Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
File: DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft (raw, json)
Hash identifier: OiQ7gCqmNknWM8mvdzrHdaR601MALXUUGgYxe1SZtY4=
Subject key identifier: 8B:84:A6:71:21:C6:20:97:BA:BC:B7:C2:56:80:22:A9:90:60:7D:72
Authority key identifier: 0C:05:F7:41:1A:CD:19:38:25:F6:D1:26:57:DE:C7:14:BF:5E:49:F4
Certificate issuer: /CN=0C05F7411ACD193825F6D12657DEC714BF5E49F4
Certificate serial: 0305
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DAX3QRrNGTgl9tEmV97HFL9eSfQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
Manifest number: 0305
Signing time: Sat 29 Mar 2025 10:31:19 +0000
Manifest this update: Sat 29 Mar 2025 10:31:19 +0000
Manifest next update: Sat 29 Mar 2025 16:31:19 +0000
Files and hashes: 1: DAX3QRrNGTgl9tEmV97HFL9eSfQ.crl (hash: 6hGhuCx5Dr7RzzALMz+M56Ukq4zU2qhuvdVm5qqBRpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C05F7411ACD193825F6D12657DEC714BF5E49F4
Validity
Not Before: Mar 29 10:31:19 2025 GMT
Not After : Oct 25 01:36:21 2025 GMT
Subject: CN=8B84A67121C62097BABCB7C2568022A990607D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:28:d9:81:0b:3f:c8:63:ac:77:df:04:5d:
10:7c:f1:6a:a4:b1:63:89:64:70:eb:27:ba:46:79:
2d:dc:0a:bb:1b:f1:0a:67:69:4f:3a:7b:cc:fc:14:
dd:3a:62:6c:7a:4d:77:0e:05:87:d6:c1:9f:cb:36:
1d:9c:e4:f2:84:8a:74:80:33:a6:79:c6:de:c3:5c:
1b:dc:1b:bb:bc:af:4f:e7:38:43:18:b1:03:a4:90:
d7:fa:ec:97:7a:78:be:09:f2:82:b3:7b:ae:92:3a:
47:f9:85:41:39:9b:c6:dd:5f:fe:9f:71:cf:02:e0:
b8:5d:31:9d:84:70:e7:81:3c:5e:48:44:79:67:37:
ef:fb:36:8c:2d:cd:86:2d:f7:21:d3:28:a2:64:e6:
58:06:c2:d7:3f:f2:99:d1:78:ad:1f:3d:08:5e:bd:
74:04:84:0c:49:b9:9a:51:8c:c6:49:73:e6:43:98:
5e:ef:1b:23:b5:fd:a5:6c:b8:d9:65:72:24:27:b0:
ac:43:c3:4e:b6:88:b4:b4:66:e0:67:b9:90:75:ea:
b3:bf:9f:a3:08:3d:6d:a9:c6:aa:38:d7:b8:47:8b:
e5:7c:df:bc:34:9a:3e:4b:89:63:65:ac:28:ff:b9:
8e:4d:69:09:b9:2f:31:b2:09:52:95:90:16:7a:03:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:A6:71:21:C6:20:97:BA:BC:B7:C2:56:80:22:A9:90:60:7D:72
X509v3 Authority Key Identifier:
keyid:0C:05:F7:41:1A:CD:19:38:25:F6:D1:26:57:DE:C7:14:BF:5E:49:F4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DAX3QRrNGTgl9tEmV97HFL9eSfQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3325/DAX3QRrNGTgl9tEmV97HFL9eSfQ.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:ba:75:c4:9d:a4:94:7f:af:39:dc:cf:8f:0f:4b:3f:bf:
