Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
File: 43TDfhgAlB4aNVhdEMhLffz80nA.mft (raw, json)
Hash identifier: XGvTlyMbnoqDI9lEgjutjccUu8HyYxvdH+uKoiigceY=
Subject key identifier: 11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
Authority key identifier: E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
Certificate issuer: /CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Certificate serial: 0768
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
Manifest number: 0768
Signing time: Tue 03 Jun 2025 21:12:25 +0000
Manifest this update: Tue 03 Jun 2025 21:12:25 +0000
Manifest next update: Wed 04 Jun 2025 03:12:25 +0000
Files and hashes: 1: 43TDfhgAlB4aNVhdEMhLffz80nA.crl (hash: eAtx7cHaUk9YcEho+NY4D/byG5yX1crD/ptV+E+rT/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E374C37E1800941E1A35585D10C84B7DFCFCD270
Validity
Not Before: Jun 3 21:12:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=11520E6037D0A611A827119800481055018824E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:3c:14:d4:b4:c9:b8:5b:fc:8f:0f:f1:7e:
b7:3a:11:64:67:35:74:a7:b6:fa:2b:74:ad:96:63:
76:be:a2:ec:3a:10:f5:d4:d3:45:3d:6a:96:76:5d:
61:c6:3e:91:97:c9:5f:83:fa:ab:c0:ce:04:b6:f4:
4a:53:2a:72:12:28:13:c0:58:49:7e:82:7c:80:20:
22:6b:04:4e:ac:f6:31:cc:1b:e9:eb:0c:8a:65:b0:
60:1e:dd:f5:0f:a0:61:e0:9e:98:c8:1f:11:9b:2c:
62:18:5e:e4:4e:47:cc:53:a9:21:5e:b5:22:5d:a2:
84:29:fe:76:ae:f9:e2:de:a1:0f:5d:c5:09:0b:7f:
54:18:3b:c5:34:77:58:20:70:2f:61:43:0c:cd:e2:
bd:fb:c1:dc:9b:15:d4:06:15:af:bc:43:03:80:60:
87:e8:4b:aa:9c:c2:b9:e6:fb:26:0b:57:5e:c5:82:
03:bf:88:6f:dc:a9:77:f0:46:98:d3:ec:ed:d6:f2:
3c:38:4e:02:52:28:7e:23:71:79:f9:09:60:e9:70:
8f:c8:a4:96:81:9d:22:c3:5d:37:a1:b5:6c:42:53:
71:c8:0b:14:ba:1e:34:cf:60:8d:33:5e:38:77:ea:
e3:06:a5:a8:1f:36:19:61:89:e3:b1:de:3b:ec:54:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:0E:60:37:D0:A6:11:A8:27:11:98:00:48:10:55:01:88:24:E6
X509v3 Authority Key Identifier:
keyid:E3:74:C3:7E:18:00:94:1E:1A:35:58:5D:10:C8:4B:7D:FC:FC:D2:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/43TDfhgAlB4aNVhdEMhLffz80nA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3283/43TDfhgAlB4aNVhdEMhLffz80nA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:04:6c:cd:38:bd:a4:ea:df:ff:9f:ab:d0:d8:47:4f:da:
25:96:3a:b3:82:44:54:50:61:9b:1c:df:bb:44:b6:9b:ee:c3:
b5:b5:0e:99:f1:a5:50:b6:c5:c0:91:e3:34:33:bd:dc:b2:5e:
ed:aa:ec:4c:42:df:62:ef:2e:01:d2:ea:ae:d5:65:c0:40:d9:
28:dd:33:02:ba:54:3e:ec:2f:d1:e7:38:dd:4f:4c:bf:d6:3a:
77:b9:d6:dc:20:1f:0c:ba:3d:58:e7:af:07:6f:3f:5d:57:84:
33:0d:c6:69:4a:ea:74:e2:68:05:db:45:a0:88:10:c5:3b:8a:
2e:49:49:89:d3:39:ee:aa:21:8e:20:1b:4a:1f:34:53:35:85:
df:d9:e6:31:36:20:28:16:09:f9:f9:a3:aa:50:a0:75:a2:df:
58:e0:b4:cd:b7:ab:4c:3a:1f:03:1c:83:f6:8d:7e:41:76:f4:
34:0a:4b:68:c9:6a:15:bf:13:2d:eb:33:24:f9:6d:ff:c7:40:
f2:49:de:27:18:94:b4:ec:25:b3:f4:21:45:84:26:32:72:a5:
6a:3b:9f:f1:90:47:c1:84:f2:16:6b:46:91:d2:38:88:a7:e3:
77:55:6f:35:68:cb:ae:7e:63:c4:2d:e3:20:5e:7d:4f:58:c9:
9a:b7:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:40 2025 by rpki-client