Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
File: 2wnDhcqGTQSV-VGV_38HvFdh4XY.mft (raw, json)
Hash identifier: U5shP8dsGrCXr53MMS/UGhXOxl/pHggeJeicYPAHx10=
Subject key identifier: 04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
Authority key identifier: DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
Certificate issuer: /CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Certificate serial: 0381
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
Manifest number: 0381
Signing time: Tue 03 Jun 2025 21:12:51 +0000
Manifest this update: Tue 03 Jun 2025 21:12:50 +0000
Manifest next update: Wed 04 Jun 2025 03:12:50 +0000
Files and hashes: 1: 2wnDhcqGTQSV-VGV_38HvFdh4XY.crl (hash: 83pGSouObT4H9SR9RrmSbR5vdYbzH8loymbpYIjmauA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB09C385CA864D0495F95195FF7F07BC5761E176
Validity
Not Before: Jun 3 21:12:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=041AA5E81743B74248C3C196FF3D9237B7687FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:76:e4:6b:ce:10:9a:1b:62:cc:f1:71:7e:
61:36:c7:6b:20:47:da:a5:25:c4:bc:d0:40:10:60:
35:fd:34:4c:6b:c5:32:bf:8b:d8:d4:36:a3:2a:63:
51:5a:a4:3f:a8:d8:71:40:65:03:dc:8d:bc:4f:7f:
4a:aa:8c:80:55:83:73:ef:9a:4e:92:94:1d:b4:bd:
eb:37:17:2c:32:a1:35:26:32:fc:aa:00:cf:9d:d3:
49:74:19:ca:0d:92:0d:29:b5:f8:ad:88:67:db:3a:
92:17:68:83:a9:dc:51:09:5f:f6:5d:7c:b1:34:37:
f4:73:d9:01:14:88:09:e0:94:f4:59:f2:8a:01:98:
36:20:d7:59:9c:65:e5:4a:20:b6:e8:47:fb:ea:c6:
cc:13:56:a1:a0:63:d5:d4:13:e8:6e:86:04:cb:4e:
f2:0a:5d:27:82:4c:16:86:7d:b4:87:b3:aa:49:48:
df:a0:d3:20:29:9f:08:fc:64:79:84:22:16:50:d0:
63:ea:89:4d:d1:08:87:13:04:7a:17:4e:97:fc:e7:
5d:14:6d:af:83:03:16:b3:7e:23:58:a9:7e:b5:12:
ae:4b:b3:74:84:fd:7b:6a:c0:f4:49:7c:e3:d6:66:
54:b9:d7:dd:44:50:85:04:8e:78:5a:ed:2c:04:96:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:A5:E8:17:43:B7:42:48:C3:C1:96:FF:3D:92:37:B7:68:7F:F7
X509v3 Authority Key Identifier:
keyid:DB:09:C3:85:CA:86:4D:04:95:F9:51:95:FF:7F:07:BC:57:61:E1:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2wnDhcqGTQSV-VGV_38HvFdh4XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3337/2wnDhcqGTQSV-VGV_38HvFdh4XY.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c3:00:10:96:73:7e:ae:f1:0f:98:ab:2a:8b:ec:7e:0b:cd:
e8:a5:a3:d1:30:37:bf:47:60:b5:00:0d:ec:3b:81:45:53:0d:
02:2e:4c:22:4b:d1:f0:46:08:57:4c:e9:cb:7c:5c:f6:cb:ce:
80:e3:76:26:98:b1:a3:f5:2d:48:a5:c1:2a:3e:e0:38:6a:6f:
6a:76:77:0f:6d:80:d5:e7:53:a2:2c:f4:30:5a:f0:40:a4:39:
23:a1:b1:a6:2e:a3:fe:87:46:08:25:24:aa:de:89:d0:f0:ef:
01:15:2a:b5:55:ed:7e:4d:ca:c1:df:fd:cb:ae:a9:e5:1d:95:
2e:52:71:d8:5b:8a:0d:c8:d5:4d:fa:ff:06:09:26:b4:18:65:
37:17:07:a2:2e:6b:85:07:87:9a:ac:8a:3d:d1:99:4f:e6:1f:
6a:c9:91:b9:e5:10:5c:68:31:9f:1d:f0:32:b7:64:31:a3:ee:
35:6d:5c:92:03:84:a6:40:cc:4f:d3:1b:40:18:3c:cc:e6:e1:
01:29:7d:fa:97:7d:08:5f:bf:4e:7f:01:60:1b:39:41:c7:b3:
3c:75:23:ea:8b:e9:33:1b:11:93:45:90:d2:60:b2:b8:3a:4f:
c0:57:77:ce:1b:17:0b:cd:bb:93:10:e1:05:69:58:da:d6:ad:
31:4a:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:16:29 2025 by rpki-client