Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
File: kXok3C9fwHVc6sn-HMXExV183fo.mft (raw, json)
Hash identifier: 831DwI6WdMTPkG+DkoftquhGYbtbBsUbb4iMyXSlkgI=
Subject key identifier: 35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
Authority key identifier: 91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
Certificate issuer: /CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Certificate serial: 0774
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
Manifest number: 0774
Signing time: Thu 05 Jun 2025 16:43:51 +0000
Manifest this update: Thu 05 Jun 2025 16:43:51 +0000
Manifest next update: Thu 05 Jun 2025 22:43:51 +0000
Files and hashes: 1: kXok3C9fwHVc6sn-HMXExV183fo.crl (hash: EOwisQIHroZtF9jLvUZAOJ7AwP/FDhSmXwXG1FG7QVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A24DC2F5FC0755CEAC9FE1CC5C4C55D7CDDFA
Validity
Not Before: Jun 5 16:43:51 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=356B69027463F8A7683B3960AD619D11CAB74444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:45:4c:b3:46:df:85:b4:aa:ff:bd:44:49:
ae:dc:9f:f2:13:71:46:0e:08:9b:42:64:81:38:a0:
3c:6c:13:19:02:51:5c:45:34:75:ca:8a:74:b0:f5:
ec:f9:8b:a6:7f:dd:78:c5:93:3d:5b:31:2c:d1:98:
22:f0:6e:7d:e6:42:15:97:11:7e:b3:da:11:e4:20:
c1:6e:64:fb:7a:05:49:2e:6a:20:56:05:a5:60:fd:
bd:ab:0d:d4:e2:9b:97:e7:f9:25:ea:f0:d5:18:3c:
5e:2e:e7:ed:f3:f8:ac:f2:0d:90:40:dc:31:12:a2:
e6:de:a0:e7:3b:55:1e:92:4d:17:37:df:53:18:21:
13:15:87:ab:bd:8d:c7:24:0a:f0:23:ee:c4:ea:03:
55:8a:6d:16:c3:13:86:61:e1:43:08:2f:8b:70:ff:
72:63:c7:a8:68:f4:a4:6f:09:7c:91:b6:9a:0a:b3:
b7:68:29:45:96:5d:17:8f:84:9f:19:05:78:d4:76:
0a:d8:9f:50:c9:5e:88:fc:e4:89:95:c1:33:b8:ec:
41:bf:55:53:b3:93:ce:b4:7b:b1:19:af:fa:d3:e7:
91:07:67:26:35:ce:74:70:27:ff:47:59:61:79:7e:
b6:8e:fb:c8:a1:9e:7d:5e:84:75:cd:cb:20:d5:98:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:69:02:74:63:F8:A7:68:3B:39:60:AD:61:9D:11:CA:B7:44:44
X509v3 Authority Key Identifier:
keyid:91:7A:24:DC:2F:5F:C0:75:5C:EA:C9:FE:1C:C5:C4:C5:5D:7C:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kXok3C9fwHVc6sn-HMXExV183fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3284/kXok3C9fwHVc6sn-HMXExV183fo.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:95:9b:ea:80:3b:52:fa:cd:52:2b:4d:de:b4:f1:15:21:
09:d2:36:62:f7:ce:bd:5f:e9:3e:d9:8a:b7:2d:e7:37:4e:57:
ac:d3:43:fd:9e:0a:6d:fe:6b:68:f4:20:de:4e:85:07:40:10:
d4:92:cb:17:32:d0:07:04:d8:6a:25:97:65:b0:48:c5:b0:06:
ee:e3:7d:0b:91:a9:93:9f:0f:14:4c:9a:56:54:3b:fd:1a:d6:
2c:be:b1:3e:fc:62:e7:97:3a:8d:37:3b:a7:39:d3:02:1d:c9:
9e:2c:e2:59:ea:0d:d5:f2:77:ad:6b:62:7e:56:4b:4b:be:9e:
15:48:53:6a:43:45:c9:f5:ae:7a:44:bf:d2:b5:1a:5d:e4:41:
0c:7b:f5:00:91:f3:77:4b:54:c3:8c:cf:68:33:58:e7:94:e9:
1c:81:93:ae:ad:b8:9f:49:57:f4:bc:5b:3d:42:3f:d3:a9:18:
83:b6:04:fa:8f:01:81:79:3c:e8:c7:49:b6:6f:e1:83:65:7b:
2e:30:bd:fd:f2:aa:d7:f0:05:c5:54:d7:60:20:91:88:58:dc:
50:fb:c1:1b:d0:6f:fb:c3:51:23:e3:2c:09:63:70:b9:d8:14:
11:19:2e:9a:52:31:2b:ef:d1:c0:37:f6:59:25:86:58:7f:21:
12:f2:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:36 2025 by rpki-client