Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
File: -apYG28sznwRZ_8uDAIJY5n_aHQ.mft (raw, json)
Hash identifier: 92MmAERkm565ILE1YRTwZfA6pNyXZrgbjfPWKwI1nMw=
Subject key identifier: F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
Authority key identifier: F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
Certificate issuer: /CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Certificate serial: 0702
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
Manifest number: 0702
Signing time: Tue 03 Jun 2025 21:09:01 +0000
Manifest this update: Tue 03 Jun 2025 21:09:01 +0000
Manifest next update: Wed 04 Jun 2025 03:09:01 +0000
Files and hashes: 1: -apYG28sznwRZ_8uDAIJY5n_aHQ.crl (hash: EqpOJil1+0Q4B79JHferMp/dBn2ZRfAnsq2eGE/4gdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9AA581B6F2CCE7C1167FF2E0C02096399FF6874
Validity
Not Before: Jun 3 21:09:01 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F6BE244A9EA105ACF95769A4EE1FE02A7635E532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ac:c3:8a:ec:46:74:e6:0f:fd:0b:2c:51:
0e:25:65:06:03:2f:b6:88:d0:2d:b7:b4:5c:11:2a:
c1:9c:81:61:5f:b8:c5:76:cf:d0:66:9d:49:1b:75:
39:e5:76:e3:07:4c:bb:98:71:9b:c1:b1:19:7d:b2:
47:f7:aa:25:c9:95:fc:15:8c:75:f3:d9:7f:02:26:
54:04:8b:25:4c:01:0d:9c:cf:34:6e:c8:9a:a5:3f:
a7:b9:27:63:76:cd:0c:f7:2d:e0:4d:43:fa:30:55:
c3:ca:59:eb:d9:1d:be:74:84:b4:c9:c5:55:62:40:
c4:ef:aa:3b:3a:c2:42:a2:59:e8:81:e8:ed:df:87:
4c:ae:a7:a9:23:d6:4d:8b:7a:e8:ff:91:15:c4:73:
84:02:79:2d:28:57:ec:8a:9e:ee:52:08:23:0b:9f:
26:2c:73:44:db:61:e4:db:5a:5d:80:b9:53:ca:c4:
29:a5:cf:c1:3a:73:c1:89:ea:49:38:d2:3f:f8:3f:
1e:99:df:a4:09:fd:5c:e4:0c:83:e9:48:2d:c4:72:
1d:65:92:82:40:12:e9:4e:d8:f0:db:85:a5:85:0e:
e6:7c:cb:26:76:69:44:4f:16:44:5e:8e:49:3e:7e:
74:eb:16:87:d6:8b:b9:d7:2b:6f:51:85:0b:66:d3:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:24:4A:9E:A1:05:AC:F9:57:69:A4:EE:1F:E0:2A:76:35:E5:32
X509v3 Authority Key Identifier:
keyid:F9:AA:58:1B:6F:2C:CE:7C:11:67:FF:2E:0C:02:09:63:99:FF:68:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-apYG28sznwRZ_8uDAIJY5n_aHQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3290/-apYG28sznwRZ_8uDAIJY5n_aHQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:34:a5:b2:c9:41:88:25:c6:08:dc:b1:55:01:6a:94:a5:c9:
6a:4e:eb:55:a8:39:da:da:ae:2b:28:e0:30:bd:b8:d9:39:64:
33:46:2f:3f:9a:a8:3c:4d:4b:7e:6b:ec:5c:02:93:5d:45:62:
99:89:5a:a3:71:82:df:15:c1:f5:2b:4c:14:6f:af:54:2b:3a:
92:39:8c:de:49:f6:52:12:27:68:34:15:50:83:60:3d:d9:e0:
ab:b2:be:59:7c:32:e9:0a:b8:e7:11:6d:20:81:e4:91:c2:02:
02:7e:a7:c2:03:5d:3e:29:34:05:b7:04:1b:a1:a2:43:f7:74:
e0:0b:97:e7:f8:4d:82:a2:60:b4:72:87:f0:b4:62:c8:a8:e2:
ca:43:5f:e7:38:ed:3b:95:d1:9b:e9:54:b7:2a:dc:16:bd:ed:
31:49:d8:a4:af:e7:bb:5a:a3:c8:e1:68:f5:50:ce:ad:dc:15:
7d:1e:95:a6:7d:5b:43:60:ef:f9:12:78:a9:91:9e:94:6d:6f:
7c:e5:aa:e7:40:1a:2a:63:1c:4e:ab:31:6f:31:9b:aa:bd:9d:
cb:2d:df:86:73:92:5f:9b:e7:fc:b1:ab:c9:22:63:5b:ac:95:
0f:16:1e:75:d9:b7:a0:ce:72:e1:e0:76:a8:87:8e:04:06:55:
46:a1:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:17:26 2025 by rpki-client