Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
File: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft (raw, json)
Hash identifier: B5+k0G1w0V0Encar7t/WQBpRZmxNHpbyeePk4scH+1s=
Subject key identifier: 37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
Authority key identifier: E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
Certificate issuer: /CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Certificate serial: 0476
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
Manifest number: 0476
Signing time: Thu 05 Jun 2025 16:41:45 +0000
Manifest this update: Thu 05 Jun 2025 16:41:45 +0000
Manifest next update: Thu 05 Jun 2025 22:41:45 +0000
Files and hashes: 1: 5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl (hash: luiLN/rclknQY+bhocZgKu8Ixl8Jk4A54JFTxdHH9DE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5891DB5D3D7B47411C9B3E471D2094BFBE91366
Validity
Not Before: Jun 5 16:41:45 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=374E6DA215F1946419178EFBEBB0CF09CCB65647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:ca:54:e7:4d:73:5a:ac:22:15:83:51:f6:
43:e8:dd:9a:c7:9f:fe:1f:a4:b0:fd:60:db:38:de:
23:ce:ed:f3:d0:2f:e1:da:2b:96:de:79:fe:8b:63:
a5:9f:a9:6b:d4:36:96:c6:4e:d9:9d:a3:cd:ee:35:
eb:36:0b:01:1c:fc:82:e0:39:ce:01:65:aa:66:28:
31:e6:19:f1:4e:5a:23:80:48:79:2d:7e:32:34:af:
6c:5e:cf:3d:63:eb:3d:4c:59:35:53:ca:1c:10:53:
4b:e7:64:e7:6f:21:ee:87:8b:4d:63:7f:3d:15:3d:
78:23:4a:9b:70:2d:8b:48:3d:77:20:d0:d9:44:25:
0e:a3:db:07:c4:29:27:fc:c0:c4:4c:83:86:f7:8d:
10:95:a8:55:0e:27:0f:88:15:69:fe:93:d1:da:67:
ec:55:1e:07:be:f7:93:03:9e:58:76:ae:5b:12:d0:
5d:08:60:d6:5b:0e:00:e1:6d:32:1d:ba:80:dc:47:
13:ca:5a:8f:63:f5:35:eb:6e:74:82:ed:87:76:93:
a0:e4:5d:65:d9:28:11:2f:e3:45:f1:5c:ef:8c:40:
1b:49:69:6f:d4:6b:f9:dd:2a:b9:7f:9a:75:f8:a4:
30:a7:44:03:21:61:7e:00:40:70:b4:36:0f:f2:3b:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:6D:A2:15:F1:94:64:19:17:8E:FB:EB:B0:CF:09:CC:B6:56:47
X509v3 Authority Key Identifier:
keyid:E5:89:1D:B5:D3:D7:B4:74:11:C9:B3:E4:71:D2:09:4B:FB:E9:13:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5YkdtdPXtHQRybPkcdIJS_vpE2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3324/5YkdtdPXtHQRybPkcdIJS_vpE2Y.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:90:42:1d:10:e3:c9:1a:ce:27:03:9c:08:3a:b7:93:f3:47:
72:67:94:03:2b:2a:2a:26:e9:8f:2c:c5:5a:35:4f:2c:05:b9:
e4:5c:ff:ce:6d:34:4e:be:17:ef:f2:3e:1b:fc:34:cd:d3:ef:
ee:e0:a3:e2:0c:7e:88:74:71:19:59:22:30:2d:13:e5:87:9c:
59:23:56:14:5a:3e:18:f6:72:52:7a:f3:93:65:fb:bd:f1:8a:
35:90:3c:e2:e1:44:8a:ec:ea:9b:f2:25:ba:6e:4b:de:9b:50:
cc:4d:f6:84:18:5f:fd:27:79:bf:88:94:7b:ff:56:ca:20:60:
d9:55:dd:00:da:f2:69:07:db:71:5a:0d:cf:b3:e7:4e:0d:46:
47:16:ea:1f:7f:2a:83:c2:91:87:c5:6d:fe:0f:e2:10:ca:8b:
0d:05:e3:b1:48:ec:c1:ea:43:8f:6d:c4:bb:c2:d1:17:64:de:
1e:3c:8d:f9:b9:cf:58:18:25:3e:c1:0f:88:19:99:41:ae:b2:
6a:6b:b1:6d:98:4a:74:14:16:6c:94:52:93:2b:52:fb:51:d2:
29:af:44:8c:2a:30:2b:b3:cb:a8:3c:6d:a3:0d:2b:87:ef:a6:
d2:50:d1:e3:d5:cd:40:bb:41:83:d3:e1:ff:41:cf:fd:20:3f:
bf:3d:90:e5
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTU4
OTFEQjVEM0Q3QjQ3NDExQzlCM0U0NzFEMjA5NEJGQkU5MTM2NjAeFw0yNTA2MDUx
NjQxNDVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM3NEU2REEyMTVGMTk0
NjQxOTE3OEVGQkVCQjBDRjA5Q0NCNjU2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWEMpU501zWqwiFYNR9kPo3ZrHn/4fpLD9YNs43iPO7fPQL+Ha
K5beef6LY6WfqWvUNpbGTtmdo83uNes2CwEc/ILgOc4BZapmKDHmGfFOWiOASHkt
fjI0r2xezz1j6z1MWTVTyhwQU0vnZOdvIe6Hi01jfz0VPXgjSptwLYtIPXcg0NlE
JQ6j2wfEKSf8wMRMg4b3jRCVqFUOJw+IFWn+k9HaZ+xVHge+95MDnlh2rlsS0F0I
YNZbDgDhbTIduoDcRxPKWo9j9TXrbnSC7Yd2k6DkXWXZKBEv40XxXO+MQBtJaW/U
a/ndKrl/mnX4pDCnRAMhYX4AQHC0Ng/yO9qJAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUN05tohXxlGQZF47767DPCcy2VkcwHwYDVR0jBBgwFoAU5YkdtdPXtHQRybPk
cdIJS/vpE2YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
NC81WWtkdGRQWHRIUVJ5YlBrY2RJSlNfdnBFMlkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzVZa2R0ZFBYdEhRUnliUGtjZElKU192cEUyWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjQvNVlrZHRkUFh0SFFS
eWJQa2NkSUpTX3ZwRTJZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHiQQh0Q48kazicDnAg6t5PzR3JnlAMrKiom6Y8sxVo1TywFueRc/85tNE6+
F+/yPhv8NM3T7+7go+IMfoh0cRlZIjAtE+WHnFkjVhRaPhj2clJ685Nl+73xijWQ
POLhRIrs6pvyJbpuS96bUMxN9oQYX/0neb+IlHv/VsogYNlV3QDa8mkH23FaDc+z
504NRkcW6h9/KoPCkYfFbf4P4hDKiw0F47FI7MHqQ49txLvC0Rdk3h48jfm5z1gY
JT7BD4gZmUGusmprsW2YSnQUFmyUUpMrUvtR0imvRIwqMCuzy6g8baMNK4fvptJQ
0ePVzUC7QYPT4f9Bz/0gP789kOU=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:05 2025 by rpki-client