e0:6d:6e:30:20:6c:77:95:3b:d9:1c:d7:28:87:a1:65:0c:c2:
0a:bb:08:3f:17:f3:57:40:31:48:98:3e:04:2f:8d:3b:56:05:
c2:fb:77:1d:9e:00:43:09:bb:50:9f:70:02:3b:45:48:cc:16:
c2:87:2d:ed:b5:4e:fc:0a:c2:d5:32:65:a0:e6:6d:97:7c:a4:
96:91:2b:b9:8d:e7:a5:d1:90:ba:3b:74:f3:e6:93:5a:21:81:
39:6c:c6:0f:65:06:46:9b:ba:bf:35:63:09:62:5d:fb:5d:86:
87:bc:c7:a3:3e:ae:52:79:58:e7:af:7c:e4:8f:af:db:18:a9:
b3:63:60:fa:6f:35:e1:cf:e3:9a:4c:77:00:5f:0c:c1:da:9e:
22:5d:ad:12:e8:31:49:ef:b8:f8:62:5a:81:8d:42:93:6c:6e:
47:b9:96:da:e5:28:a5:d3:c5:ae:62:57:c2:fc:68:a7:50:c8:
5c:0e:ff:8b:04:6f:c5:d5:47:0e:62:01:59:8f:8c:7e:72:e2:
fe:55:76:26:d3:d6:a3:93:96:eb:f0:d0:90:9d:02:2b:67:3b:
19:55:67:c3:41:a5:07:fe:3c:71:0a:44:6e:c6:23:60:f3:c4:
37:8e:1d:69
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEMw
NUY3NDExQUNEMTkzODI1RjZEMTI2NTdERUM3MTRCRjVFNDlGNDAeFw0yNTAzMjkx
MDMxMTlaFw0yNTEwMjUwMTM2MjFaMDMxMTAvBgNVBAMTKDhCODRBNjcxMjFDNjIw
OTdCQUJDQjdDMjU2ODAyMkE5OTA2MDdENzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsaSjZgQs/yGOsd98EXRB88WqksWOJZHDrJ7pGeS3cCrsb8Qpn
aU86e8z8FN06Ymx6TXcOBYfWwZ/LNh2c5PKEinSAM6Z5xt7DXBvcG7u8r0/nOEMY
sQOkkNf67Jd6eL4J8oKze66SOkf5hUE5m8bdX/6fcc8C4LhdMZ2EcOeBPF5IRHln
N+/7NowtzYYt9yHTKKJk5lgGwtc/8pnReK0fPQhevXQEhAxJuZpRjMZJc+ZDmF7v
GyO1/aVsuNllciQnsKxDw062iLS0ZuBnuZB16rO/n6MIPW2pxqo417hHi+V837w0
mj5LiWNlrCj/uY5NaQm5LzGyCVKVkBZ6Aw2XAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUi4SmcSHGIJe6vLfCVoAiqZBgfXIwHwYDVR0jBBgwFoAUDAX3QRrNGTgl9tEm
V97HFL9eSfQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
NS9EQVgzUVJyTkdUZ2w5dEVtVjk3SEZMOWVTZlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RBWDNRUnJOR1RnbDl0RW1WOTdIRkw5ZVNmUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjUvREFYM1FSck5HVGds
OXRFbVY5N0hGTDllU2ZRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJeVunXEnaSUf6853M+PD0s/v+BtbjAgbHeVO9kc1yiHoWUMwgq7CD8X81dA
MUiYPgQvjTtWBcL7dx2eAEMJu1CfcAI7RUjMFsKHLe21TvwKwtUyZaDmbZd8pJaR
K7mN56XRkLo7dPPmk1ohgTlsxg9lBkabur81YwliXftdhoe8x6M+rlJ5WOevfOSP
r9sYqbNjYPpvNeHP45pMdwBfDMHaniJdrRLoMUnvuPhiWoGNQpNsbke5ltrlKKXT
xa5iV8L8aKdQyFwO/4sEb8XVRw5iAVmPjH5y4v5VdibT1qOTluvw0JCdAitnOxlV
Z8NBpQf+PHEKRG7GI2DzxDeOHWk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:10 2025 by rpki-client