Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
File: Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft (raw, json)
Hash identifier: lT6EtSQflvxN/HgNAGGfg1Q0iphyymEk9oz1OHVoH3Q=
Subject key identifier: B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
Authority key identifier: 1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
Certificate issuer: /CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Certificate serial: 0973
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
Manifest number: 0973
Signing time: Tue 03 Jun 2025 21:08:50 +0000
Manifest this update: Tue 03 Jun 2025 21:08:50 +0000
Manifest next update: Wed 04 Jun 2025 03:08:50 +0000
Files and hashes: 1: Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl (hash: kHliFbEEtWhC7bOVa2EDSeNqQS8uA7bEeIT/ETpGoOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B18A3DCEEB83A5E37802AB112FD0827E9A962CF
Validity
Not Before: Jun 3 21:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B6729E406F21DD8F18FD5490DE05624792C4229E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:a5:64:ed:2a:8e:ec:40:7e:ca:09:22:48:
34:39:c7:3b:fc:da:f1:a0:f7:59:2b:eb:93:6a:16:
c4:6f:cc:eb:78:de:07:2f:42:d7:24:54:18:9b:26:
aa:71:04:cc:fd:72:5f:a1:3c:a4:6a:da:45:15:f0:
a2:44:ee:e5:9e:48:ad:80:4a:01:31:b5:8e:83:c7:
96:11:2d:e4:f1:9a:4e:a6:c0:9a:8f:e7:51:f3:26:
6b:f6:2b:25:4f:36:02:ed:9d:d9:bf:fc:5c:4b:00:
45:92:07:81:8e:c4:67:cd:c7:fa:40:a8:ca:d6:01:
79:99:2a:d1:29:3a:5f:e8:40:5b:70:e5:ae:10:c6:
50:aa:0d:30:95:d4:d3:3e:2f:80:de:ad:79:b7:c9:
13:27:ec:6f:02:32:4d:80:aa:91:eb:fa:8f:93:82:
d9:83:45:95:dc:85:ec:e4:a9:cb:fd:1b:53:b2:58:
3d:78:68:f6:91:3e:48:1b:fd:fa:9b:58:c4:5d:27:
5b:41:22:3d:90:bb:c8:3f:52:2b:4d:7a:78:5a:31:
a6:e5:a2:7b:83:1e:25:70:f7:89:80:37:c8:75:ab:
af:08:db:20:12:24:59:90:6b:45:a7:a4:06:ef:a8:
0e:12:81:17:24:f3:b9:01:eb:50:3e:b9:6f:b3:f8:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:9E:40:6F:21:DD:8F:18:FD:54:90:DE:05:62:47:92:C4:22:9E
X509v3 Authority Key Identifier:
keyid:1B:18:A3:DC:EE:B8:3A:5E:37:80:2A:B1:12:FD:08:27:E9:A9:62:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gxij3O64Ol43gCqxEv0IJ-mpYs8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3265/Gxij3O64Ol43gCqxEv0IJ-mpYs8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:19:0f:52:14:0c:10:95:f7:e9:55:97:9c:96:a2:47:da:
43:ef:f8:a9:9f:41:a1:d5:d6:d7:24:74:d5:0e:d9:b2:d0:1c:
6b:88:15:43:d8:2a:9e:ba:f3:4c:3e:ce:2a:14:1a:34:44:7e:
77:1f:ce:13:9c:2e:46:75:42:57:8c:a7:79:9f:27:e0:8f:f7:
5f:4b:f8:d3:c6:41:c1:15:f0:b1:7f:60:52:f6:c1:64:43:a0:
5b:47:a3:46:17:ef:47:ec:57:4d:b5:61:1d:32:d2:d4:38:7e:
89:5c:59:09:89:98:50:e0:d2:a8:ba:ae:70:56:4f:5c:15:4e:
e3:0b:e5:b7:86:cf:26:36:8a:0f:78:cf:8c:b1:ca:ca:c7:4b:
a0:09:56:43:9b:f4:f1:c7:e2:14:4d:09:01:18:b5:6a:a5:13:
ff:7f:bd:62:d7:42:ff:fb:04:d7:0d:32:fb:21:74:57:87:40:
97:02:8f:8f:20:11:07:2f:79:f6:b8:f6:af:45:76:5f:1a:b5:
ee:d2:99:13:89:dd:50:dd:2a:1c:89:78:7a:fa:40:8d:a6:e3:
29:51:9e:10:5a:28:30:27:9a:8f:13:07:bf:fe:b0:5a:12:fc:
e6:63:57:f7:d9:93:f8:c4:07:12:1e:53:88:5c:67:93:65:78:
76:2a:8f:da
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUIx
OEEzRENFRUI4M0E1RTM3ODAyQUIxMTJGRDA4MjdFOUE5NjJDRjAeFw0yNTA2MDMy
MTA4NTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEI2NzI5RTQwNkYyMURE
OEYxOEZENTQ5MERFMDU2MjQ3OTJDNDIyOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlMqVk7SqO7EB+ygkiSDQ5xzv82vGg91kr65NqFsRvzOt43gcv
QtckVBibJqpxBMz9cl+hPKRq2kUV8KJE7uWeSK2ASgExtY6Dx5YRLeTxmk6mwJqP
51HzJmv2KyVPNgLtndm//FxLAEWSB4GOxGfNx/pAqMrWAXmZKtEpOl/oQFtw5a4Q
xlCqDTCV1NM+L4DerXm3yRMn7G8CMk2AqpHr+o+TgtmDRZXchezkqcv9G1OyWD14
aPaRPkgb/fqbWMRdJ1tBIj2Qu8g/UitNenhaMablonuDHiVw94mAN8h1q68I2yAS
JFmQa0WnpAbvqA4SgRck87kB61A+uW+z+EtPAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUtnKeQG8h3Y8Y/VSQ3gViR5LEIp4wHwYDVR0jBBgwFoAUGxij3O64Ol43gCqx
Ev0IJ+mpYs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2
NS9HeGlqM082NE9sNDNnQ3F4RXYwSUotbXBZczguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0d4aWozTzY0T2w0M2dDcXhFdjBJSi1tcFlzOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjUvR3hpajNPNjRPbDQz
Z0NxeEV2MElKLW1wWXM4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAI0nGQ9SFAwQlffpVZeclqJH2kPv+KmfQaHV1tckdNUO2bLQHGuIFUPYKp66
80w+zioUGjREfncfzhOcLkZ1QleMp3mfJ+CP919L+NPGQcEV8LF/YFL2wWRDoFtH
o0YX70fsV021YR0y0tQ4folcWQmJmFDg0qi6rnBWT1wVTuML5beGzyY2ig94z4yx
ysrHS6AJVkOb9PHH4hRNCQEYtWqlE/9/vWLXQv/7BNcNMvshdFeHQJcCj48gEQcv
efa49q9Fdl8ate7SmROJ3VDdKhyJeHr6QI2m4ylRnhBaKDAnmo8TB7/+sFoS/OZj
V/fZk/jEBxIeU4hcZ5NleHYqj9o=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:33 2025 by rpki-client