Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json)
Hash identifier: PMf42hae7mZBZJRem6kXTXv+98u2OsR2F+B0hlL80v8=
Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Certificate serial: 0552
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
Manifest number: 0552
Signing time: Sat 29 Mar 2025 10:30:48 +0000
Manifest this update: Sat 29 Mar 2025 10:30:48 +0000
Manifest next update: Sat 29 Mar 2025 16:30:48 +0000
Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: /s68lrVzdWjdyYtOCQj2nvo+4dvEiXOf1a4f1Gedzbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC
Validity
Not Before: Mar 29 10:30:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24:
aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e:
ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae:
75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a:
08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44:
f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a:
13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1:
9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f:
3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b:
d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99:
26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28:
e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49:
5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a:
a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a:
87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28:
6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0:
d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81
X509v3 Authority Key Identifier:
keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:f8:41:b9:f6:72:44:1b:92:95:d9:5f:04:6f:33:a2:9f:
d3:ce:79:ad:cb:25:22:1c:8a:3d:69:e0:3c:46:43:e2:e0:34:
9a:df:3c:be:99:f2:5e:6e:46:0a:99:2e:85:8a:b2:13:3b:02:
c6:f2:62:92:d9:84:ca:b9:e5:29:dc:af:a2:59:3e:86:56:d1:
87:b7:64:15:00:02:f3:11:43:44:38:7a:06:e7:db:3e:99:47:
35:b0:43:c2:8d:19:15:b9:c3:b8:ba:11:dc:a6:5c:0c:81:1c:
bd:77:e9:3e:7e:8f:3b:dc:46:01:f5:78:5c:00:d8:42:4b:a8:
08:d8:f0:04:e9:f3:27:a5:3c:68:b2:fd:d5:81:1d:35:3e:f3:
8e:5c:c7:ef:44:f3:18:c6:62:39:3b:23:27:ad:b1:84:af:68:
3c:a5:04:fc:be:3b:3e:f7:d8:31:b4:ba:11:cd:43:f7:4a:20:
0b:49:16:1a:75:46:e5:18:5f:c9:10:26:58:87:fb:eb:e8:3e:
4f:87:8b:3d:41:94:b0:cc:22:3d:fc:da:d9:88:59:d7:7b:f3:
1b:38:b6:c2:80:44:28:d3:d1:fa:eb:28:78:b1:e5:ef:cd:10:
5a:12:31:f4:fd:49:46:5e:08:a5:79:f3:1e:ce:54:e0:2d:32:
2d:98:a6:56
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw
MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNTAzMjkx
MDMwNDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1
RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r
uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE
2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ
a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w
xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB
UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM
WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw
MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT
Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEBL+EG59nJEG5KV2V8EbzOin9POea3LJSIcij1p4DxGQ+LgNJrfPL6Z8l5u
RgqZLoWKshM7AsbyYpLZhMq55Sncr6JZPoZW0Ye3ZBUAAvMRQ0Q4egbn2z6ZRzWw
Q8KNGRW5w7i6EdymXAyBHL136T5+jzvcRgH1eFwA2EJLqAjY8ATp8yelPGiy/dWB
HTU+845cx+9E8xjGYjk7IyetsYSvaDylBPy+Oz732DG0uhHNQ/dKIAtJFhp1RuUY
X8kQJliH++voPk+Hiz1BlLDMIj382tmIWdd78xs4tsKARCjT0frrKHix5e/NEFoS
MfT9SUZeCKV58x7OVOAtMi2YplY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:51 2025 by rpki-client