Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
File: _TQehBwYN3f4-R30_NoLue-gYb8.mft (raw, json)
Hash identifier: 98byPf9g9wuxyEAkqVTH5GLCzGTYPkY12S5JnAFARnI=
Subject key identifier: FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4
Authority key identifier: FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
Certificate issuer: /CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Certificate serial: 071F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
Manifest number: 0710
Signing time: Sat 29 Mar 2025 10:27:50 +0000
Manifest this update: Sat 29 Mar 2025 10:27:50 +0000
Manifest next update: Sat 29 Mar 2025 16:27:50 +0000
Files and hashes: 1: GOre_cFGATpcDQN4Ro4cvnUtpEA.roa (hash: dnfkh83L/O70YscfEWsfQ1zpqGgHDk4Pbxi04PBb1FA=)
2: Nig2C6-ESEH5jw9YAeAxZL3zYCA.roa (hash: a7hhK1BTx+vEDK72oQNWJB1xDPTxPPEQP/OjXQVnnUw=)
3: Re_kSlIA5hyxhXEnnvF813MZJjU.roa (hash: Tw04tNkwli1bZxubtz2Og8WwoZkzBeo7ZQTDXx/H9Do=)
4: Wl-YPP0_Bw6OnuMhBeS8nGaKeIU.roa (hash: ZMbrEcwRnQbyC/aTKGpWgS8bd4QkE0TQvzREVna/w1Y=)
5: _TQehBwYN3f4-R30_NoLue-gYb8.crl (hash: Bo11q5ve44+VrwW00HqqSuioMS9689h5pfhGCMRe0MQ=)
6: cMsfq1to-m5_Ihf5zGl8vtnR22s.roa (hash: 7Knm+/4qGVqXxt49fu6q2R3t+sxtZVZJ0XYX7k14wGg=)
7: vVR5aS5AnNvHUf4Jru9wF_fAb-4.roa (hash: by6p27DFsa5GI6/yaqpWcxX+prir+EPnGatBDOeFKR8=)
8: xFQanZAzjfIogzpovrnQ9OPPlFg.roa (hash: 8xouqKLGQd7UWeCPKqPAxs185rHtF7GhnH9VuU5nG8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD341E841C183777F8F91DF4FCDA0BB9EFA061BF
Validity
Not Before: Mar 29 10:27:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCF0605C2083E963AACA333893D0E2AF79B1F0F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:83:a8:6f:0c:d6:15:9b:54:af:5d:d3:72:
b1:3b:f3:83:0c:83:10:c4:2b:4e:3a:74:69:52:b9:
78:d9:0f:8a:6a:ff:e4:5d:4e:63:0c:7c:72:1e:74:
3d:2d:37:c4:67:c3:b8:0d:b8:54:69:dd:32:1c:0b:
51:9c:f6:ae:57:36:eb:0f:6f:a0:21:ce:05:e1:d7:
39:bf:88:81:93:4c:96:a8:cb:32:1f:94:15:4b:f4:
da:70:12:be:0d:59:7e:08:d2:80:b8:4b:61:8d:81:
d2:b2:57:f6:9e:38:d4:dc:4c:7b:d2:a3:b5:b0:bf:
2e:81:53:6d:71:13:a0:5e:97:c4:c6:69:f2:84:e0:
16:48:2a:c9:d2:fd:c9:55:53:d7:52:df:cc:d4:62:
b8:2a:4f:03:10:9f:58:12:ee:6c:6e:e6:f4:ce:e9:
43:c8:6c:d2:41:e3:d5:48:aa:eb:1d:23:02:21:bb:
5d:a6:82:9e:e6:8a:3b:b6:74:26:31:5e:33:26:9a:
d3:c1:9e:a7:86:69:e5:34:2e:ca:e4:bb:55:cb:aa:
fa:9c:33:44:1c:1c:47:21:de:33:73:95:53:49:e5:
5a:33:ac:07:5b:6e:f9:9e:57:57:50:a5:6b:93:db:
76:d7:66:f1:94:a3:86:c9:1f:e3:fb:91:92:cd:6c:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:60:5C:20:83:E9:63:AA:CA:33:38:93:D0:E2:AF:79:B1:F0:F4
X509v3 Authority Key Identifier:
keyid:FD:34:1E:84:1C:18:37:77:F8:F9:1D:F4:FC:DA:0B:B9:EF:A0:61:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_TQehBwYN3f4-R30_NoLue-gYb8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/_TQehBwYN3f4-R30_NoLue-gYb8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:b7:62:36:34:f2:1d:b5:38:27:86:1d:fd:27:a6:17:d1:
0c:12:34:d1:76:06:81:62:4b:f3:a4:bf:ae:94:80:63:c7:b1:
be:54:f1:98:07:37:bd:29:41:71:9d:54:a0:95:95:06:c5:84:
be:fb:9e:9c:a1:a5:35:56:89:9a:7a:f1:67:31:aa:70:53:b3:
51:1c:6b:d3:28:62:12:93:15:ea:01:4b:1a:fa:7d:6f:52:f1:
9c:35:fb:c8:93:62:66:76:72:1b:d4:c2:4d:4a:83:7d:60:5c:
40:d5:0b:02:bb:49:0f:0d:5f:9d:7e:a4:fd:7d:3d:ed:20:6b:
6e:db:e7:ed:44:56:ad:fe:56:46:52:1d:74:74:f3:ac:0c:e2:
73:b2:13:d3:d4:e1:b4:97:36:ae:fd:e2:aa:1f:31:9e:fc:7a:
24:74:73:52:91:3f:11:88:32:47:66:19:52:ef:e2:ab:80:88:
54:f6:97:b2:fa:b9:04:07:de:3e:84:20:72:ab:32:05:f5:31:
33:42:ea:46:67:1b:79:06:83:76:17:3b:52:53:cc:06:6e:df:
03:c3:dd:52:35:7e:1c:9c:bc:51:df:2f:03:49:d8:43:93:af:
2d:c3:dc:05:cf:e1:a6:78:90:8a:4a:6f:c2:61:83:90:b4:73:
bd:4f:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:18 2025 by rpki-client