Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft
File: Abqns7epjYr5LS2VVnUO4m3D7pk.mft (raw, json)
Hash identifier: vyc6d557fwx+PL0VzGfUMMygXqPVsNB9XVaiwaT0bAc=
Subject key identifier: 67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9
Authority key identifier: 01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99
Certificate issuer: /CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99
Certificate serial: 012D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft
Manifest number: 012D
Signing time: Sun 20 Jul 2025 16:09:13 +0000
Manifest this update: Sun 20 Jul 2025 16:09:13 +0000
Manifest next update: Sun 20 Jul 2025 22:09:13 +0000
Files and hashes: 1: Abqns7epjYr5LS2VVnUO4m3D7pk.crl (hash: wlRZdYRMYfH28PlZgFaX6mSm3JsWyQUyQ0MovT0VY54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01BAA7B3B7A98D8AF92D2D9556750EE26DC3EE99
Validity
Not Before: Jul 20 16:09:13 2025 GMT
Not After : May 22 08:46:04 2026 GMT
Subject: CN=67E18440F931EBE2EE9A7C99A430455C87EFACE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:f8:b1:c8:11:df:fb:17:31:b3:15:a1:51:
dd:64:77:f7:47:83:44:72:2e:46:82:30:e5:80:1e:
3b:88:bd:16:ad:12:9f:38:0e:f8:53:3c:4c:e9:3c:
1d:9e:20:08:ed:81:15:e3:b8:1f:55:c3:e6:2c:61:
9e:2a:70:da:47:eb:ce:eb:e0:89:6a:2a:5c:51:5d:
20:b4:08:47:69:e7:0b:1f:a8:b8:d2:1c:5e:b8:05:
7c:0e:3d:92:9e:1e:89:63:53:d6:81:ca:58:5c:9f:
f1:37:ce:59:eb:73:36:0e:db:8f:f1:45:29:54:d6:
8c:08:25:34:c1:88:0b:6b:d2:c0:3a:a7:7b:ba:e3:
fb:ce:27:38:98:8a:6d:5f:56:89:59:5c:8e:1f:2d:
33:ed:9b:ea:ce:9c:36:fb:76:a8:c1:ea:80:4f:8f:
4e:a2:75:be:11:05:7b:91:fa:cc:14:85:b7:2d:a7:
22:8f:7d:cf:9b:fa:26:5a:48:95:8b:62:4e:a3:a6:
31:3c:0f:60:09:51:14:84:e2:21:9d:6c:7d:7d:1c:
aa:42:61:e5:e2:10:11:9a:46:4b:8e:b6:e1:d6:16:
6e:39:f7:d4:64:8d:a2:fa:51:b5:45:82:1c:64:05:
cb:2d:62:eb:cd:19:76:86:91:c4:8e:44:c4:6e:26:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:84:40:F9:31:EB:E2:EE:9A:7C:99:A4:30:45:5C:87:EF:AC:E9
X509v3 Authority Key Identifier:
keyid:01:BA:A7:B3:B7:A9:8D:8A:F9:2D:2D:95:56:75:0E:E2:6D:C3:EE:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Abqns7epjYr5LS2VVnUO4m3D7pk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3372/Abqns7epjYr5LS2VVnUO4m3D7pk.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:c0:80:bd:a0:b4:78:36:69:a1:fa:42:7e:d6:a5:5b:97:
50:d0:84:f7:74:17:fa:16:2f:fb:30:df:b4:83:aa:e8:d5:80:
28:53:7a:7c:fc:25:f1:22:21:2a:48:3a:d5:4b:ff:fb:f5:8b:
58:9c:81:20:60:1b:cf:28:65:39:54:a3:2e:f2:f9:04:70:a6:
c7:6b:a7:9c:27:b4:a6:8c:64:59:1e:be:dd:e8:42:ee:16:09:
25:b5:9d:07:d3:37:ec:c5:87:ed:27:2d:99:da:91:58:77:63:
17:35:54:83:94:9e:1b:d5:56:b0:36:f0:ff:f2:71:c6:21:a6:
e1:aa:33:0a:fd:89:15:f9:fd:88:af:60:15:67:56:f2:1b:5f:
c2:70:46:39:09:ac:da:d3:d7:69:18:d3:92:dc:37:c2:fd:4b:
0b:e4:8e:a3:e5:d9:20:a7:77:47:36:fe:76:f3:67:e5:ad:b7:
c3:9f:95:8d:31:12:71:3a:ab:96:63:da:1e:7b:f9:fb:e2:0d:
b2:f1:25:e8:2c:65:a2:43:e8:54:a4:3c:3b:78:a0:c6:a1:d3:
00:0f:77:06:e2:42:82:ff:00:42:28:09:88:b9:dc:bf:6f:38:
04:54:2c:52:f8:28:b0:0c:89:ab:f5:89:79:b4:27:61:25:88:
b3:38:b3:60
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFC
QUE3QjNCN0E5OEQ4QUY5MkQyRDk1NTY3NTBFRTI2REMzRUU5OTAeFw0yNTA3MjAx
NjA5MTNaFw0yNjA1MjIwODQ2MDRaMDMxMTAvBgNVBAMTKDY3RTE4NDQwRjkzMUVC
RTJFRTlBN0M5OUE0MzA0NTVDODdFRkFDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRqfixyBHf+xcxsxWhUd1kd/dHg0RyLkaCMOWAHjuIvRatEp84
DvhTPEzpPB2eIAjtgRXjuB9Vw+YsYZ4qcNpH687r4IlqKlxRXSC0CEdp5wsfqLjS
HF64BXwOPZKeHoljU9aBylhcn/E3zlnrczYO24/xRSlU1owIJTTBiAtr0sA6p3u6
4/vOJziYim1fVolZXI4fLTPtm+rOnDb7dqjB6oBPj06idb4RBXuR+swUhbctpyKP
fc+b+iZaSJWLYk6jpjE8D2AJURSE4iGdbH19HKpCYeXiEBGaRkuOtuHWFm4599Rk
jaL6UbVFghxkBcstYuvNGXaGkcSORMRuJvDrAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUZ+GEQPkx6+LumnyZpDBFXIfvrOkwHwYDVR0jBBgwFoAUAbqns7epjYr5LS2V
VnUO4m3D7pkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3
Mi9BYnFuczdlcGpZcjVMUzJWVm5VTzRtM0Q3cGsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FicW5zN2VwallyNUxTMlZWblVPNG0zRDdway5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzIvQWJxbnM3ZXBqWXI1
TFMyVlZuVU80bTNEN3BrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHrSwIC9oLR4Nmmh+kJ+1qVbl1DQhPd0F/oWL/sw37SDqujVgChTenz8JfEi
ISpIOtVL//v1i1icgSBgG88oZTlUoy7y+QRwpsdrp5wntKaMZFkevt3oQu4WCSW1
nQfTN+zFh+0nLZnakVh3Yxc1VIOUnhvVVrA28P/yccYhpuGqMwr9iRX5/YivYBVn
VvIbX8JwRjkJrNrT12kY05LcN8L9SwvkjqPl2SCnd0c2/nbzZ+Wtt8OflY0xEnE6
q5Zj2h57+fviDbLxJegsZaJD6FSkPDt4oMah0wAPdwbiQoL/AEIoCYi53L9vOARU
LFL4KLAMiav1iXm0J2EliLM4s2A=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:58 2025 by rpki-client