq2uBLvVqu7G0nzp7RIIsbvEuFbqTQO81SwSQ8722wr0gN3yKI4
Su3jVnX28oQAzy9S8ofivPUJbWOaevwpHG6oBRzGnz3xhvK8W8gBHaBmYaq60p6k
ILFJf1iHxPb0TFu9u5o8+DDognchkP3s2FoBAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUIjLO7p8sDp2Oxhhwzm9QqTf0gsUwHwYDVR0jBBgwFoAUzJxrrh4RAiWutPnS
b5WBXY+SoY4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1
NC96Snhycmg0UkFpV3V0UG5TYjVXQlhZLVNvWTQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pKeHJyaDRSQWlXdXRQblNiNVdCWFktU29ZNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTQvekp4cnJoNFJBaVd1
dFBuU2I1V0JYWS1Tb1k0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHg5AWGDD1p7lVx715eyQnF/3Qypl0QETkl+Dgxja1g3wByvjYJaFfu2MlIp
JFArSOU75yk2DTsLujgWihmcwQaHZ7IUjWtqwi3UL9puUfsOXhyRg5LtRyyKfULd
YR0C8ut8Ne7vdZBB0RQQrsHAVvaXA5p8I53ww4AfEZxAgWllbpaammhg1LA2yudQ
EzbQmArHpYcuD2fhX6pzAxXuuWFkvDOuDSSf4xa9Su25AnFEXfj1AbIAvnZCXN5+
efg458TA7Nyix/21QH9Ijowtpae45oLTtbL+2GwugRHyhlya9Qg/ha5CzqKP1xEX
oikNs1nxohRmvj+gtyAHlKdIdJk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:09:16 2025 by rpki-client